hxxp://arras[.]io/#wpa

Analysis

max time kernel
1776s
max time network
1785s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2023, 17:53 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://arras.io/#wpa

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1043950675-1972537973-2972532878-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	752	firefox.exe
Token: SeDebugPrivilege	752	firefox.exe
Token: SeDebugPrivilege	752	firefox.exe
Token: SeDebugPrivilege	752	firefox.exe
Token: SeDebugPrivilege	752	firefox.exe
Token: SeDebugPrivilege	752	firefox.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
752	firefox.exe
752	firefox.exe
752	firefox.exe
752	firefox.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
752	firefox.exe
752	firefox.exe
752	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
752	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 1984 wrote to memory of 752	1984	firefox.exe	83
PID 752 wrote to memory of 2692	752	firefox.exe	84
PID 752 wrote to memory of 2692	752	firefox.exe	84
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 3480	752	firefox.exe	86
PID 752 wrote to memory of 1644	752	firefox.exe	87
PID 752 wrote to memory of 1644	752	firefox.exe	87
PID 752 wrote to memory of 1644	752	firefox.exe	87

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" http://arras.io/#wpa
1⤵
- Suspicious use of WriteProcessMemory
PID:1984
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" http://arras.io/#wpa
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:752
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.0.1889948966\1533620954" -parentBuildID 20221007134813 -prefsHandle 1828 -prefMapHandle 1808 -prefsLen 20938 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {aa618711-df8f-48e1-8261-a8eb4ff7ab87} 752 "\\.\pipe\gecko-crash-server-pipe.752" 1908 271fdfdcf58 gpu
    3⤵
    PID:2692
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.1.136729391\529517579" -parentBuildID 20221007134813 -prefsHandle 2304 -prefMapHandle 2292 -prefsLen 21754 -prefMapSize 232675 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6f6eda08-fd44-46e3-8a30-667b5992b749} 752 "\\.\pipe\gecko-crash-server-pipe.752" 2332 271f1871c58 socket
    3⤵
    PID:3480
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.2.1350954174\657344210" -childID 1 -isForBrowser -prefsHandle 3160 -prefMapHandle 2976 -prefsLen 21857 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1d2bc49a-24d1-4234-a20e-4a166a5a4f89} 752 "\\.\pipe\gecko-crash-server-pipe.752" 3156 27181eddc58 tab
    3⤵
    PID:1644
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.3.2093989971\1847079198" -childID 2 -isForBrowser -prefsHandle 3548 -prefMapHandle 3544 -prefsLen 26437 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {435d02d5-94e8-4203-ae82-fd0e3272a3f7} 752 "\\.\pipe\gecko-crash-server-pipe.752" 3556 271f1861958 tab
    3⤵
    PID:3424
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.4.1891901663\413707934" -childID 3 -isForBrowser -prefsHandle 4784 -prefMapHandle 4780 -prefsLen 26496 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4ae1fd97-2ecc-4fbb-a1f9-95ab903c2f0c} 752 "\\.\pipe\gecko-crash-server-pipe.752" 4796 271848ec558 tab
    3⤵
    PID:5104
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.5.423027765\657886653" -childID 4 -isForBrowser -prefsHandle 5136 -prefMapHandle 5132 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {84170239-7331-4d0d-ba27-65a8d1033815} 752 "\\.\pipe\gecko-crash-server-pipe.752" 5148 271857c2958 tab
    3⤵
    PID:4660
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.7.461064518\95067316" -childID 6 -isForBrowser -prefsHandle 5468 -prefMapHandle 5540 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d971c005-3ead-4949-980a-e6c8ace33b1b} 752 "\\.\pipe\gecko-crash-server-pipe.752" 5548 27185ce5458 tab
    3⤵
    PID:220
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.6.1458884331\1792709823" -childID 5 -isForBrowser -prefsHandle 5356 -prefMapHandle 5168 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bbfc6768-1e22-4fab-9d24-a30c4b4ea265} 752 "\\.\pipe\gecko-crash-server-pipe.752" 5364 27185ce7e58 tab
    3⤵
    PID:2484
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.8.601809779\1893877372" -childID 7 -isForBrowser -prefsHandle 5356 -prefMapHandle 5520 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7986a855-0881-4035-b021-2b161a2ed620} 752 "\\.\pipe\gecko-crash-server-pipe.752" 5760 2718638f858 tab
    3⤵
    PID:4804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.9.2023962054\171590092" -parentBuildID 20221007134813 -prefsHandle 9400 -prefMapHandle 9944 -prefsLen 26577 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f782e991-750e-4a6a-9556-b60d2ba094df} 752 "\\.\pipe\gecko-crash-server-pipe.752" 5896 271868c4058 rdd
    3⤵
    PID:3432
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.10.471807035\656204332" -childID 8 -isForBrowser -prefsHandle 9328 -prefMapHandle 9344 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a62dd289-cce4-4ab5-bb0a-aa323422180e} 752 "\\.\pipe\gecko-crash-server-pipe.752" 9776 27186e7c758 tab
    3⤵
    PID:3752
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.12.737116661\878251901" -childID 10 -isForBrowser -prefsHandle 9676 -prefMapHandle 9672 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3642ed31-dffa-4ec5-9689-f3010616aeaa} 752 "\\.\pipe\gecko-crash-server-pipe.752" 5068 27186c79158 tab
    3⤵
    PID:4620
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.11.1705507761\2097824110" -childID 9 -isForBrowser -prefsHandle 9732 -prefMapHandle 9056 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {31355c08-1119-47ce-ad6e-4531847003c4} 752 "\\.\pipe\gecko-crash-server-pipe.752" 9720 27186675b58 tab
    3⤵
    PID:4716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.14.1996331257\22855854" -childID 12 -isForBrowser -prefsHandle 8748 -prefMapHandle 8744 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b54df98c-a227-4364-944b-a3128d26998a} 752 "\\.\pipe\gecko-crash-server-pipe.752" 9652 271877fa158 tab
    3⤵
    PID:2056
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.13.1981871229\1871153155" -childID 11 -isForBrowser -prefsHandle 8808 -prefMapHandle 9680 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cc164df3-0793-4f24-8cb2-5c5bfc34206e} 752 "\\.\pipe\gecko-crash-server-pipe.752" 8788 271877f9558 tab
    3⤵
    PID:4612
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.15.1105621668\950765889" -childID 13 -isForBrowser -prefsHandle 8576 -prefMapHandle 8496 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {84f2679a-5888-4335-b8be-1a678b42105e} 752 "\\.\pipe\gecko-crash-server-pipe.752" 9652 2718085b558 tab
    3⤵
    PID:3280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.18.1008718610\464178219" -childID 16 -isForBrowser -prefsHandle 8220 -prefMapHandle 8216 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b6d1133b-e155-4818-9b3f-dbcc27a45bdb} 752 "\\.\pipe\gecko-crash-server-pipe.752" 8224 27188031858 tab
    3⤵
    PID:5132
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.17.309875636\653400168" -childID 15 -isForBrowser -prefsHandle 8416 -prefMapHandle 8412 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {675743e1-ece4-4ab6-9cef-5de873cc7ce6} 752 "\\.\pipe\gecko-crash-server-pipe.752" 8428 2718610e158 tab
    3⤵
    PID:5124
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.16.1658187598\1991912735" -childID 14 -isForBrowser -prefsHandle 7212 -prefMapHandle 8524 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {220c8590-602e-4d05-befa-62d3f807018e} 752 "\\.\pipe\gecko-crash-server-pipe.752" 7104 27187eac258 tab
    3⤵
    PID:1280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.19.1073816138\1162099743" -childID 17 -isForBrowser -prefsHandle 6984 -prefMapHandle 6980 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3fa3497d-99bb-4f7c-8c7e-215c90bbac8a} 752 "\\.\pipe\gecko-crash-server-pipe.752" 2824 27185745e58 tab
    3⤵
    PID:5500
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.20.353365068\1512300481" -childID 18 -isForBrowser -prefsHandle 3496 -prefMapHandle 2776 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e089f46f-ebbd-47f5-a6c4-1da0f2f2e162} 752 "\\.\pipe\gecko-crash-server-pipe.752" 7896 271868c2e58 tab
    3⤵
    PID:5660
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.24.1767832898\918843431" -childID 22 -isForBrowser -prefsHandle 7808 -prefMapHandle 7804 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ab039548-da6d-4eda-acaf-fd0df0c57d1f} 752 "\\.\pipe\gecko-crash-server-pipe.752" 7700 2718704a458 tab
    3⤵
    PID:5732
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.23.1198216957\1552170138" -childID 21 -isForBrowser -prefsHandle 7764 -prefMapHandle 7760 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {24431808-1250-4301-8365-0cd6f32fede7} 752 "\\.\pipe\gecko-crash-server-pipe.752" 6800 27186e37b58 tab
    3⤵
    PID:5724
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.22.211924316\1278317630" -childID 20 -isForBrowser -prefsHandle 8852 -prefMapHandle 8816 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3b82d809-ddf0-41c9-ba38-305b41fb10a1} 752 "\\.\pipe\gecko-crash-server-pipe.752" 6932 2718704bf58 tab
    3⤵
    PID:5716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.21.309748344\440331962" -childID 19 -isForBrowser -prefsHandle 8240 -prefMapHandle 3504 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9d018644-d7c9-4d0f-9f63-756ce608a24d} 752 "\\.\pipe\gecko-crash-server-pipe.752" 2736 27186e7b858 tab
    3⤵
    PID:5692
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.27.880413579\1705210215" -childID 25 -isForBrowser -prefsHandle 6152 -prefMapHandle 6148 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e6bcc450-ca69-49d8-af9d-10fe0bdc8f82} 752 "\\.\pipe\gecko-crash-server-pipe.752" 6160 27188bb8558 tab
    3⤵
    PID:3924
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.26.1975821329\1803593058" -childID 24 -isForBrowser -prefsHandle 6348 -prefMapHandle 6344 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {018d2376-8550-4c5b-a915-cfbbe7c8830d} 752 "\\.\pipe\gecko-crash-server-pipe.752" 6356 271889e6e58 tab
    3⤵
    PID:5648
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.25.1650216365\1853052106" -childID 23 -isForBrowser -prefsHandle 7700 -prefMapHandle 7804 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e51319ff-836e-4136-88ab-b9e80b520413} 752 "\\.\pipe\gecko-crash-server-pipe.752" 7668 271889e5058 tab
    3⤵
    PID:5640
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.28.639623347\1115129181" -childID 26 -isForBrowser -prefsHandle 5972 -prefMapHandle 5968 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8fe4c4b6-2f7e-431b-870a-8e5acf44943a} 752 "\\.\pipe\gecko-crash-server-pipe.752" 5984 2718610db58 tab
    3⤵
    PID:6820
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.30.509183903\960783868" -childID 28 -isForBrowser -prefsHandle 6088 -prefMapHandle 7384 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {65bc6f76-a311-42b2-8dff-565a5041200f} 752 "\\.\pipe\gecko-crash-server-pipe.752" 6096 27187575f58 tab
    3⤵
    PID:6388
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="752.29.1282324711\1065545419" -childID 27 -isForBrowser -prefsHandle 4536 -prefMapHandle 4656 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1424 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c8e90b50-0e64-4531-8288-8cfc8185eabc} 752 "\\.\pipe\gecko-crash-server-pipe.752" 4644 271877fb358 tab
    3⤵
    PID:6400

Network

DNS

arras.io

firefox.exe

Remote address:

8.8.8.8:53

Request

arras.io

IN A

Response

arras.io

IN A

188.114.97.0

arras.io

IN A

188.114.96.0
DNS

contile.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

contile.services.mozilla.com

IN A

Response

contile.services.mozilla.com

IN A

34.117.237.239
DNS

229.1.101.151.in-addr.arpa

firefox.exe

Remote address:

8.8.8.8:53

Request

229.1.101.151.in-addr.arpa

IN PTR

Response
DNS

getpocket.cdn.mozilla.net

firefox.exe

Remote address:

8.8.8.8:53

Request

getpocket.cdn.mozilla.net

IN A

Response

getpocket.cdn.mozilla.net

IN CNAME

getpocket-cdn.prod.mozaws.net

getpocket-cdn.prod.mozaws.net

IN CNAME

prod.pocket.prod.cloudops.mozgcp.net

prod.pocket.prod.cloudops.mozgcp.net

IN A

34.120.5.221
DNS

content-signature-2.cdn.mozilla.net

firefox.exe

Remote address:

8.8.8.8:53

Request

content-signature-2.cdn.mozilla.net

IN A

Response

content-signature-2.cdn.mozilla.net

IN CNAME

content-signature-chains.prod.autograph.services.mozaws.net

content-signature-chains.prod.autograph.services.mozaws.net

IN CNAME

prod.content-signature-chains.prod.webservices.mozgcp.net

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

shavar.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.services.mozilla.com

IN A

Response

shavar.services.mozilla.com

IN CNAME

shavar.prod.mozaws.net

shavar.prod.mozaws.net

IN A

52.39.153.93

shavar.prod.mozaws.net

IN A

52.11.233.163

shavar.prod.mozaws.net

IN A

54.185.202.81
DNS

push.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

push.services.mozilla.com

IN A

Response

push.services.mozilla.com

IN CNAME

autopush.prod.mozaws.net

autopush.prod.mozaws.net

IN A

34.117.65.55
DNS

firefox.settings.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox.settings.services.mozilla.com

IN A

Response

firefox.settings.services.mozilla.com

IN CNAME

prod.remote-settings.prod.webservices.mozgcp.net

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN A

Response

shavar.prod.mozaws.net

IN A

52.39.153.93

shavar.prod.mozaws.net

IN A

52.11.233.163

shavar.prod.mozaws.net

IN A

54.185.202.81
GET

http://arras.io/

firefox.exe

Remote address:

188.114.97.0:80

Request

GET / HTTP/1.1
Host: arras.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

Response

HTTP/1.1 301 Moved Permanently

Date: Sun, 09 Jul 2023 17:53:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 09 Jul 2023 18:53:57 GMT
Location: https://arras.io/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yN%2BKeClaGvLhtik29Tkhurc6W93rrLF0jrCczuRzKT%2FzS2335usn41qqvI0yfk3Ye9ZGyA8ZncXnRgFQQJy2hyva7bCxzAiH2NFBkugvk%2BlEgF7rkReRwj2siQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7e426dedcddf1caa-AMS
alt-svc: h2=":443"; ma=60
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
if-modified-since: Fri, 25 Mar 2022 17:45:46 GMT
if-none-match: "1648230346554"
te: trailers

Response

HTTP/2.0 200

server: nginx
content-length: 232
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
via: 1.1 google
date: Sun, 09 Jul 2023 17:31:46 GMT
age: 1333
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json
GET

https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?collection=partitioning-exempt-urls&bucket=main&_expected=0

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/monitor/collections/changes/changeset?collection=partitioning-exempt-urls&bucket=main&_expected=0 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx
content-length: 232
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
via: 1.1 google
date: Sun, 09 Jul 2023 17:31:46 GMT
age: 1333
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1688730865816

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1688730865816 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx
content-length: 232
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
via: 1.1 google
date: Sun, 09 Jul 2023 17:31:46 GMT
age: 1333
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json
GET

https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221688914634637%22

firefox.exe

Remote address:

34.149.100.209:443

Response

HTTP/2.0 200

server: nginx
content-length: 232
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
via: 1.1 google
date: Sun, 09 Jul 2023 17:31:46 GMT
age: 1333
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json

Request

GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221688914634637%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22

firefox.exe

Remote address:

34.149.100.209:443

Response

HTTP/2.0 200

server: nginx
content-length: 232
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
via: 1.1 google
date: Sun, 09 Jul 2023 17:31:46 GMT
age: 1333
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json

Request

GET /v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22

firefox.exe

Remote address:

34.149.100.209:443

Response

HTTP/2.0 200

server: nginx
content-length: 232
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
via: 1.1 google
date: Sun, 09 Jul 2023 17:31:46 GMT
age: 1333
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json

Request

GET /v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22

firefox.exe

Remote address:

34.149.100.209:443

Response

HTTP/2.0 200

server: nginx
content-length: 1875
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
via: 1.1 google
date: Sun, 09 Jul 2023 17:42:01 GMT
age: 718
last-modified: Fri, 07 Jul 2023 11:54:25 GMT
content-type: application/json
last-modified: Sun, 09 Jul 2023 14:57:14 GMT
content-type: application/json

Request

GET /v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1683667257606

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1683667257606 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-telemetry-v2/changeset?_expected=1684879440536&_since=%221661199890666%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/search-telemetry-v2/changeset?_expected=1684879440536&_since=%221661199890666%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1687526306160&_since=%221661199949574%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/search-config/changeset?_expected=1687526306160&_since=%221661199949574%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/addons-manager-settings/changeset?_expected=1688747728721

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/addons-manager-settings/changeset?_expected=1688747728721 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1688601670625

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1688601670625 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/devtools-compatibility-browsers/changeset?_expected=1687359575566&_since=%221662648201700%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/devtools-compatibility-browsers/changeset?_expected=1687359575566&_since=%221662648201700%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/sites-classification?_expected=1544035467383

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/sites-classification?_expected=1544035467383 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/anti-tracking-url-decoration?_expected=1564511755134

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/anti-tracking-url-decoration?_expected=1564511755134 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/public-suffix-list/changeset?_expected=1575468539758

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/public-suffix-list/changeset?_expected=1575468539758 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-default-override-allowlist?_expected=1595254618540

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/search-default-override-allowlist?_expected=1595254618540 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/url-classifier-skip-urls?_expected=1606870304609

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/url-classifier-skip-urls?_expected=1606870304609 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/pioneer-study-addons-v1/changeset?_expected=1607042143590

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/pioneer-study-addons-v1/changeset?_expected=1607042143590 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/top-sites?_expected=1647020600359

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/top-sites?_expected=1647020600359 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/doh-providers/changeset?_expected=1647549722107&_since=%221621943542621%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/doh-providers/changeset?_expected=1647549722107&_since=%221621943542621%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/doh-config/changeset?_expected=1651753780606&_since=%221621943462970%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/doh-config/changeset?_expected=1651753780606&_since=%221621943462970%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/devtools-devices?_expected=1653469171354

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/devtools-devices?_expected=1653469171354 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/websites-with-shared-credential-backends?_expected=1659924446436

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/websites-with-shared-credential-backends?_expected=1659924446436 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/cert-revocations/changeset?_expected=1688914634637

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/security-state/collections/cert-revocations/changeset?_expected=1688914634637 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/onecrl/changeset?_expected=1687555476962&_since=%221658781354245%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/security-state/collections/onecrl/changeset?_expected=1687555476962&_since=%221658781354245%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/intermediates/changeset?_expected=1688741823367&_since=%221664891823141%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/security-state/collections/intermediates/changeset?_expected=1688741823367&_since=%221664891823141%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?collection=personality-provider-recipe&bucket=main&_expected=0

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/monitor/collections/changes/changeset?collection=personality-provider-recipe&bucket=main&_expected=0 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/personality-provider-recipe/changeset?_expected=1603308987530

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/personality-provider-recipe/changeset?_expected=1603308987530 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?collection=personality-provider-models&bucket=main&_expected=0

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/monitor/collections/changes/changeset?collection=personality-provider-models&bucket=main&_expected=0 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/personality-provider-models/changeset?_expected=1581703205374

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/personality-provider-models/changeset?_expected=1581703205374 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN AAAA

Response
DNS

autopush.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

autopush.prod.mozaws.net

IN A

Response

autopush.prod.mozaws.net

IN A

34.117.65.55
GET

https://contile.services.mozilla.com/v1/tiles

firefox.exe

Remote address:

34.117.237.239:443

Request

GET /v1/tiles HTTP/2.0
host: contile.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
GET

https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=IE&count=30

firefox.exe

Remote address:

34.120.5.221:443

Request

GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=IE&count=30 HTTP/2.0
host: getpocket.cdn.mozilla.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

2600:1901:0:92a9::
DNS

arras.io

firefox.exe

Remote address:

8.8.8.8:53

Request

arras.io

IN A

Response

arras.io

IN A

188.114.96.0

arras.io

IN A

188.114.97.0
DNS

autopush.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

autopush.prod.mozaws.net

IN AAAA

Response
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN A

Response

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
GET

https://arras.io/

firefox.exe

Remote address:

188.114.97.0:443

Request

GET / HTTP/2.0
host: arras.io
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: none
sec-fetch-user: ?1
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:53:57 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=0, must-revalidate
etag: W/"bcf460c196924665b71daa25b184f89a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EnLlK3ZY%2FsnF4dfC6BeMg5uyWvlJhJQlI4X2pEteLuYpCf4M2AolmBF8DV1CAp7cr2Osm35HpNeGm0LXl6MhAYsNS7jNDj6XYkoE3eGo%2BY3W5yJ5WgQ%2FtxY2Qg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7e426def69591c83-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://push.services.mozilla.com/

firefox.exe

Remote address:

34.117.65.55:443

Request

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3TCbPcbZIdaYpdH4nX9Z7A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

Response

HTTP/1.1 101 Switching Protocols

Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: EpxqQESkU76Scj2zHwqF6VkThPw=
Date: Sun, 09 Jul 2023 17:53:57 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
DNS

contile.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

contile.services.mozilla.com

IN A

Response

contile.services.mozilla.com

IN A

34.117.237.239
DNS

arras.io

firefox.exe

Remote address:

8.8.8.8:53

Request

arras.io

IN AAAA

Response

arras.io

IN AAAA

2a06:98c1:3121::

arras.io

IN AAAA

2a06:98c1:3120::
DNS

visitor-fra02.omnitagjs.com

firefox.exe

Remote address:

8.8.8.8:53

Request

visitor-fra02.omnitagjs.com

IN AAAA

Response
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

contile.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

contile.services.mozilla.com

IN AAAA

Response
DNS

prod.pocket.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.pocket.prod.cloudops.mozgcp.net

IN A

Response

prod.pocket.prod.cloudops.mozgcp.net

IN A

34.120.5.221
DNS

prod.pocket.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.pocket.prod.cloudops.mozgcp.net

IN AAAA

Response

prod.pocket.prod.cloudops.mozgcp.net

IN AAAA

2600:1901:0:524c::
DNS

0.97.114.188.in-addr.arpa

Remote address:

8.8.8.8:53

Request

0.97.114.188.in-addr.arpa

IN PTR

Response
DNS

93.153.39.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

93.153.39.52.in-addr.arpa

IN PTR

Response

93.153.39.52.in-addr.arpa

IN PTR

ec2-52-39-153-93 us-west-2compute amazonawscom
DNS

55.65.117.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

55.65.117.34.in-addr.arpa

IN PTR

Response

55.65.117.34.in-addr.arpa

IN PTR

556511734bcgoogleusercontentcom
DNS

static.cloudflareinsights.com

firefox.exe

Remote address:

8.8.8.8:53

Request

static.cloudflareinsights.com

IN A

Response

static.cloudflareinsights.com

IN A

104.16.56.101

static.cloudflareinsights.com

IN A

104.16.57.101
GET

https://static.cloudflareinsights.com/beacon.min.js

firefox.exe

Remote address:

104.16.56.101:443

Request

GET /beacon.min.js HTTP/2.0
host: static.cloudflareinsights.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:53:59 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2023.4.2
last-modified: Mon, 17 Apr 2023 20:41:48 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7e426dfc3c1b0bd6-AMS
content-encoding: gzip
DNS

cdn.intergient.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn.intergient.com

IN A

Response

cdn.intergient.com

IN CNAME

d2n8ih7naru1ql.cloudfront.net

d2n8ih7naru1ql.cloudfront.net

IN A

18.244.114.94

d2n8ih7naru1ql.cloudfront.net

IN A

18.244.114.63

d2n8ih7naru1ql.cloudfront.net

IN A

18.244.114.16

d2n8ih7naru1ql.cloudfront.net

IN A

18.244.114.51
DNS

static.cloudflareinsights.com

firefox.exe

Remote address:

8.8.8.8:53

Request

static.cloudflareinsights.com

IN A

Response

static.cloudflareinsights.com

IN A

104.16.56.101

static.cloudflareinsights.com

IN A

104.16.57.101
DNS

d2n8ih7naru1ql.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

d2n8ih7naru1ql.cloudfront.net

IN A

Response

d2n8ih7naru1ql.cloudfront.net

IN A

18.239.94.27

d2n8ih7naru1ql.cloudfront.net

IN A

18.239.94.123

d2n8ih7naru1ql.cloudfront.net

IN A

18.239.94.32

d2n8ih7naru1ql.cloudfront.net

IN A

18.239.94.129
DNS

static.cloudflareinsights.com

firefox.exe

Remote address:

8.8.8.8:53

Request

static.cloudflareinsights.com

IN AAAA

Response

static.cloudflareinsights.com

IN AAAA

2606:4700::6810:3865

static.cloudflareinsights.com

IN AAAA

2606:4700::6810:3965
DNS

d2n8ih7naru1ql.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

d2n8ih7naru1ql.cloudfront.net

IN AAAA

Response

d2n8ih7naru1ql.cloudfront.net

IN AAAA

2600:9000:25e8:d800:12:4abd:d340:93a1

d2n8ih7naru1ql.cloudfront.net

IN AAAA

2600:9000:25e8:8200:12:4abd:d340:93a1

d2n8ih7naru1ql.cloudfront.net

IN AAAA

2600:9000:25e8:3600:12:4abd:d340:93a1

d2n8ih7naru1ql.cloudfront.net

IN AAAA

2600:9000:25e8:2a00:12:4abd:d340:93a1

d2n8ih7naru1ql.cloudfront.net

IN AAAA

2600:9000:25e8:6a00:12:4abd:d340:93a1

d2n8ih7naru1ql.cloudfront.net

IN AAAA

2600:9000:25e8:5800:12:4abd:d340:93a1

d2n8ih7naru1ql.cloudfront.net

IN AAAA

2600:9000:25e8:fe00:12:4abd:d340:93a1

d2n8ih7naru1ql.cloudfront.net

IN AAAA

2600:9000:25e8:6c00:12:4abd:d340:93a1
GET

https://cdn.intergient.com/1024850/73985/ramp.js

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /1024850/73985/ramp.js HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: application/javascript
server: CloudFront
date: Sun, 09 Jul 2023 17:54:00 GMT
cache-control: max-age=600, public, must-revalidate
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: HEHdpLBeK6_VXbd9765HE0KmpbIvtFm3K7RgXmNbDBtXMhItAnAyVg==
GET

https://cdn.intergient.com/ramp_core.js

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /ramp_core.js HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: application/javascript
server: CloudFront
date: Sun, 09 Jul 2023 17:54:01 GMT
cache-control: max-age=1800000, public, must-revalidate
x-lambda-function: us-east-1.pageos_production:208
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: uC6Ig0GSik2NhqM1RN8cmS5tCudpq1WEm14RhEti1_9TQevNfIHCIQ==
GET

https://cdn.intergient.com/pageos/1.10.5/videoCard.01fa78e7064a386f48fc.js

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /pageos/1.10.5/videoCard.01fa78e7064a386f48fc.js HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
content-length: 554
date: Sun, 09 Jul 2023 07:27:28 GMT
last-modified: Thu, 06 Jul 2023 12:25:24 GMT
etag: "ce3cc474e63b7f656de18953fb710c43"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: c6wrIZhNH98i4LawEh71Q3JnVlGByvGXiv3HjddYQzbStXLktXeMvw==
age: 37595
GET

https://cdn.intergient.com/pageos/1.10.5/batchHandler.77ab1dc43eac56199813.js

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /pageos/1.10.5/batchHandler.77ab1dc43eac56199813.js HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
date: Sun, 09 Jul 2023 07:26:47 GMT
last-modified: Thu, 06 Jul 2023 12:25:24 GMT
etag: W/"4c0fd7be4ce9be47bd15a48c78fd791c"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: GADNYOvGjqDHXUfgUYewJq7jwSkgb7LhV80BVVVSsGajPHbWkUwCKQ==
age: 37636
GET

https://cdn.intergient.com/pageos/1.10.5/iframe/iframe.html

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /pageos/1.10.5/iframe/iframe.html HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/html
content-length: 497
date: Sun, 09 Jul 2023 07:26:56 GMT
last-modified: Thu, 06 Jul 2023 12:25:24 GMT
etag: "b0d6e65d2ff1d39b348924267b0cdcda"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: QmeVFOcs1OWHyn67L5PBmmHY52HKmF7iNsBgFhX3vD586DDkzPwc1Q==
age: 37627
GET

https://cdn.intergient.com/pageos/1.10.5/nielsen.b850d86715bcafaea630.js

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /pageos/1.10.5/nielsen.b850d86715bcafaea630.js HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
date: Sun, 09 Jul 2023 07:26:47 GMT
last-modified: Thu, 06 Jul 2023 12:25:24 GMT
etag: W/"70341af160996aa15aad5fcd74fdda2a"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: SW3q-qPqF0A-A9D9L6bqcH3YDVU3cjpCGd7ds20Xd7085DkFPsmvxQ==
age: 37636
GET

https://cdn.intergient.com/pageos/js/libs/aws-sdk-kinesis.min.js.br

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /pageos/js/libs/aws-sdk-kinesis.min.js.br HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
content-length: 57858
date: Sun, 09 Jul 2023 07:26:48 GMT
last-modified: Tue, 15 Feb 2022 19:02:54 GMT
etag: "575b9635960fa1d9b7ba4dafe1d2e7f5"
content-encoding: br
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: _fPBOOalT93Tt1QsSBgsthVYGTLOThmMDhz12pgUid7sNxbl0TRnRg==
age: 37635
GET

https://cdn.intergient.com/pageos/1.10.5/iframe/iframe.js

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /pageos/1.10.5/iframe/iframe.js HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cdn.intergient.com/pageos/1.10.5/iframe/iframe.html
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
date: Sun, 09 Jul 2023 07:26:56 GMT
last-modified: Thu, 06 Jul 2023 12:25:24 GMT
etag: W/"c08f3887db6ccb7f4c41a0be44777ef3"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: rkCB54MfJ-eWudepXatHZhPA1EdprNBW-b3Q6bS5qC2751Yh3FeTiA==
age: 37627
GET

https://cdn.intergient.com/pageos/1.10.5/595.6fce560e7fa7815d2879.js

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /pageos/1.10.5/595.6fce560e7fa7815d2879.js HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
date: Sun, 09 Jul 2023 07:26:51 GMT
last-modified: Thu, 06 Jul 2023 12:25:24 GMT
etag: W/"1c18f36e6af43144e436dfd8647be52d"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: lNc3S97OPuKN_7HdgKj3DToFyuPOuhhW6agCVOAU3pTxqL9f2xq8oA==
age: 37633
GET

https://cdn.intergient.com/pageos/1.10.5/123.33e3c958423cc2b09f2d.js

firefox.exe

Remote address:

18.244.114.94:443

Request

GET /pageos/1.10.5/123.33e3c958423cc2b09f2d.js HTTP/2.0
host: cdn.intergient.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
date: Sun, 09 Jul 2023 07:26:51 GMT
last-modified: Thu, 06 Jul 2023 12:25:24 GMT
etag: W/"371a8bcb6bfe9fff5fa49e1b098651be"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0793cf4372c8a2296978310c06fb0bde.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P6
x-amz-cf-id: cK0Kro9f4sns_j5MAtB2ebnIkGjsZXyShks8SWNljYBzI20dYnguFg==
age: 37633
DNS

200.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.179.250.142.in-addr.arpa

IN PTR

Response

200.179.250.142.in-addr.arpa

IN PTR

ams15s42-in-f81e100net
DNS

196.168.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

196.168.217.172.in-addr.arpa

IN PTR

Response

196.168.217.172.in-addr.arpa

IN PTR

ams16s32-in-f41e100net
DNS

106.208.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

106.208.58.216.in-addr.arpa

IN PTR

Response

106.208.58.216.in-addr.arpa

IN PTR

ams17s08-in-f101e100net

106.208.58.216.in-addr.arpa

IN PTR

sof01s11-in-f106�I
DNS

101.56.16.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

101.56.16.104.in-addr.arpa

IN PTR

Response
DNS

hq3p9viv64d0js08.uvwx.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

hq3p9viv64d0js08.uvwx.xyz

IN A

Response

hq3p9viv64d0js08.uvwx.xyz

IN A

213.239.205.204
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/status

firefox.exe

Remote address:

213.239.205.204:2222

Request

GET /status HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:54:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

firefox.exe

Remote address:

213.239.205.204:2222

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:54:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

hq3p9viv64d0js08.uvwx.xyz

IN A

Response

hq3p9viv64d0js08.uvwx.xyz

IN A

213.239.205.204
DNS

securepubads.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

securepubads.g.doubleclick.net

IN A

Response

securepubads.g.doubleclick.net

IN CNAME

securepubads46.g.doubleclick.net

securepubads46.g.doubleclick.net

IN A

172.217.23.194
DNS

cdn.intergi.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn.intergi.com

IN A

Response

cdn.intergi.com

IN CNAME

d11iqv7gybc2be.cloudfront.net

d11iqv7gybc2be.cloudfront.net

IN A

52.222.139.99

d11iqv7gybc2be.cloudfront.net

IN A

52.222.139.85

d11iqv7gybc2be.cloudfront.net

IN A

52.222.139.59

d11iqv7gybc2be.cloudfront.net

IN A

52.222.139.121
DNS

94.114.244.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

94.114.244.18.in-addr.arpa

IN PTR

Response

94.114.244.18.in-addr.arpa

IN PTR

server-18-244-114-94lhr50r cloudfrontnet
DNS

195.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

195.179.250.142.in-addr.arpa

IN PTR

Response

195.179.250.142.in-addr.arpa

IN PTR

ams15s42-in-f31e100net
DNS

131.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

131.179.250.142.in-addr.arpa

IN PTR

Response

131.179.250.142.in-addr.arpa

IN PTR

ams17s10-in-f31e100net
DNS

securepubads46.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

securepubads46.g.doubleclick.net

IN A

Response

securepubads46.g.doubleclick.net

IN A

172.217.23.194
DNS

hq3p9viv64d0js08.uvwx.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

Response

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

2a01:4f8:222:1098::2
DNS

analytics.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

analytics.google.com

IN A

Response

analytics.google.com

IN CNAME

analytics-alv.google.com

analytics-alv.google.com

IN A

216.239.34.181

analytics-alv.google.com

IN A

216.239.36.181

analytics-alv.google.com

IN A

216.239.38.181

analytics-alv.google.com

IN A

216.239.32.181
DNS

stats.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

stats.g.doubleclick.net

IN A

Response

stats.g.doubleclick.net

IN A

142.250.102.156

stats.g.doubleclick.net

IN A

142.250.102.155

stats.g.doubleclick.net

IN A

142.250.102.154

stats.g.doubleclick.net

IN A

142.250.102.157
DNS

d11iqv7gybc2be.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

d11iqv7gybc2be.cloudfront.net

IN A

Response

d11iqv7gybc2be.cloudfront.net

IN A

52.222.139.59

d11iqv7gybc2be.cloudfront.net

IN A

52.222.139.99

d11iqv7gybc2be.cloudfront.net

IN A

52.222.139.121

d11iqv7gybc2be.cloudfront.net

IN A

52.222.139.85
DNS

securepubads46.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

securepubads46.g.doubleclick.net

IN AAAA

Response

securepubads46.g.doubleclick.net

IN AAAA

2a00:1450:400e:805::2002
POST

https://analytics.google.com/g/collect?v=2&tid=G-W3P0GBKCSY&gtm=45je3750&_p=76235047&_gaz=1&cid=1670545225.1688925239&ul=en-us&sr=1280x720&_s=1&sid=1688925239&sct=1&seg=0&dl=https%3A%2F%2Farras.io%2F&dt=arras.io&en=page_view&_fv=1&_nsi=1&_ss=1

firefox.exe

Remote address:

216.239.34.181:443

Request

POST /g/collect?v=2&tid=G-W3P0GBKCSY&gtm=45je3750&_p=76235047&_gaz=1&cid=1670545225.1688925239&ul=en-us&sr=1280x720&_s=1&sid=1688925239&sct=1&seg=0&dl=https%3A%2F%2Farras.io%2F&dt=arras.io&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/2.0
host: analytics.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
content-length: 0
te: trailers
DNS

analytics-alv.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

analytics-alv.google.com

IN A

Response

analytics-alv.google.com

IN A

216.239.38.181

analytics-alv.google.com

IN A

216.239.36.181

analytics-alv.google.com

IN A

216.239.34.181

analytics-alv.google.com

IN A

216.239.32.181
DNS

stats.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

stats.g.doubleclick.net

IN A

Response

stats.g.doubleclick.net

IN A

142.250.102.154

stats.g.doubleclick.net

IN A

142.250.102.157

stats.g.doubleclick.net

IN A

142.250.102.156

stats.g.doubleclick.net

IN A

142.250.102.155
DNS

d11iqv7gybc2be.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

d11iqv7gybc2be.cloudfront.net

IN AAAA

Response

d11iqv7gybc2be.cloudfront.net

IN AAAA

2600:9000:2204:4000:14:2602:6e80:93a1

d11iqv7gybc2be.cloudfront.net

IN AAAA

2600:9000:2204:e600:14:2602:6e80:93a1

d11iqv7gybc2be.cloudfront.net

IN AAAA

2600:9000:2204:3600:14:2602:6e80:93a1

d11iqv7gybc2be.cloudfront.net

IN AAAA

2600:9000:2204:b000:14:2602:6e80:93a1

d11iqv7gybc2be.cloudfront.net

IN AAAA

2600:9000:2204:2600:14:2602:6e80:93a1

d11iqv7gybc2be.cloudfront.net

IN AAAA

2600:9000:2204:6200:14:2602:6e80:93a1

d11iqv7gybc2be.cloudfront.net

IN AAAA

2600:9000:2204:8200:14:2602:6e80:93a1

d11iqv7gybc2be.cloudfront.net

IN AAAA

2600:9000:2204:de00:14:2602:6e80:93a1
DNS

stats.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

stats.g.doubleclick.net

IN AAAA

Response

stats.g.doubleclick.net

IN AAAA

2a00:1450:4025:402::9b

stats.g.doubleclick.net

IN AAAA

2a00:1450:4025:402::9a

stats.g.doubleclick.net

IN AAAA

2a00:1450:4025:402::9c

stats.g.doubleclick.net

IN AAAA

2a00:1450:4025:402::9d
DNS

analytics-alv.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

analytics-alv.google.com

IN AAAA

Response

analytics-alv.google.com

IN AAAA

2001:4860:4802:36::181

analytics-alv.google.com

IN AAAA

2001:4860:4802:38::181

analytics-alv.google.com

IN AAAA

2001:4860:4802:32::181

analytics-alv.google.com

IN AAAA

2001:4860:4802:34::181
GET

https://securepubads.g.doubleclick.net/tag/js/gpt.js

firefox.exe

Remote address:

172.217.23.194:443

Request

GET /tag/js/gpt.js HTTP/2.0
host: securepubads.g.doubleclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://cdn.intergi.com/prebid/prebid.js.br

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /prebid/prebid.js.br HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
content-length: 115075
last-modified: Thu, 06 Jul 2023 12:59:00 GMT
x-amz-server-side-encryption: AES256
content-encoding: br
x-amz-version-id: 35tqxbZ_e_EUIP8QJHfrtbH2S8KQ.ppo
accept-ranges: bytes
server: AmazonS3
date: Sun, 09 Jul 2023 12:59:04 GMT
etag: "8b38258e41bafe8aee6693ca5d381b48"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: HTUL_HNTNo9xWInCLUXq9QaksLC4usz-pkYNT-yzQ-ZmCfWqBH5glQ==
age: 17697
GET

https://cdn.intergi.com/hera/releases/4.6.29/tyche.js

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/tyche.js HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
content-length: 930
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: uauhrbz2UGhssJcIXAIEn1iyeMz3TTcK
accept-ranges: bytes
server: AmazonS3
date: Sun, 09 Jul 2023 13:00:25 GMT
etag: "e01486e917a066c6c54cdd89ee8e7bda"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: fpTdyQqzIWP92gkVGkIUeTzRmfCmTdc3jG3uOkVhVjuPgL7Zk4tmTw==
age: 17619
GET

https://cdn.intergi.com/hera/releases/4.6.29/runtime.3883c5c32acc801e3ca2.js

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/runtime.3883c5c32acc801e3ca2.js HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
date: Sun, 09 Jul 2023 01:15:26 GMT
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
etag: W/"1bb028c6652cc7ed5ceee052bcaa0b88"
x-amz-server-side-encryption: AES256
x-amz-version-id: WAmfUb78lbn9cf45cxAIDd7wj7fg_DeO
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: AedyQ2uDTm64is2NsGM3Du4P6M3-O31boUvcLpmAzo0--m_iH_jkgQ==
age: 59919
GET

https://cdn.intergi.com/hera/releases/4.6.29/vendor/npm.core-js.9ecd3933ce7c5b26ca2f.js

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/vendor/npm.core-js.9ecd3933ce7c5b26ca2f.js HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: O6C.N4N57U2cL2fIffAMMmtD6NWG6uuE
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 13:00:30 GMT
etag: W/"3f84b4e4b73d992c8c2e246edb01f88b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: Ny6rFjLlep5omzTWnST718SOf6hBCHnWorjQ7XcL1JxAF5D-iyhd6A==
age: 17615
GET

https://cdn.intergi.com/hera/releases/4.6.29/vendor/npm.lodash.39a04a8f1c96ade254ee.js

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/vendor/npm.lodash.39a04a8f1c96ade254ee.js HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 8IhkLWiss3LtTP66gqmdVeoqqFj8zhbS
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 13:00:30 GMT
etag: W/"51add7edf2782c9ddf9380a9a5d6c529"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: UIYURd6GiWElS-nV7mr-3g_rYslkgCXezEaYl5AcZb-ijHj-OxW6vQ==
age: 17615
GET

https://cdn.intergi.com/hera/releases/4.6.29/vendor/npm.babel.816b6b897780bce545f1.js

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/vendor/npm.babel.816b6b897780bce545f1.js HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: rNDN0r7rT_HdBNvGr0SCC5ULDoHJ_O9Z
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 13:00:30 GMT
etag: W/"4c1827dd36989b5b458ebcc0299e2c59"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: FTS3DkiMq2uWN0tynikO5TcrDj6Pue_jaVwA2ukKHOme-iFzhdLKuA==
age: 17615
GET

https://cdn.intergi.com/hera/releases/4.6.29/vendor/npm.intersection-observer.312f6562336e9769b3ec.js

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/vendor/npm.intersection-observer.312f6562336e9769b3ec.js HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4Rez4buLu8Ua0Jf1I5aOnKosAqY4yvpt
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 13:00:30 GMT
etag: W/"3fbf8b46b12b434ff5936e830c2d66be"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: sUmIHjXMBzrUTMa9w9p7K48Gc9_2c9aqIee6N0tUmpycsiqmJoh5zg==
age: 17615
GET

https://cdn.intergi.com/hera/releases/4.6.29/635.c6832658487cc1354cf2.js

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/635.c6832658487cc1354cf2.js HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4d46dkosC.rPfw3.F_Upiqvuyo78TuMp
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 13:00:30 GMT
etag: W/"e6039b016665cb6b7e1f57fea4b52ee1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: cRhcUFCEjcb6M0_4NVR4WNbvco_lcnKfDr_JoL36OxJ-ske0aAPNqw==
age: 17615
GET

https://cdn.intergi.com/hera/releases/4.6.29/main.22a75cb4bb0217ed9b2f.js

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/main.22a75cb4bb0217ed9b2f.js HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: rpP7K1J7Hb.KGQCcqVbvvE0Xmw.LYWLw
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 00:55:56 GMT
etag: W/"78596ab5eccae23f9ca72cc90a40e7b3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: AaXTj6-B-4pH2zmrMr-AGJqYx5_QbEorcxHvRuYE6-DP-_aU_jvb8w==
age: 61088
GET

https://cdn.intergi.com/hera/releases/4.6.29/lib/lib.37dee626aab965fa63d6.js

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/lib/lib.37dee626aab965fa63d6.js HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
content-length: 168
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: tbcMpPEs4NSfIk8jh4XyMd.XoeXurncU
accept-ranges: bytes
server: AmazonS3
date: Sun, 09 Jul 2023 13:00:28 GMT
etag: "55207ad611091d1e6eb6c264a431a7b5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: XT3b1Xz2vBgwUaxabNMKAqni1N5Powx_kik6RajdA6nDqG5q3YFPfg==
age: 42357
GET

https://cdn.intergi.com/hera/releases/4.6.29/adReport/form.css

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/adReport/form.css HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/css
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: T03lBnbZlORUtWPEJbj3_nYk5fYY0FT6
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 13:17:52 GMT
etag: W/"caacb1828dfa1fb52ddb6bf1921f36d8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: tLnpUV5lLQqcQdtdnzZalPAWHGFyCxYOjIHnonvGC4mITrCpT-PGLg==
age: 16579
GET

https://cdn.intergi.com/hera/releases/4.6.29/adReport/close-button.svg

firefox.exe

Remote address:

52.222.139.99:443

Request

GET /hera/releases/4.6.29/adReport/close-button.svg HTTP/2.0
host: cdn.intergi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: image/svg+xml
content-length: 619
last-modified: Thu, 06 Jul 2023 12:25:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VAHya_smS6sN7MQjbC5rYseF5VYMZw34
accept-ranges: bytes
server: AmazonS3
date: Sun, 09 Jul 2023 13:03:27 GMT
etag: "3500c4be67d6d8f0469a8d37dd63a832"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: xO0XbT-v514C7KqoUBx3wM_e1aK_fQN1WSIXOKhwPdK1cJ5SgMSAVQ==
age: 17448
DNS

analytics-server.arras.cx

firefox.exe

Remote address:

8.8.8.8:53

Request

analytics-server.arras.cx

IN A

Response

analytics-server.arras.cx

IN CNAME

ext.arras.cx

ext.arras.cx

IN A

216.146.25.48
DNS

a19.dscg10.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a19.dscg10.akamai.net

IN AAAA

Response

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:1180:4::212:794b

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:1180:4::212:7944
DNS

ext.arras.cx

firefox.exe

Remote address:

8.8.8.8:53

Request

ext.arras.cx

IN A

Response

ext.arras.cx

IN A

216.146.25.48
DNS

ext.arras.cx

firefox.exe

Remote address:

8.8.8.8:53

Request

ext.arras.cx

IN AAAA

Response

ext.arras.cx

IN AAAA

2602:fafd:f0e:8::a
OPTIONS

https://analytics-server.arras.cx:2002/data

firefox.exe

Remote address:

216.146.25.48:2002

Request

OPTIONS /data HTTP/1.1
Host: analytics-server.arras.cx:2002
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Cache-Control: max-age=0

Response

HTTP/1.1 200 OK

X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type, Accept
Allow: POST
Content-Type: text/html; charset=utf-8
Content-Length: 4
ETag: W/"4-Yf+Bwwqjx254r+pisuO9HfpJ6FQ"
Date: Sun, 09 Jul 2023 17:54:01 GMT
Connection: keep-alive
Keep-Alive: timeout=5
POST

https://analytics-server.arras.cx:2002/data

firefox.exe

Remote address:

216.146.25.48:2002

Request

POST /data HTTP/1.1
Host: analytics-server.arras.cx:2002
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Content-Type: application/json
Content-Length: 165
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type, Accept
Content-Type: application/json; charset=utf-8
Content-Length: 11
ETag: W/"b-Ai2R8hgEarLmHKwesT1qcY913ys"
Date: Sun, 09 Jul 2023 17:54:01 GMT
Connection: keep-alive
Keep-Alive: timeout=5
POST

https://stats.g.doubleclick.net/g/collect?v=2&tid=G-W3P0GBKCSY&cid=1670545225.1688925239&gtm=45je3750&aip=1

firefox.exe

Remote address:

142.250.102.156:443

Request

POST /g/collect?v=2&tid=G-W3P0GBKCSY&cid=1670545225.1688925239&gtm=45je3750&aip=1 HTTP/2.0
host: stats.g.doubleclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
content-length: 0
te: trailers
DNS

181.34.239.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

181.34.239.216.in-addr.arpa

IN PTR

Response
DNS

206.23.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.23.217.172.in-addr.arpa

IN PTR

Response

206.23.217.172.in-addr.arpa

IN PTR

ams16s37-in-f141e100net

206.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f14�I

206.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f206�I
DNS

204.205.239.213.in-addr.arpa

Remote address:

8.8.8.8:53

Request

204.205.239.213.in-addr.arpa

IN PTR

Response

204.205.239.213.in-addr.arpa

IN PTR

static213239205204clientsyour-serverde
DNS

194.23.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

194.23.217.172.in-addr.arpa

IN PTR

Response

194.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f21e100net

194.23.217.172.in-addr.arpa

IN PTR

ams16s37-in-f2�H

194.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f194�H
DNS

99.139.222.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

99.139.222.52.in-addr.arpa

IN PTR

Response

99.139.222.52.in-addr.arpa

IN PTR

server-52-222-139-99ams50r cloudfrontnet
DNS

156.102.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

156.102.250.142.in-addr.arpa

IN PTR

Response

156.102.250.142.in-addr.arpa

IN PTR

rb-in-f1561e100net
DNS

48.25.146.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

48.25.146.216.in-addr.arpa

IN PTR

Response
DNS

impression-inferences-edge-prod.playwire.com

firefox.exe

Remote address:

8.8.8.8:53

Request

impression-inferences-edge-prod.playwire.com

IN A

Response

impression-inferences-edge-prod.playwire.com

IN A

52.222.139.48

impression-inferences-edge-prod.playwire.com

IN A

52.222.139.53

impression-inferences-edge-prod.playwire.com

IN A

52.222.139.72

impression-inferences-edge-prod.playwire.com

IN A

52.222.139.44
DNS

btloader.com

firefox.exe

Remote address:

8.8.8.8:53

Request

btloader.com

IN A

Response

btloader.com

IN A

104.26.6.139

btloader.com

IN A

104.26.7.139

btloader.com

IN A

172.67.70.134
DNS

z.moatads.com

firefox.exe

Remote address:

8.8.8.8:53

Request

z.moatads.com

IN A

Response

z.moatads.com

IN CNAME

wildcard.moatads.com.edgekey.net

wildcard.moatads.com.edgekey.net

IN CNAME

e13136.g.akamaiedge.net

e13136.g.akamaiedge.net

IN A

184.30.25.161
DNS

tags.crwdcntrl.net

firefox.exe

Remote address:

8.8.8.8:53

Request

tags.crwdcntrl.net

IN A

Response

tags.crwdcntrl.net

IN A

52.222.139.35

tags.crwdcntrl.net

IN A

52.222.139.100

tags.crwdcntrl.net

IN A

52.222.139.7

tags.crwdcntrl.net

IN A

52.222.139.112
GET

https://btloader.com/tag?o=5150306120761344&upapi=true

firefox.exe

Remote address:

104.26.6.139:443

Request

GET /tag?o=5150306120761344&upapi=true HTTP/2.0
host: btloader.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:02 GMT
content-type: application/javascript
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
etag: W/"bd0553f2dc644d7327305732f89960c8"
last-modified: Sun, 09 Jul 2023 17:36:15 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 980
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FukURv4da73wUvwjNLDnAkOe6lnZgiimn1vTpbAKweOHe8Rlu1tvS7X6TOvEfcucxiJgLCaCUrrhp5lVdakj04Tuw4YjA71REWX0if3H2pH9Qc122BPg7MvnP%2FPwhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7e426e0d9b750ba8-AMS
content-encoding: br
DNS

btloader.com

firefox.exe

Remote address:

8.8.8.8:53

Request

btloader.com

IN A

Response

btloader.com

IN A

172.67.70.134

btloader.com

IN A

104.26.7.139

btloader.com

IN A

104.26.6.139
GET

https://impression-inferences-edge-prod.playwire.com/websites/73985/v1/Sun/13/desktop/Firefox/USA

firefox.exe

Remote address:

52.222.139.48:443

Request

GET /websites/73985/v1/Sun/13/desktop/Firefox/USA HTTP/2.0
host: impression-inferences-edge-prod.playwire.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: application/json
content-length: 552
server: CloudFront
date: Sun, 09 Jul 2023 17:50:24 GMT
cache-control: max-age=3600, public, must-revalidate
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: k5Zn5cBuWDpjQiAYhnge4vkOJREkKQtWpBDkJrznJUSNa6_FQNYXpg==
age: 218
access-control-allow-origin: *
access-control-expose-headers: *
DNS

impression-inferences-edge-prod.playwire.com

firefox.exe

Remote address:

8.8.8.8:53

Request

impression-inferences-edge-prod.playwire.com

IN A

Response

impression-inferences-edge-prod.playwire.com

IN A

52.222.139.48

impression-inferences-edge-prod.playwire.com

IN A

52.222.139.53

impression-inferences-edge-prod.playwire.com

IN A

52.222.139.44

impression-inferences-edge-prod.playwire.com

IN A

52.222.139.72
DNS

impression-inferences-edge-prod.playwire.com

firefox.exe

Remote address:

8.8.8.8:53

Request

impression-inferences-edge-prod.playwire.com

IN AAAA

Response
DNS

btloader.com

firefox.exe

Remote address:

8.8.8.8:53

Request

btloader.com

IN AAAA

Response

btloader.com

IN AAAA

2606:4700:20::681a:78b

btloader.com

IN AAAA

2606:4700:20::681a:68b

btloader.com

IN AAAA

2606:4700:20::ac43:4686
DNS

tags.crwdcntrl.net

firefox.exe

Remote address:

8.8.8.8:53

Request

tags.crwdcntrl.net

IN A

Response

tags.crwdcntrl.net

IN A

52.222.139.112

tags.crwdcntrl.net

IN A

52.222.139.100

tags.crwdcntrl.net

IN A

52.222.139.7

tags.crwdcntrl.net

IN A

52.222.139.35
GET

https://tags.crwdcntrl.net/lt/c/17138/sync.min.js

firefox.exe

Remote address:

52.222.139.35:443

Request

GET /lt/c/17138/sync.min.js HTTP/2.0
host: tags.crwdcntrl.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
date: Sun, 09 Jul 2023 01:17:08 GMT
last-modified: Wed, 31 May 2023 20:47:25 GMT
etag: W/"bd558ef3668db99739cdf58e2ecd9bc7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2bc712713f500af8be071fa65fa924c.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: 5HhuOr-LdCAZCzSZvZTzk6TLrCN11_0FPkSOgKmyhL4RX1GwfOc6bQ==
age: 59815
GET

https://tags.crwdcntrl.net/lt/c/16589/sync.min.js

firefox.exe

Remote address:

52.222.139.35:443

Request

GET /lt/c/16589/sync.min.js HTTP/2.0
host: tags.crwdcntrl.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
last-modified: Wed, 31 May 2023 20:34:33 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 03:04:08 GMT
cache-control: public, max-age=86400
etag: W/"550ead3a95bd6cfcd917d45c5f8f4553"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2bc712713f500af8be071fa65fa924c.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: Ce3fTBEnjI8UikiPQLY0OpP1JQRaXDv8YvCbQVh3RdnRTFEeFYsucw==
age: 53397
GET

https://tags.crwdcntrl.net/lt/c/16576/sync.min.js

firefox.exe

Remote address:

52.222.139.35:443

Request

GET /lt/c/16576/sync.min.js HTTP/2.0
host: tags.crwdcntrl.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
last-modified: Wed, 31 May 2023 20:34:15 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 03:29:54 GMT
cache-control: public, max-age=86400
etag: W/"560498a44e7d42477433425cdafd6a16"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2bc712713f500af8be071fa65fa924c.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: Q6dvBjI7pIh00QoY10cdTVcofZBsFXrlqGktUwrzhufca8LSFzV4fA==
age: 51852
GET

https://z.moatads.com/playwireprebidheader597261727146/moatheader.js

firefox.exe

Remote address:

184.30.25.161:443

Request

GET /playwireprebidheader597261727146/moatheader.js HTTP/2.0
host: z.moatads.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

x-amz-id-2: 1R0KQTX5v5zJz20gVn7j+65D/S4JcfXcE9hYG2tThK1/QS+il6LerbT6lQE7mGtTrkIYW0PHglw=
x-amz-request-id: 07XCE5TN4DPMQQBE
last-modified: Tue, 20 Jun 2023 16:52:42 GMT
etag: "b94ed188504b3088482e3c4a6a59fb09"
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
content-length: 43591
vary: Accept-Encoding
cache-control: max-age=55377
date: Sun, 09 Jul 2023 17:54:02 GMT
DNS

ad-delivery.net

firefox.exe

Remote address:

8.8.8.8:53

Request

ad-delivery.net

IN A

Response

ad-delivery.net

IN A

104.26.2.70

ad-delivery.net

IN A

104.26.3.70

ad-delivery.net

IN A

172.67.69.19
GET

https://ad-delivery.net/px.gif?ch=2

firefox.exe

Remote address:

104.26.2.70:443

Request

GET /px.gif?ch=2 HTTP/2.0
host: ad-delivery.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:02 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdupl62_ji7t2jfb0l7EMCSi5-pUn-5Dv02mC_dgYbVHb1BBcajJHb5NyHJvfMO2uJiANzS9dRAFXyVPdHuFnWAs_Q
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==
x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Fri, 23 Jun 2023 04:35:29 GMT
cache-control: public, max-age=86400
age: 1430562
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NaODx8QWY9XE8YuosjNtY40U0HAKyA6IvsT4Dr8QUjfA6KGl9l3hXGX6hEQlGvDxEIPwoQ%2B0feRc2TJSlyf7PeLUKiIH0KA%2BJpG3W%2BnUwZVTD6xis90f3aADsDxx7SdJ5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7e426e0f7903b70a-AMS
GET

https://ad-delivery.net/px.gif?ch=1&e=0.13321127797496923

firefox.exe

Remote address:

104.26.2.70:443

Request

GET /px.gif?ch=1&e=0.13321127797496923 HTTP/2.0
host: ad-delivery.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:02 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdupl62_ji7t2jfb0l7EMCSi5-pUn-5Dv02mC_dgYbVHb1BBcajJHb5NyHJvfMO2uJiANzS9dRAFXyVPdHuFnWAs_Q
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==
x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Fri, 23 Jun 2023 04:35:29 GMT
cache-control: public, max-age=86400
age: 1430562
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1OhrPVBZ9H5vz9uKGZ1DF638446vIUMyhseI07V2UrUG9qzIf2x%2Bu66Ozms0YAwAJvynqvak55XSeekZKW1sIxvS4Tf5GfbfOVmBSTX1fBDC9o4SFZGdjgiO%2FDH%2BcfCppg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7e426e0f991ab70a-AMS
DNS

e13136.g.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e13136.g.akamaiedge.net

IN A

Response

e13136.g.akamaiedge.net

IN A

184.30.25.161
DNS

ad-delivery.net

firefox.exe

Remote address:

8.8.8.8:53

Request

ad-delivery.net

IN A

Response

ad-delivery.net

IN A

104.26.2.70

ad-delivery.net

IN A

172.67.69.19

ad-delivery.net

IN A

104.26.3.70
DNS

tags.crwdcntrl.net

firefox.exe

Remote address:

8.8.8.8:53

Request

tags.crwdcntrl.net

IN AAAA

Response
DNS

ad-delivery.net

firefox.exe

Remote address:

8.8.8.8:53

Request

ad-delivery.net

IN AAAA

Response

ad-delivery.net

IN AAAA

2606:4700:20::681a:246

ad-delivery.net

IN AAAA

2606:4700:20::ac43:4513

ad-delivery.net

IN AAAA

2606:4700:20::681a:346
DNS

e13136.g.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e13136.g.akamaiedge.net

IN AAAA

Response
DNS

139.6.26.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

139.6.26.104.in-addr.arpa

IN PTR

Response
DNS

48.139.222.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

48.139.222.52.in-addr.arpa

IN PTR

Response

48.139.222.52.in-addr.arpa

IN PTR

server-52-222-139-48ams50r cloudfrontnet
DNS

35.139.222.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

35.139.222.52.in-addr.arpa

IN PTR

Response

35.139.222.52.in-addr.arpa

IN PTR

server-52-222-139-35ams50r cloudfrontnet
DNS

161.25.30.184.in-addr.arpa

Remote address:

8.8.8.8:53

Request

161.25.30.184.in-addr.arpa

IN PTR

Response

161.25.30.184.in-addr.arpa

IN PTR

a184-30-25-161deploystaticakamaitechnologiescom
DNS

api.btloader.com

firefox.exe

Remote address:

8.8.8.8:53

Request

api.btloader.com

IN A

Response

api.btloader.com

IN A

130.211.23.194
DNS

fundingchoicesmessages.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fundingchoicesmessages.google.com

IN A

Response

fundingchoicesmessages.google.com

IN CNAME

www3.l.google.com

www3.l.google.com

IN A

142.250.179.206
GET

https://api.btloader.com/mw/state?bt_env=prod

firefox.exe

Remote address:

130.211.23.194:443

Request

GET /mw/state?bt_env=prod HTTP/2.0
host: api.btloader.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
GET

https://api.btloader.com/country

firefox.exe

Remote address:

130.211.23.194:443

Request

GET /country HTTP/2.0
host: api.btloader.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
GET

https://api.btloader.com/pv?tid=vd3u5Byu&w=5204565961474048&o=5150306120761344&cv=2.1.13-15-g6498499&r=false&vr=1280x595&pageURL=https%3A%2F%2Farras.io%2F%23wpa&sid=CGFrRHHp6&upapi=true

firefox.exe

Remote address:

130.211.23.194:443

Request

GET /pv?tid=vd3u5Byu&w=5204565961474048&o=5150306120761344&cv=2.1.13-15-g6498499&r=false&vr=1280x595&pageURL=https%3A%2F%2Farras.io%2F%23wpa&sid=CGFrRHHp6&upapi=true HTTP/2.0
host: api.btloader.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
DNS

api.btloader.com

firefox.exe

Remote address:

8.8.8.8:53

Request

api.btloader.com

IN A

Response

api.btloader.com

IN A

130.211.23.194
DNS

btlr.sharethrough.com

firefox.exe

Remote address:

8.8.8.8:53

Request

btlr.sharethrough.com

IN A

Response

btlr.sharethrough.com

IN CNAME

btlr-us-east-1.sharethrough.com

btlr-us-east-1.sharethrough.com

IN A

34.235.214.237
GET

https://fundingchoicesmessages.google.com/i/154013155?ers=3

firefox.exe

Remote address:

142.250.179.206:443

Request

GET /i/154013155?ers=3 HTTP/2.0
host: fundingchoicesmessages.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

www3.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www3.l.google.com

IN A

Response

www3.l.google.com

IN A

142.250.179.206
DNS

mb.moatads.com

firefox.exe

Remote address:

8.8.8.8:53

Request

mb.moatads.com

IN A

Response

mb.moatads.com

IN CNAME

ecs.mb.moatads.com

ecs.mb.moatads.com

IN CNAME

us-east-1.ecs.mb.moatads.com

us-east-1.ecs.mb.moatads.com

IN CNAME

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

3.231.46.127

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

34.196.251.104

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

18.214.51.56

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

23.21.46.190

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

34.196.181.150

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

52.20.33.206

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

52.204.143.235

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

34.194.148.229
DNS

www3.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www3.l.google.com

IN AAAA

Response

www3.l.google.com

IN AAAA

2a00:1450:400e:803::200e
DNS

api.btloader.com

firefox.exe

Remote address:

8.8.8.8:53

Request

api.btloader.com

IN AAAA

Response
DNS

config.playwire.com

firefox.exe

Remote address:

8.8.8.8:53

Request

config.playwire.com

IN A

Response

config.playwire.com

IN CNAME

detrlmfafe7oz.cloudfront.net

detrlmfafe7oz.cloudfront.net

IN A

108.156.60.40

detrlmfafe7oz.cloudfront.net

IN A

108.156.60.79

detrlmfafe7oz.cloudfront.net

IN A

108.156.60.70

detrlmfafe7oz.cloudfront.net

IN A

108.156.60.5
DNS

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

firefox.exe

Remote address:

8.8.8.8:53

Request

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

Response

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

18.213.25.0

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

23.21.46.190

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

34.194.148.229

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

35.173.3.147

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

52.20.33.206

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

34.196.181.150

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

18.211.216.125

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN A

3.231.46.127
GET

https://config.playwire.com/audience_segments/config.json

firefox.exe

Remote address:

108.156.60.40:443

Request

GET /audience_segments/config.json HTTP/2.0
host: config.playwire.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: application/json
server: Cowboy
date: Sun, 09 Jul 2023 07:26:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: hw-country-code
access-control-max-age: 7200
cache-control: public, max-age=600
via: 1.1 vegur, 1.1 e345c29560592087623dbe75e8d765d6.cloudfront.net (CloudFront)
hw-country-code: US
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: AMS1-P2
x-amz-cf-id: GLGi9MJs_yB_R6IPA5i2uHvhRu30QkVtq-cVVzdBOpVur67qxF1zlQ==
age: 37638
DNS

detrlmfafe7oz.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

detrlmfafe7oz.cloudfront.net

IN A

Response

detrlmfafe7oz.cloudfront.net

IN A

108.156.60.40

detrlmfafe7oz.cloudfront.net

IN A

108.156.60.79

detrlmfafe7oz.cloudfront.net

IN A

108.156.60.5

detrlmfafe7oz.cloudfront.net

IN A

108.156.60.70
DNS

idsync.rlcdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

idsync.rlcdn.com

IN A

Response

idsync.rlcdn.com

IN A

35.190.60.146
DNS

ps.eyeota.net

firefox.exe

Remote address:

8.8.8.8:53

Request

ps.eyeota.net

IN A

Response

ps.eyeota.net

IN A

3.232.64.79
DNS

bcp.crwdcntrl.net

firefox.exe

Remote address:

8.8.8.8:53

Request

bcp.crwdcntrl.net

IN A

Response

bcp.crwdcntrl.net

IN A

54.88.198.127

bcp.crwdcntrl.net

IN A

52.44.20.252

bcp.crwdcntrl.net

IN A

3.228.206.213

bcp.crwdcntrl.net

IN A

52.45.247.155

bcp.crwdcntrl.net

IN A

54.236.176.175

bcp.crwdcntrl.net

IN A

23.20.148.40

bcp.crwdcntrl.net

IN A

44.205.30.65

bcp.crwdcntrl.net

IN A

3.210.139.249
DNS

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

firefox.exe

Remote address:

8.8.8.8:53

Request

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

IN AAAA

Response
DNS

detrlmfafe7oz.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

detrlmfafe7oz.cloudfront.net

IN AAAA

Response

detrlmfafe7oz.cloudfront.net

IN AAAA

2600:9000:2394:7400:1a:1459:5cc0:93a1

detrlmfafe7oz.cloudfront.net

IN AAAA

2600:9000:2394:b600:1a:1459:5cc0:93a1

detrlmfafe7oz.cloudfront.net

IN AAAA

2600:9000:2394:3800:1a:1459:5cc0:93a1

detrlmfafe7oz.cloudfront.net

IN AAAA

2600:9000:2394:9a00:1a:1459:5cc0:93a1

detrlmfafe7oz.cloudfront.net

IN AAAA

2600:9000:2394:fa00:1a:1459:5cc0:93a1

detrlmfafe7oz.cloudfront.net

IN AAAA

2600:9000:2394:e00:1a:1459:5cc0:93a1

detrlmfafe7oz.cloudfront.net

IN AAAA

2600:9000:2394:1c00:1a:1459:5cc0:93a1

detrlmfafe7oz.cloudfront.net

IN AAAA

2600:9000:2394:5a00:1a:1459:5cc0:93a1
DNS

idsync.rlcdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

idsync.rlcdn.com

IN A

Response

idsync.rlcdn.com

IN A

35.190.60.146
DNS

ps.eyeota.net

firefox.exe

Remote address:

8.8.8.8:53

Request

ps.eyeota.net

IN A

Response

ps.eyeota.net

IN A

34.197.192.192
DNS

bcp.crwdcntrl.net

firefox.exe

Remote address:

8.8.8.8:53

Request

bcp.crwdcntrl.net

IN A

Response

bcp.crwdcntrl.net

IN A

44.194.133.102

bcp.crwdcntrl.net

IN A

52.44.20.252

bcp.crwdcntrl.net

IN A

44.205.30.65

bcp.crwdcntrl.net

IN A

3.210.139.249

bcp.crwdcntrl.net

IN A

54.88.198.127

bcp.crwdcntrl.net

IN A

52.202.150.89

bcp.crwdcntrl.net

IN A

54.236.176.175

bcp.crwdcntrl.net

IN A

23.20.148.40
DNS

idsync.rlcdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

idsync.rlcdn.com

IN AAAA

Response
DNS

ps.eyeota.net

firefox.exe

Remote address:

8.8.8.8:53

Request

ps.eyeota.net

IN AAAA

Response
DNS

bcp.crwdcntrl.net

firefox.exe

Remote address:

8.8.8.8:53

Request

bcp.crwdcntrl.net

IN AAAA

Response
DNS

gbc4.va.us.criteo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

gbc4.va.us.criteo.com

IN AAAA

Response
GET

https://idsync.rlcdn.com/712453.gif?partner_uid=user_e7ba86a8-edbb-49b6-9980-e6e2ca177528_1688925241683

firefox.exe

Remote address:

35.190.60.146:443

Request

GET /712453.gif?partner_uid=user_e7ba86a8-edbb-49b6-9980-e6e2ca177528_1688925241683 HTTP/2.0
host: idsync.rlcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

static.criteo.net

firefox.exe

Remote address:

8.8.8.8:53

Request

static.criteo.net

IN A

Response

static.criteo.net

IN CNAME

static.nl3.vip.prod.criteo.net

static.nl3.vip.prod.criteo.net

IN A

178.250.1.3
DNS

invstatic101.creativecdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

invstatic101.creativecdn.com

IN A

Response

invstatic101.creativecdn.com

IN A

34.96.70.87
DNS

cdn.jsdelivr.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn.jsdelivr.net

IN A

Response

cdn.jsdelivr.net

IN CNAME

jsdelivr.map.fastly.net

jsdelivr.map.fastly.net

IN A

151.101.1.229

jsdelivr.map.fastly.net

IN A

151.101.65.229

jsdelivr.map.fastly.net

IN A

151.101.129.229

jsdelivr.map.fastly.net

IN A

151.101.193.229
DNS

cdn.id5-sync.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn.id5-sync.com

IN A

Response

cdn.id5-sync.com

IN A

104.22.53.86

cdn.id5-sync.com

IN A

172.67.38.106

cdn.id5-sync.com

IN A

104.22.52.86
DNS

oa.openxcdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

oa.openxcdn.net

IN A

Response

oa.openxcdn.net

IN A

34.102.146.192
DNS

cdn-ima.33across.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn-ima.33across.com

IN A

Response

cdn-ima.33across.com

IN CNAME

cdn-ima.33across.com.cdn.cloudflare.net

cdn-ima.33across.com.cdn.cloudflare.net

IN A

172.64.152.222

cdn-ima.33across.com.cdn.cloudflare.net

IN A

104.18.35.34
DNS

invstatic101.creativecdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

invstatic101.creativecdn.com

IN A

Response

invstatic101.creativecdn.com

IN A

34.96.70.87
GET

https://oa.openxcdn.net/esp.js

firefox.exe

Remote address:

34.102.146.192:443

Request

GET /esp.js HTTP/2.0
host: oa.openxcdn.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

oa.openxcdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

oa.openxcdn.net

IN A

Response

oa.openxcdn.net

IN A

34.102.146.192
DNS

cdn-ima.33across.com.cdn.cloudflare.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn-ima.33across.com.cdn.cloudflare.net

IN A

Response

cdn-ima.33across.com.cdn.cloudflare.net

IN A

104.18.35.34

cdn-ima.33across.com.cdn.cloudflare.net

IN A

172.64.152.222
GET

https://cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js

firefox.exe

Remote address:

151.101.1.229:443

Request

GET /gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js HTTP/2.0
host: cdn.jsdelivr.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"2dc-IrZxm/sP4aqtIfs1EfEw6Dg5q1Y"
content-encoding: br
accept-ranges: bytes
date: Sun, 09 Jul 2023 17:54:03 GMT
age: 23650
x-served-by: cache-fra-eddf8230042-FRA, cache-ams21020-AMS
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 439
DNS

invstatic101.creativecdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

invstatic101.creativecdn.com

IN AAAA

Response
DNS

cdn-ima.33across.com.cdn.cloudflare.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn-ima.33across.com.cdn.cloudflare.net

IN AAAA

Response
DNS

oa.openxcdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

oa.openxcdn.net

IN AAAA

Response
DNS

cdn.id5-sync.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn.id5-sync.com

IN A

Response

cdn.id5-sync.com

IN A

104.22.52.86

cdn.id5-sync.com

IN A

172.67.38.106

cdn.id5-sync.com

IN A

104.22.53.86
DNS

jsdelivr.map.fastly.net

firefox.exe

Remote address:

8.8.8.8:53

Request

jsdelivr.map.fastly.net

IN A

Response

jsdelivr.map.fastly.net

IN A

151.101.1.229

jsdelivr.map.fastly.net

IN A

151.101.65.229

jsdelivr.map.fastly.net

IN A

151.101.129.229

jsdelivr.map.fastly.net

IN A

151.101.193.229
DNS

cdn.id5-sync.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn.id5-sync.com

IN AAAA

Response

cdn.id5-sync.com

IN AAAA

2606:4700:10::ac43:266a

cdn.id5-sync.com

IN AAAA

2606:4700:10::6816:3456

cdn.id5-sync.com

IN AAAA

2606:4700:10::6816:3556
DNS

static.nl3.vip.prod.criteo.net

firefox.exe

Remote address:

8.8.8.8:53

Request

static.nl3.vip.prod.criteo.net

IN A

Response

static.nl3.vip.prod.criteo.net

IN A

178.250.1.3
DNS

jsdelivr.map.fastly.net

firefox.exe

Remote address:

8.8.8.8:53

Request

jsdelivr.map.fastly.net

IN AAAA

Response

jsdelivr.map.fastly.net

IN AAAA

2a04:4e42::485

jsdelivr.map.fastly.net

IN AAAA

2a04:4e42:200::485

jsdelivr.map.fastly.net

IN AAAA

2a04:4e42:400::485

jsdelivr.map.fastly.net

IN AAAA

2a04:4e42:600::485
DNS

static.nl3.vip.prod.criteo.net

firefox.exe

Remote address:

8.8.8.8:53

Request

static.nl3.vip.prod.criteo.net

IN AAAA

Response

static.nl3.vip.prod.criteo.net

IN AAAA

2a02:2638:3::3
DNS

oajs.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

oajs.openx.net

IN A

Response

oajs.openx.net

IN A

34.120.135.53

oajs.openx.net

IN A

34.120.107.143
DNS

oajs.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

oajs.openx.net

IN A

Response

oajs.openx.net

IN A

34.120.135.53

oajs.openx.net

IN A

34.120.107.143
DNS

oajs.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

oajs.openx.net

IN AAAA

Response
DNS

70.2.26.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

70.2.26.104.in-addr.arpa

IN PTR

Response
DNS

194.23.211.130.in-addr.arpa

Remote address:

8.8.8.8:53

Request

194.23.211.130.in-addr.arpa

IN PTR

Response

194.23.211.130.in-addr.arpa

IN PTR

19423211130bcgoogleusercontentcom
DNS

206.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.179.250.142.in-addr.arpa

IN PTR

Response

206.179.250.142.in-addr.arpa

IN PTR

ams15s42-in-f141e100net
DNS

googleads.g.doubleclick.net

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

142.251.39.98
DNS

40.60.156.108.in-addr.arpa

Remote address:

8.8.8.8:53

Request

40.60.156.108.in-addr.arpa

IN PTR

Response

40.60.156.108.in-addr.arpa

IN PTR

server-108-156-60-40ams1r cloudfrontnet
DNS

sync.srv.stackadapt.com

Remote address:

8.8.8.8:53

Request

sync.srv.stackadapt.com

IN AAAA

Response
DNS

127.198.88.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

127.198.88.54.in-addr.arpa

IN PTR

Response

127.198.88.54.in-addr.arpa

IN PTR

ec2-54-88-198-127 compute-1 amazonawscom
DNS

198.23.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

198.23.217.172.in-addr.arpa

IN PTR

Response

198.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f61e100net

198.23.217.172.in-addr.arpa

IN PTR

ams16s37-in-f6�H

198.23.217.172.in-addr.arpa

IN PTR

prg03s05-in-f198�H
DNS

146.60.190.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

146.60.190.35.in-addr.arpa

IN PTR

Response

146.60.190.35.in-addr.arpa

IN PTR

1466019035bcgoogleusercontentcom
DNS

127.46.231.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

127.46.231.3.in-addr.arpa

IN PTR

Response

127.46.231.3.in-addr.arpa

IN PTR

ec2-3-231-46-127 compute-1 amazonawscom
DNS

79.64.232.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

79.64.232.3.in-addr.arpa

IN PTR

Response

79.64.232.3.in-addr.arpa

IN PTR

ec2-3-232-64-79 compute-1 amazonawscom
DNS

192.146.102.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

192.146.102.34.in-addr.arpa

IN PTR

Response

192.146.102.34.in-addr.arpa

IN PTR

19214610234bcgoogleusercontentcom
DNS

fingerprinter-production.herokuapp.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fingerprinter-production.herokuapp.com

IN A

Response

fingerprinter-production.herokuapp.com

IN A

54.159.116.102

fingerprinter-production.herokuapp.com

IN A

54.165.58.209

fingerprinter-production.herokuapp.com

IN A

18.208.60.216

fingerprinter-production.herokuapp.com

IN A

52.5.82.174
DNS

fingerprinter-production.herokuapp.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fingerprinter-production.herokuapp.com

IN A

Response

fingerprinter-production.herokuapp.com

IN A

52.5.82.174

fingerprinter-production.herokuapp.com

IN A

54.165.58.209

fingerprinter-production.herokuapp.com

IN A

54.159.116.102

fingerprinter-production.herokuapp.com

IN A

18.208.60.216
DNS

fingerprinter-production.herokuapp.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fingerprinter-production.herokuapp.com

IN AAAA

Response
GET

https://static.criteo.net/js/ld/publishertag.ids.js

firefox.exe

Remote address:

178.250.1.3:443

Request

GET /js/ld/publishertag.ids.js HTTP/2.0
host: static.criteo.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sun, 09 Jul 2023 17:54:04 GMT
content-type: text/javascript
last-modified: Thu, 29 Jun 2023 05:28:55 GMT
etag: W/"649d1697-a980"
expires: Mon, 10 Jul 2023 17:54:04 GMT
cache-control: max-age=86400
cross-origin-resource-policy: cross-origin
cache-control: public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
GET

https://invstatic101.creativecdn.com/encrypted-signals/encrypted-tag-g.js

firefox.exe

Remote address:

34.96.70.87:443

Request

GET /encrypted-signals/encrypted-tag-g.js HTTP/2.0
host: invstatic101.creativecdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://cdn.id5-sync.com/api/1.0/esp.js

firefox.exe

Remote address:

104.22.53.86:443

Request

GET /api/1.0/esp.js HTTP/2.0
host: cdn.id5-sync.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:04 GMT
content-type: text/javascript;charset=utf-8
x-amz-id-2: o3MwrD7cCZCgx1VejEOSj6DhTkrl83z1Mw1JdZD7LAGqNevg1hclbhJvuo/kzcRnV5eSlfvwZzk=
x-amz-request-id: EFRYW5BK32TBW2WX
last-modified: Thu, 22 Jun 2023 08:35:03 GMT
etag: W/"9b8b8eb50e4814cbdc325ce477c96910"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
cf-cache-status: HIT
age: 2229
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 7e426e1908690c33-AMS
content-encoding: gzip
GET

https://cdn.id5-sync.com/api/1.0/id5-api.js

firefox.exe

Remote address:

104.22.53.86:443

Request

GET /api/1.0/id5-api.js HTTP/2.0
host: cdn.id5-sync.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:06 GMT
content-type: text/javascript;charset=utf-8
x-amz-id-2: WbJnBVwKgwxnRBCnYyxXzDiMNE8H7eSXOwbKJhCRBWUajyvxwdh09YaSyoXF0lQLrIAJvrWB6NI=
x-amz-request-id: CNWJV1AXJ26PHN8M
last-modified: Thu, 22 Jun 2023 08:35:03 GMT
etag: W/"bb626f116ff54963039a9ea05c53620b"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
cf-cache-status: HIT
age: 1518
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 7e426e26d9e70c33-AMS
content-encoding: gzip
GET

https://cdn-ima.33across.com/ob.js

firefox.exe

Remote address:

172.64.152.222:443

Request

GET /ob.js HTTP/2.0
host: cdn-ima.33across.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:04 GMT
content-type: application/javascript
last-modified: Thu, 15 Jun 2023 16:15:13 GMT
vary: Accept-Encoding
etag: W/"648b3911-2e4b"
expires: Mon, 10 Jul 2023 17:54:04 GMT
cache-control: public, max-age=86400
content-encoding: gzip
cf-cache-status: HIT
age: 79014
server: cloudflare
cf-ray: 7e426e18fd3e1cb0-AMS
GET

https://oajs.openx.net/esp?url=https%3A%2F%2Farras.io%2F%23wpa&rid=esp

firefox.exe

Remote address:

34.120.135.53:443

Request

GET /esp?url=https%3A%2F%2Farras.io%2F%23wpa&rid=esp HTTP/2.0
host: oajs.openx.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
DNS

id5-sync.com

firefox.exe

Remote address:

8.8.8.8:53

Request

id5-sync.com

IN A

Response

id5-sync.com

IN A

141.95.98.64

id5-sync.com

IN A

162.19.138.83

id5-sync.com

IN A

141.95.33.111

id5-sync.com

IN A

162.19.138.119

id5-sync.com

IN A

162.19.138.118

id5-sync.com

IN A

141.95.98.65

id5-sync.com

IN A

162.19.138.120

id5-sync.com

IN A

162.19.138.82

id5-sync.com

IN A

162.19.138.117

id5-sync.com

IN A

162.19.138.116
DNS

id.crwdcntrl.net

firefox.exe

Remote address:

8.8.8.8:53

Request

id.crwdcntrl.net

IN A

Response

id.crwdcntrl.net

IN A

44.205.30.65

id.crwdcntrl.net

IN A

52.44.20.252

id.crwdcntrl.net

IN A

54.88.198.127

id.crwdcntrl.net

IN A

52.202.150.89

id.crwdcntrl.net

IN A

3.228.206.213

id.crwdcntrl.net

IN A

52.45.247.155

id.crwdcntrl.net

IN A

3.210.139.249

id.crwdcntrl.net

IN A

54.236.176.175
DNS

fid.agkn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fid.agkn.com

IN A

Response

fid.agkn.com

IN CNAME

fabrick.agkn.com

fabrick.agkn.com

IN A

34.160.46.1
DNS

id5-sync.com

firefox.exe

Remote address:

8.8.8.8:53

Request

id5-sync.com

IN A

Response

id5-sync.com

IN A

162.19.138.82

id5-sync.com

IN A

162.19.138.119

id5-sync.com

IN A

141.95.98.65

id5-sync.com

IN A

162.19.138.118

id5-sync.com

IN A

162.19.138.83

id5-sync.com

IN A

162.19.138.120

id5-sync.com

IN A

141.95.98.64

id5-sync.com

IN A

162.19.138.117

id5-sync.com

IN A

162.19.138.116

id5-sync.com

IN A

141.95.33.111
POST

https://id5-sync.com/api/config/prebid

firefox.exe

Remote address:

141.95.98.64:443

Request

POST /api/config/prebid HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Content-Type: text/plain
Content-Length: 129
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
access-control-allow-origin: https://arras.io
vary: Origin
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 09 Jul 2023 17:54:04 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
DNS

id5-sync.com

firefox.exe

Remote address:

8.8.8.8:53

Request

id5-sync.com

IN AAAA

Response
GET

https://id5-sync.com/api/esp/increment?counter=no-config

firefox.exe

Remote address:

141.95.98.64:443

Request

GET /api/esp/increment?counter=no-config HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Content-Type: text/plain
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 204

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
access-control-allow-origin: https://arras.io
vary: Origin
access-control-allow-credentials: true
date: Sun, 09 Jul 2023 17:54:04 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
DNS

id.crwdcntrl.net

firefox.exe

Remote address:

8.8.8.8:53

Request

id.crwdcntrl.net

IN A

Response

id.crwdcntrl.net

IN A

44.194.133.102

id.crwdcntrl.net

IN A

52.44.20.252

id.crwdcntrl.net

IN A

3.210.139.249

id.crwdcntrl.net

IN A

3.228.206.213

id.crwdcntrl.net

IN A

54.88.198.127

id.crwdcntrl.net

IN A

54.236.176.175

id.crwdcntrl.net

IN A

52.45.247.155

id.crwdcntrl.net

IN A

52.202.150.89
GET

https://fid.agkn.com/f?apiKey=2104320612&r=https%3A%2F%2Farras.io%2F%23wpa&r=https%3A%2F%2Farras.io%2F

firefox.exe

Remote address:

34.160.46.1:443

Request

GET /f?apiKey=2104320612&r=https%3A%2F%2Farras.io%2F%23wpa&r=https%3A%2F%2Farras.io%2F HTTP/2.0
host: fid.agkn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
DNS

fabrick.agkn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fabrick.agkn.com

IN A

Response

fabrick.agkn.com

IN A

34.160.46.1
DNS

gum.criteo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

gum.criteo.com

IN A

Response

gum.criteo.com

IN CNAME

gum.nl3.vip.prod.criteo.com

gum.nl3.vip.prod.criteo.com

IN A

178.250.1.11
DNS

fabrick.agkn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fabrick.agkn.com

IN AAAA

Response
DNS

id.crwdcntrl.net

firefox.exe

Remote address:

8.8.8.8:53

Request

id.crwdcntrl.net

IN AAAA

Response
GET

https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=arras.io&gdpr=0&gdpr_consent=

firefox.exe

Remote address:

178.250.1.11:443

Request

GET /syncframe?origin=publishertagids&topUrl=arras.io&gdpr=0&gdpr_consent= HTTP/2.0
host: gum.criteo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/html; charset=utf-8
date: Sun, 09 Jul 2023 17:54:03 GMT
server: Kestrel
cache-control: private, max-age=3600
set-cookie: optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/
set-cookie: uid=7d55b712-1569-4d82-b055-082776e1cac5; expires=Fri, 02 Aug 2024 17:54:04 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 285988
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
GET

https://gum.criteo.com/sid/json?origin=publishertagids&domain=arras.io&sn=FirefoxSyncframe&so=0&topUrl=arras.io&info=MoOTUl9zTGl3akxkdkZrJTJCa0NRQkdCUnJvazBjdzlVZ2tabnJPaFRCdGMyZW14VFV3cmx0c2trTldIREdxVFA0WE9STGg3MEZQSnpjVjNUVCUyRkRhVzFGOW4wV2clM0QlM0Q&idsd=30163740,63718978&cw=1&lsw=1

firefox.exe

Remote address:

178.250.1.11:443

Request

GET /sid/json?origin=publishertagids&domain=arras.io&sn=FirefoxSyncframe&so=0&topUrl=arras.io&info=MoOTUl9zTGl3akxkdkZrJTJCa0NRQkdCUnJvazBjdzlVZ2tabnJPaFRCdGMyZW14VFV3cmx0c2trTldIREdxVFA0WE9STGg3MEZQSnpjVjNUVCUyRkRhVzFGOW4wV2clM0QlM0Q&idsd=30163740,63718978&cw=1&lsw=1 HTTP/2.0
host: gum.criteo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=arras.io&gdpr=0&gdpr_consent=
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

content-type: application/json; charset=utf-8
date: Sun, 09 Jul 2023 17:54:05 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
server-processing-duration-in-ticks: 540985
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
DNS

gum.nl3.vip.prod.criteo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

gum.nl3.vip.prod.criteo.com

IN A

Response

gum.nl3.vip.prod.criteo.com

IN A

178.250.1.11
DNS

gum.nl3.vip.prod.criteo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

gum.nl3.vip.prod.criteo.com

IN AAAA

Response

gum.nl3.vip.prod.criteo.com

IN AAAA

2a02:2638:3::c
DNS

esp.rtbhouse.com

firefox.exe

Remote address:

8.8.8.8:53

Request

esp.rtbhouse.com

IN A

Response

esp.rtbhouse.com

IN A

35.190.39.111
DNS

pippio.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pippio.com

IN A

Response

pippio.com

IN A

107.178.254.65
OPTIONS

https://esp.rtbhouse.com/encrypt

firefox.exe

Remote address:

35.190.39.111:443

Request

OPTIONS /encrypt HTTP/2.0
host: esp.rtbhouse.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
access-control-request-method: POST
access-control-request-headers: content-type
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
POST

https://esp.rtbhouse.com/encrypt

firefox.exe

Remote address:

35.190.39.111:443

Request

POST /encrypt HTTP/2.0
host: esp.rtbhouse.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: application/json
content-length: 135
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
GET

https://pippio.com/api/sync?pid=5324&_=2

firefox.exe

Remote address:

107.178.254.65:443

Request

GET /api/sync?pid=5324&_=2 HTTP/2.0
host: pippio.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

esp.rtbhouse.com

firefox.exe

Remote address:

8.8.8.8:53

Request

esp.rtbhouse.com

IN A

Response

esp.rtbhouse.com

IN A

35.190.39.111
DNS

pippio.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pippio.com

IN A

Response

pippio.com

IN A

107.178.254.65
DNS

dnacdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

dnacdn.net

IN A

Response

dnacdn.net

IN A

74.119.119.139
DNS

pippio.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pippio.com

IN AAAA

Response
DNS

ag.gbc.criteo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ag.gbc.criteo.com

IN A

Response

ag.gbc.criteo.com

IN CNAME

gbc4.va.us.criteo.com

gbc4.va.us.criteo.com

IN A

185.235.85.124

gbc4.va.us.criteo.com

IN A

185.235.85.130

gbc4.va.us.criteo.com

IN A

185.235.85.137

gbc4.va.us.criteo.com

IN A

185.235.85.127

gbc4.va.us.criteo.com

IN A

185.235.85.112

gbc4.va.us.criteo.com

IN A

185.235.85.122

gbc4.va.us.criteo.com

IN A

185.235.85.116

gbc4.va.us.criteo.com

IN A

185.235.85.117

gbc4.va.us.criteo.com

IN A

185.235.85.115

gbc4.va.us.criteo.com

IN A

185.235.85.129

gbc4.va.us.criteo.com

IN A

185.235.85.134

gbc4.va.us.criteo.com

IN A

185.235.85.128

gbc4.va.us.criteo.com

IN A

185.235.85.136

gbc4.va.us.criteo.com

IN A

185.235.85.138

gbc4.va.us.criteo.com

IN A

185.235.85.132

gbc4.va.us.criteo.com

IN A

185.235.85.119

gbc4.va.us.criteo.com

IN A

185.235.85.121

gbc4.va.us.criteo.com

IN A

185.235.85.126

gbc4.va.us.criteo.com

IN A

185.235.85.125

gbc4.va.us.criteo.com

IN A

185.235.85.118

gbc4.va.us.criteo.com

IN A

185.235.85.133

gbc4.va.us.criteo.com

IN A

185.235.85.113

gbc4.va.us.criteo.com

IN A

185.235.85.131

gbc4.va.us.criteo.com

IN A

185.235.85.139

gbc4.va.us.criteo.com

IN A

185.235.85.135

gbc4.va.us.criteo.com

IN A

185.235.85.114

gbc4.va.us.criteo.com

IN A

185.235.85.123

gbc4.va.us.criteo.com

IN A

185.235.85.120
DNS

gem.gbc.criteo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

gem.gbc.criteo.com

IN A

Response

gem.gbc.criteo.com

IN CNAME

gbc4.va.us.criteo.com

gbc4.va.us.criteo.com

IN A

185.235.85.126

gbc4.va.us.criteo.com

IN A

185.235.85.123

gbc4.va.us.criteo.com

IN A

185.235.85.128

gbc4.va.us.criteo.com

IN A

185.235.85.125

gbc4.va.us.criteo.com

IN A

185.235.85.133

gbc4.va.us.criteo.com

IN A

185.235.85.137

gbc4.va.us.criteo.com

IN A

185.235.85.124

gbc4.va.us.criteo.com

IN A

185.235.85.135

gbc4.va.us.criteo.com

IN A

185.235.85.118

gbc4.va.us.criteo.com

IN A

185.235.85.114

gbc4.va.us.criteo.com

IN A

185.235.85.116

gbc4.va.us.criteo.com

IN A

185.235.85.134

gbc4.va.us.criteo.com

IN A

185.235.85.129

gbc4.va.us.criteo.com

IN A

185.235.85.122

gbc4.va.us.criteo.com

IN A

185.235.85.130

gbc4.va.us.criteo.com

IN A

185.235.85.139

gbc4.va.us.criteo.com

IN A

185.235.85.127

gbc4.va.us.criteo.com

IN A

185.235.85.132

gbc4.va.us.criteo.com

IN A

185.235.85.112

gbc4.va.us.criteo.com

IN A

185.235.85.136

gbc4.va.us.criteo.com

IN A

185.235.85.117

gbc4.va.us.criteo.com

IN A

185.235.85.131

gbc4.va.us.criteo.com

IN A

185.235.85.113

gbc4.va.us.criteo.com

IN A

185.235.85.121

gbc4.va.us.criteo.com

IN A

185.235.85.120

gbc4.va.us.criteo.com

IN A

185.235.85.119

gbc4.va.us.criteo.com

IN A

185.235.85.138

gbc4.va.us.criteo.com

IN A

185.235.85.115
DNS

esp.rtbhouse.com

firefox.exe

Remote address:

8.8.8.8:53

Request

esp.rtbhouse.com

IN AAAA

Response
DNS

102.116.159.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

102.116.159.54.in-addr.arpa

IN PTR

Response

102.116.159.54.in-addr.arpa

IN PTR

ec2-54-159-116-102 compute-1 amazonawscom
DNS

87.70.96.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

87.70.96.34.in-addr.arpa

IN PTR

Response

87.70.96.34.in-addr.arpa

IN PTR

87709634bcgoogleusercontentcom
DNS

86.53.22.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

86.53.22.104.in-addr.arpa

IN PTR

Response
DNS

3.1.250.178.in-addr.arpa

Remote address:

8.8.8.8:53

Request

3.1.250.178.in-addr.arpa

IN PTR

Response
DNS

222.152.64.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

222.152.64.172.in-addr.arpa

IN PTR

Response
DNS

53.135.120.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

53.135.120.34.in-addr.arpa

IN PTR

Response

53.135.120.34.in-addr.arpa

IN PTR

5313512034bcgoogleusercontentcom
DNS

68.159.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

68.159.190.20.in-addr.arpa

IN PTR

Response
DNS

64.98.95.141.in-addr.arpa

Remote address:

8.8.8.8:53

Request

64.98.95.141.in-addr.arpa

IN PTR

Response

64.98.95.141.in-addr.arpa

IN PTR

ns3216658ip-141-95-98eu
DNS

1.46.160.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.46.160.34.in-addr.arpa

IN PTR

Response

1.46.160.34.in-addr.arpa

IN PTR

14616034bcgoogleusercontentcom
DNS

65.30.205.44.in-addr.arpa

Remote address:

8.8.8.8:53

Request

65.30.205.44.in-addr.arpa

IN PTR

Response

65.30.205.44.in-addr.arpa

IN PTR

ec2-44-205-30-65 compute-1 amazonawscom
DNS

11.1.250.178.in-addr.arpa

Remote address:

8.8.8.8:53

Request

11.1.250.178.in-addr.arpa

IN PTR

Response
GET

https://dnacdn.net/dna

firefox.exe

Remote address:

74.119.119.139:443

Request

GET /dna HTTP/2.0
host: dnacdn.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://gum.criteo.com/
origin: https://gum.criteo.com
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-length: 0
date: Sun, 09 Jul 2023 17:54:04 GMT
server: Kestrel
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: browser_data=rTolWF9zTGl3akxkdkZrJTJCa0NRQkdCUnJvazBjdzlVZ2tabnJPaFRCdGMyZW14VFV3cmx0c2trTldIREdxVFA0WE9STGhDWEhMaHFCeUtmV2V6RkdocE95eG93JTNEJTNE; expires=Fri, 02 Aug 2024 17:54:05 GMT; domain=dnacdn.net; path=/; secure; samesite=none
server-processing-duration-in-ticks: 129613
strict-transport-security: max-age=31536000; preload;
GET

https://dnacdn.net/dna

firefox.exe

Remote address:

74.119.119.139:443

Request

GET /dna HTTP/2.0
host: dnacdn.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://gum.criteo.com/
origin: https://gum.criteo.com
cookie: browser_data=rTolWF9zTGl3akxkdkZrJTJCa0NRQkdCUnJvazBjdzlVZ2tabnJPaFRCdGMyZW14VFV3cmx0c2trTldIREdxVFA0WE9STGhDWEhMaHFCeUtmV2V6RkdocE95eG93JTNEJTNE
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: application/json; charset=utf-8
date: Sun, 09 Jul 2023 17:54:04 GMT
server: Kestrel
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: browser_data=MoOTUl9zTGl3akxkdkZrJTJCa0NRQkdCUnJvazBjdzlVZ2tabnJPaFRCdGMyZW14VFV3cmx0c2trTldIREdxVFA0WE9STGg3MEZQSnpjVjNUVCUyRkRhVzFGOW4wV2clM0QlM0Q; expires=Fri, 02 Aug 2024 17:54:05 GMT; domain=dnacdn.net; path=/; secure; samesite=none
server-processing-duration-in-ticks: 362052
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
DNS

gbc4.va.us.criteo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

gbc4.va.us.criteo.com

IN A

Response

gbc4.va.us.criteo.com

IN A

185.235.85.129

gbc4.va.us.criteo.com

IN A

185.235.85.132

gbc4.va.us.criteo.com

IN A

185.235.85.121

gbc4.va.us.criteo.com

IN A

185.235.85.136

gbc4.va.us.criteo.com

IN A

185.235.85.113

gbc4.va.us.criteo.com

IN A

185.235.85.130

gbc4.va.us.criteo.com

IN A

185.235.85.134

gbc4.va.us.criteo.com

IN A

185.235.85.125

gbc4.va.us.criteo.com

IN A

185.235.85.114

gbc4.va.us.criteo.com

IN A

185.235.85.119

gbc4.va.us.criteo.com

IN A

185.235.85.112

gbc4.va.us.criteo.com

IN A

185.235.85.139

gbc4.va.us.criteo.com

IN A

185.235.85.126

gbc4.va.us.criteo.com

IN A

185.235.85.127

gbc4.va.us.criteo.com

IN A

185.235.85.115

gbc4.va.us.criteo.com

IN A

185.235.85.120

gbc4.va.us.criteo.com

IN A

185.235.85.138

gbc4.va.us.criteo.com

IN A

185.235.85.128

gbc4.va.us.criteo.com

IN A

185.235.85.135

gbc4.va.us.criteo.com

IN A

185.235.85.117

gbc4.va.us.criteo.com

IN A

185.235.85.118

gbc4.va.us.criteo.com

IN A

185.235.85.131

gbc4.va.us.criteo.com

IN A

185.235.85.116

gbc4.va.us.criteo.com

IN A

185.235.85.122

gbc4.va.us.criteo.com

IN A

185.235.85.133

gbc4.va.us.criteo.com

IN A

185.235.85.123

gbc4.va.us.criteo.com

IN A

185.235.85.124

gbc4.va.us.criteo.com

IN A

185.235.85.137
DNS

dnacdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

dnacdn.net

IN A

Response

dnacdn.net

IN A

74.119.119.139
DNS

dnacdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

dnacdn.net

IN AAAA

Response
GET

https://ag.gbc.criteo.com/newidsd

firefox.exe

Remote address:

185.235.85.124:443

Request

GET /newidsd HTTP/2.0
host: ag.gbc.criteo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://gum.criteo.com/
origin: https://gum.criteo.com
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

content-type: application/json; charset=utf-8
date: Sun, 09 Jul 2023 17:54:04 GMT
server: Kestrel
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
server-processing-duration-in-ticks: 146636
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
GET

https://gem.gbc.criteo.com/newidsd

firefox.exe

Remote address:

185.235.85.126:443

Request

GET /newidsd HTTP/2.0
host: gem.gbc.criteo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://gum.criteo.com/
origin: https://gum.criteo.com
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

content-type: application/json; charset=utf-8
date: Sun, 09 Jul 2023 17:54:04 GMT
server: Kestrel
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
server-processing-duration-in-ticks: 64411
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
DNS

google-bidout-d.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

google-bidout-d.openx.net

IN A

Response

google-bidout-d.openx.net

IN A

34.98.64.218

google-bidout-d.openx.net

IN A

35.244.159.8
GET

https://google-bidout-d.openx.net/w/1.0/pd?plm=5

firefox.exe

Remote address:

34.98.64.218:443

Request

GET /w/1.0/pd?plm=5 HTTP/2.0
host: google-bidout-d.openx.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers
GET

https://google-bidout-d.openx.net/w/1.0/pd?cc=1&plm=5

firefox.exe

Remote address:

34.98.64.218:443

Request

GET /w/1.0/pd?cc=1&plm=5 HTTP/2.0
host: google-bidout-d.openx.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers
DNS

lb.eu-1-id5-sync.com

firefox.exe

Remote address:

8.8.8.8:53

Request

lb.eu-1-id5-sync.com

IN A

Response

lb.eu-1-id5-sync.com

IN A

162.19.138.82

lb.eu-1-id5-sync.com

IN A

162.19.138.116

lb.eu-1-id5-sync.com

IN A

141.95.33.111

lb.eu-1-id5-sync.com

IN A

162.19.138.83

lb.eu-1-id5-sync.com

IN A

141.95.98.65

lb.eu-1-id5-sync.com

IN A

162.19.138.119

lb.eu-1-id5-sync.com

IN A

162.19.138.120

lb.eu-1-id5-sync.com

IN A

162.19.138.118

lb.eu-1-id5-sync.com

IN A

141.95.98.64

lb.eu-1-id5-sync.com

IN A

162.19.138.117
DNS

google-bidout-d.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

google-bidout-d.openx.net

IN A

Response

google-bidout-d.openx.net

IN A

34.98.64.218

google-bidout-d.openx.net

IN A

35.244.159.8
DNS

c.amazon-adsystem.com

firefox.exe

Remote address:

8.8.8.8:53

Request

c.amazon-adsystem.com

IN A

Response

c.amazon-adsystem.com

IN CNAME

d1ykf07e75w7ss.cloudfront.net

d1ykf07e75w7ss.cloudfront.net

IN A

52.222.136.109
DNS

google-bidout-d.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

google-bidout-d.openx.net

IN AAAA

Response
GET

https://lb.eu-1-id5-sync.com/lb/v1

firefox.exe

Remote address:

162.19.138.82:443

Request

GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Content-Type: text/plain
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
access-control-allow-origin: https://arras.io
vary: Origin
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 09 Jul 2023 17:54:04 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://lb.eu-1-id5-sync.com/lb/v1

firefox.exe

Remote address:

162.19.138.82:443

Request

GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Content-Type: text/plain
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
access-control-allow-origin: https://arras.io
vary: Origin
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 09 Jul 2023 17:54:06 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
DNS

lb.eu-1-id5-sync.com

firefox.exe

Remote address:

8.8.8.8:53

Request

lb.eu-1-id5-sync.com

IN A

Response

lb.eu-1-id5-sync.com

IN A

162.19.138.120

lb.eu-1-id5-sync.com

IN A

162.19.138.118

lb.eu-1-id5-sync.com

IN A

141.95.98.65

lb.eu-1-id5-sync.com

IN A

141.95.33.111

lb.eu-1-id5-sync.com

IN A

162.19.138.116

lb.eu-1-id5-sync.com

IN A

162.19.138.119

lb.eu-1-id5-sync.com

IN A

162.19.138.83

lb.eu-1-id5-sync.com

IN A

162.19.138.117

lb.eu-1-id5-sync.com

IN A

141.95.98.64

lb.eu-1-id5-sync.com

IN A

162.19.138.82
DNS

lb.eu-1-id5-sync.com

firefox.exe

Remote address:

8.8.8.8:53

Request

lb.eu-1-id5-sync.com

IN AAAA

Response
DNS

d1ykf07e75w7ss.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

d1ykf07e75w7ss.cloudfront.net

IN A

Response

d1ykf07e75w7ss.cloudfront.net

IN A

52.222.136.109
DNS

d1ykf07e75w7ss.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

d1ykf07e75w7ss.cloudfront.net

IN AAAA

Response
GET

https://c.amazon-adsystem.com/aax2/apstag.js

firefox.exe

Remote address:

52.222.136.109:443

Request

GET /aax2/apstag.js HTTP/2.0
host: c.amazon-adsystem.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: application/javascript
date: Sun, 09 Jul 2023 17:49:00 GMT
last-modified: Thu, 29 Jun 2023 21:03:21 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 ec1ac21acdbd36c971eca9d6b61d0744.cloudfront.net (CloudFront), 1.1 d8c5e23736c47a3e5184b0a78042898e.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA60-P1
etag: W/"7c6a36eb4b73f6b7cf4a63a33418a2c9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: gf6jWj_1kUQ_SdGXof6UJuWlpS9RcPKtGz1fBt9o0WOqRIVZhfuAEw==
age: 306
GET

https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Farras.io&pubid=bd056b42-51db-43ce-9a8e-3b11319b5d1f

firefox.exe

Remote address:

52.222.136.109:443

Request

GET /cdn/prod/config?src=600&u=https%3A%2F%2Farras.io&pubid=bd056b42-51db-43ce-9a8e-3b11319b5d1f HTTP/2.0
host: c.amazon-adsystem.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: application/json;charset=UTF-8
content-length: 2345
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Sun, 09 Jul 2023 16:48:37 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 d8c5e23736c47a3e5184b0a78042898e.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: gDSKm1ygrhoZItwOFH9cujtbIEVfAR_ZbBFA9l8L07LLQdbkv60yIg==
age: 3928
DNS

cm.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cm.g.doubleclick.net

IN A

Response

cm.g.doubleclick.net

IN A

172.217.168.226
POST

https://id5-sync.com/g/v2/483.json

firefox.exe

Remote address:

141.95.98.64:443

Request

POST /g/v2/483.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Content-Type: text/plain
Content-Length: 305
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
access-control-allow-origin: https://arras.io
vary: Origin
access-control-allow-credentials: true
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=; Max-Age=7776000; Expires=Sat, 07-Oct-2023 17:54:05 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: id5=68b3cb18-adf6-79a0-a221-f7d12cde0207#1688925245333#1; Max-Age=7776000; Expires=Sat, 07-Oct-2023 17:54:05 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 09 Jul 2023 17:54:05 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
POST

https://id5-sync.com/g/v2/483.json

firefox.exe

Remote address:

141.95.98.64:443

Request

POST /g/v2/483.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Content-Type: text/plain
Content-Length: 548
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
access-control-allow-origin: https://arras.io
vary: Origin
access-control-allow-credentials: true
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=; Max-Age=7776000; Expires=Sat, 07-Oct-2023 17:54:06 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: id5=f244bc46-1522-6c42-8c8b-9f3fa243c4c6#1688925246780#2; Max-Age=7776000; Expires=Sat, 07-Oct-2023 17:54:06 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 09 Jul 2023 17:54:06 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/i/483/8.gif?id5id=ID5*q1S87KjFBWCLsnrKzws5-8ZReN5_eESJNbCDtenJFE1UXWGFAT7Zo3ktD5vpfKXvVF7OM02ax-i4oA3xmxJg6w&o=api&gdpr_consent=undefined&gdpr=false

firefox.exe

Remote address:

141.95.98.64:443

Request

GET /i/483/8.gif?id5id=ID5*q1S87KjFBWCLsnrKzws5-8ZReN5_eESJNbCDtenJFE1UXWGFAT7Zo3ktD5vpfKXvVF7OM02ax-i4oA3xmxJg6w&o=api&gdpr_consent=undefined&gdpr=false HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: cf=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: id5=a303a8b9-e7b0-70a5-b923-fad71618e2ef#1688925247249#1; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://id5-sync.com/c/483/0/8/1.gif?gdpr=0&gdpr_consent=&us_privacy=
transfer-encoding: chunked
date: Sun, 09 Jul 2023 17:54:07 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/483/0/8/1.gif?gdpr=0&gdpr_consent=&us_privacy=

firefox.exe

Remote address:

141.95.98.64:443

Request

GET /c/483/0/8/1.gif?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: cf=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Sun, 09-Jul-2023 17:59:07 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: image/gif;charset=UTF-8
transfer-encoding: chunked
date: Sun, 09 Jul 2023 17:54:07 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
DNS

cm.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cm.g.doubleclick.net

IN A

Response

cm.g.doubleclick.net

IN A

142.250.179.162
GET

https://cm.g.doubleclick.net/pixel?google_nid=pippio_dmp&google_cm&google_no_sc&m=CMwpGgwIvOirpQYSBAgCEABCAEoA

firefox.exe

Remote address:

172.217.168.226:443

Request

GET /pixel?google_nid=pippio_dmp&google_cm&google_no_sc&m=CMwpGgwIvOirpQYSBAgCEABCAEoA HTTP/2.0
host: cm.g.doubleclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

cm.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cm.g.doubleclick.net

IN AAAA

Response
GET

https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js

firefox.exe

Remote address:

52.222.136.109:443

Request

GET /bao-csm/aps-comm/aps_csm.js HTTP/2.0
host: c.amazon-adsystem.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Sat, 24 Jun 2023 09:19:11 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: rBtfgJUMGYsy5fZuQwMAU7hSD.fVdF76
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 01:59:55 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 425cbe8f956bdcb8754c19eb873fd2d0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: h3mpCot2Y1_Zb-Z9YoH0mJugOVauAW51htC4al5l_YDJZxlxlgaAZw==
age: 57251
DNS

script.4dex.io

firefox.exe

Remote address:

8.8.8.8:53

Request

script.4dex.io

IN A

Response

script.4dex.io

IN A

104.26.8.169

script.4dex.io

IN A

104.26.9.169

script.4dex.io

IN A

172.67.75.241
DNS

tlx.3lift.com

firefox.exe

Remote address:

8.8.8.8:53

Request

tlx.3lift.com

IN A

Response

tlx.3lift.com

IN CNAME

eu-tlx.3lift.com

eu-tlx.3lift.com

IN A

52.29.80.116

eu-tlx.3lift.com

IN A

18.198.108.92

eu-tlx.3lift.com

IN A

18.185.163.149

eu-tlx.3lift.com

IN A

3.64.88.101

eu-tlx.3lift.com

IN A

3.67.62.218

eu-tlx.3lift.com

IN A

18.158.190.100

eu-tlx.3lift.com

IN A

18.196.86.133

eu-tlx.3lift.com

IN A

52.28.167.177
DNS

apex.go.sonobi.com

firefox.exe

Remote address:

8.8.8.8:53

Request

apex.go.sonobi.com

IN A

Response

apex.go.sonobi.com

IN CNAME

iad-2-apex.go.sonobi.com

iad-2-apex.go.sonobi.com

IN A

69.166.1.8

iad-2-apex.go.sonobi.com

IN A

69.166.1.9

iad-2-apex.go.sonobi.com

IN A

69.166.1.14

iad-2-apex.go.sonobi.com

IN A

69.166.1.15
DNS

fastlane.rubiconproject.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fastlane.rubiconproject.com

IN A

Response

fastlane.rubiconproject.com

IN CNAME

tagged-by.rubiconproject.net.akadns.net

tagged-by.rubiconproject.net.akadns.net

IN A

213.19.162.31

tagged-by.rubiconproject.net.akadns.net

IN A

213.19.162.51

tagged-by.rubiconproject.net.akadns.net

IN A

213.19.162.41

tagged-by.rubiconproject.net.akadns.net

IN A

213.19.162.21

tagged-by.rubiconproject.net.akadns.net

IN A

69.173.144.140
DNS

eu-tlx.3lift.com

firefox.exe

Remote address:

8.8.8.8:53

Request

eu-tlx.3lift.com

IN A

Response

eu-tlx.3lift.com

IN A

18.196.86.133

eu-tlx.3lift.com

IN A

18.184.146.88

eu-tlx.3lift.com

IN A

52.29.64.82

eu-tlx.3lift.com

IN A

52.29.80.116

eu-tlx.3lift.com

IN A

3.73.254.28

eu-tlx.3lift.com

IN A

3.65.80.210

eu-tlx.3lift.com

IN A

18.158.90.52

eu-tlx.3lift.com

IN A

35.156.33.238
DNS

mp.4dex.io

firefox.exe

Remote address:

8.8.8.8:53

Request

mp.4dex.io

IN A

Response

mp.4dex.io

IN A

104.18.2.114

mp.4dex.io

IN A

104.18.3.114
DNS

htlb.casalemedia.com

firefox.exe

Remote address:

8.8.8.8:53

Request

htlb.casalemedia.com

IN A

Response

htlb.casalemedia.com

IN CNAME

htlb.casalemedia.com.cdn.cloudflare.net

htlb.casalemedia.com.cdn.cloudflare.net

IN A

104.18.25.185

htlb.casalemedia.com.cdn.cloudflare.net

IN A

104.18.24.185
DNS

23.4.85.104.in-addr.arpa

firefox.exe

Remote address:

8.8.8.8:53

Request

23.4.85.104.in-addr.arpa

IN PTR

Response

23.4.85.104.in-addr.arpa

IN PTR

a104-85-4-23deploystaticakamaitechnologiescom
GET

https://script.4dex.io/localstore.js

firefox.exe

Remote address:

104.26.8.169:443

Request

GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Date: Sun, 09 Jul 2023 17:54:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"922cffdd75f7192f75231d92684885aa"
Last-Modified: Tue, 06 Jun 2023 12:52:55 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 2323112
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JJ%2FWqUlZqEjUdmqKMVeLbJCEtYMficgOc%2BDdPqWyr3pSDSw8eWu3Do%2B2rx332sgUld%2FtZQWVl87XZYXYO5OVzmAWKMq8jWDtiBiMF%2BIZCuxNvBtseIoSm9p5s8RG%2FeV3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7e426e212d8ab89a-AMS
Content-Encoding: br
DNS

script.4dex.io

firefox.exe

Remote address:

8.8.8.8:53

Request

script.4dex.io

IN A

Response

script.4dex.io

IN A

104.26.8.169

script.4dex.io

IN A

104.26.9.169

script.4dex.io

IN A

172.67.75.241
GET

https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22759973c5e5542a%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2280bfb6fd6d9ea78%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2298586b12452d1c%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2210952a45915fe74%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2211a1d6056924a698%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Farras.io%2F%23wpa&s=8c9871a0-370a-4047-b34e-b09f88a1c440&pv=71d92942-035e-4f2c-88b6-1643747f3f27&vp=desktop&lib_name=prebid&lib_v=7.48.0&us=8&iqid=%7B%22pcid%22%3A%2204c232c9-88b8-43e3-bd5d-d0afee26f0dc%22%2C%22pcidDate%22%3A1688925244182%7D&fpd=%7B%22site%22%3A%7B%22domain%22%3A%22arras.io%22%2C%22publisher%22%3A%7B%22domain%22%3A%22arras.io%22%7D%2C%22page%22%3A%22https%3A%2F%2Farras.io%2F%23wpa%22%2C%22cat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22sectioncat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22pagecat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A595%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22language%22%3A%22en%22%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22playwire.com%22%2C%22sid%22%3A%221024850%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%7D%7D%5D%7D%2C%7B%22source%22%3A%22crwdcntrl.net%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22c9afb21a-e0f7-44b2-9769-36a285835cd3%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0

firefox.exe

Remote address:

69.166.1.8:443

Request

GET /trinity.json?key_maker=%7B%22759973c5e5542a%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2280bfb6fd6d9ea78%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2298586b12452d1c%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2210952a45915fe74%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2211a1d6056924a698%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Farras.io%2F%23wpa&s=8c9871a0-370a-4047-b34e-b09f88a1c440&pv=71d92942-035e-4f2c-88b6-1643747f3f27&vp=desktop&lib_name=prebid&lib_v=7.48.0&us=8&iqid=%7B%22pcid%22%3A%2204c232c9-88b8-43e3-bd5d-d0afee26f0dc%22%2C%22pcidDate%22%3A1688925244182%7D&fpd=%7B%22site%22%3A%7B%22domain%22%3A%22arras.io%22%2C%22publisher%22%3A%7B%22domain%22%3A%22arras.io%22%7D%2C%22page%22%3A%22https%3A%2F%2Farras.io%2F%23wpa%22%2C%22cat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22sectioncat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22pagecat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A595%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22language%22%3A%22en%22%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22playwire.com%22%2C%22sid%22%3A%221024850%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%7D%7D%5D%7D%2C%7B%22source%22%3A%22crwdcntrl.net%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22c9afb21a-e0f7-44b2-9769-36a285835cd3%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/2.0
host: apex.go.sonobi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:06 GMT
content-type: application/json
content-length: 30
expires: Sat, 26 Jul 1997 05:00:00 GMT
cache-control: no-cache, no-store, private
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
tcn: Choice
vary: negotiate,Accept-Encoding
x-go-server: go-iad-2-6-154
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
set-cookie: __uis=7f3e8a91-8976-47ed-acde-bb37a69d2208; expires=Tue, 08 Aug 2023 17:54:05 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
set-cookie: _usd_arras.io=71d92942-035e-4f2c-88b6-1643747f3f27; expires=Mon, 10 Jul 2023 17:54:05 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
set-cookie: HAPLB8G=s86154|ZKr0Q; path=/; domain=.go.sonobi.com; SameSite=none; Secure
server: sonobi-go
DNS

iad-2-apex.go.sonobi.com

firefox.exe

Remote address:

8.8.8.8:53

Request

iad-2-apex.go.sonobi.com

IN A

Response

iad-2-apex.go.sonobi.com

IN A

69.166.1.8

iad-2-apex.go.sonobi.com

IN A

69.166.1.9

iad-2-apex.go.sonobi.com

IN A

69.166.1.14

iad-2-apex.go.sonobi.com

IN A

69.166.1.15
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&l_pb_bid_id=135e4e9a3d906de8&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.26431674626004475

firefox.exe

Remote address:

213.19.162.31:443

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&l_pb_bid_id=135e4e9a3d906de8&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.26431674626004475 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:05 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQHFWI-3-5JVZ; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|naVuGyos1qpOj3hxkISvvzQ/3SF9Y/s1W7ucW1s9S4OMKKSbjgxmm3ajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 549
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&l_pb_bid_id=14049f33d100c34&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.5916555394002331

firefox.exe

Remote address:

213.19.162.31:443

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&l_pb_bid_id=14049f33d100c34&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.5916555394002331 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:05 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQHFWB-1B-55SX; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|naVuGyos1qpuilCGXqPfkTQ/3SF9Y/s1W7ucW1s9S4OMKKSbjgxmm3ajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 549
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=16999f29023a7c1&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.4521558224669091

firefox.exe

Remote address:

213.19.162.31:443

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=16999f29023a7c1&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.4521558224669091 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:05 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQHFWY-1J-CKN8; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|naVuGyos1qp3wdF8ogWivDQ/3SF9Y/s1W7ucW1s9S4OMKKSbjgxmm3ajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 554
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=1586f0ca8d60b548&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.6471078634618103

firefox.exe

Remote address:

213.19.162.31:443

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=1586f0ca8d60b548&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.6471078634618103 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:05 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQHFXC-H-9Q7L; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|naVuGyos1qrq7/Je9Ja0mTQ/3SF9Y/s1KJSne8I4xUmMKKSbjgxmm3ajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 554
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=175fcc2bcec54288&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.7636574116217834

firefox.exe

Remote address:

213.19.162.31:443

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=175fcc2bcec54288&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.7636574116217834 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:05 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQHFXA-1M-8V59; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|naVuGyos1qrjjLLHp/hm0TQ/3SF9Y/s1W7ucW1s9S4OMKKSbjgxmm3ajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:05 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 554
POST

https://mp.4dex.io/prebid

firefox.exe

Remote address:

104.18.2.114:443

Request

POST /prebid HTTP/2.0
host: mp.4dex.io
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 13751
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:05 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: uids=eyJzeW5jcyI6eyJpbmRleGV4Y2hhbmdlIjoiMjAyMy0wNy0wOVQxNzo1NDowNS43NjI1NTA1MjFaIiwicHVibWF0aWMiOiIyMDIzLTA3LTA5VDE3OjU0OjA1Ljc2MjUyMTQ5NloiLCJydWJpY29uIjoiMjAyMy0wNy0wOVQxNzo1NDowNS43NjI1Mjg4NjFaIiwieWFob28iOiIyMDIzLTA3LTA5VDE3OjU0OjA1Ljc2MjUzNDk5NFoifSwidWlkcyI6eyJhZGFnaW8iOnsidWlkIjoiZTFkMTVkNTEtNDFjMi00ZmM4LTk5YmMtMzBjYTBjODUzYjQ3IiwiZXhwaXJlcyI6IjIwMjMtMDktMDdUMTc6NTQ6MDUuNzYwODQ3NDc4WiJ9fSwiYmRheSI6IjIwMjMtMDctMDlUMTc6NTQ6MDUuNzYwNzg4Njc1WiJ9; Path=/; Domain=4dex.io; Expires=Thu, 07 Sep 2023 17:54:05 GMT; Secure; SameSite=None
vary: Origin
vary: Accept-Encoding
x-err: Shapings: no adunits with size and seat and mapping
x-version: 3.0.0-gcp-ams
x-warn: Validating the Prebid Request adunits. Duplicate adUnitCode: med_rect_atf
x-warn: Validating the Prebid Request adunits. Duplicate adUnitCode: leaderboard_atf
x-warn: Validating the Prebid Request adunits. Duplicate adUnitCode: leaderboard_atf
x-warn: Process Seats Booster. unable to get the seat booster engine for organization: 1159
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7e426e215a6f0e8c-AMS
content-encoding: gzip
DNS

script.4dex.io

firefox.exe

Remote address:

8.8.8.8:53

Request

script.4dex.io

IN AAAA

Response

script.4dex.io

IN AAAA

2606:4700:20::681a:9a9

script.4dex.io

IN AAAA

2606:4700:20::681a:8a9

script.4dex.io

IN AAAA

2606:4700:20::ac43:4bf1
DNS

iad-2-apex.go.sonobi.com

firefox.exe

Remote address:

8.8.8.8:53

Request

iad-2-apex.go.sonobi.com

IN AAAA

Response
DNS

eu-tlx.3lift.com

firefox.exe

Remote address:

8.8.8.8:53

Request

eu-tlx.3lift.com

IN AAAA

Response
POST

https://htlb.casalemedia.com/openrtb/pbjs?s=633335

firefox.exe

Remote address:

104.18.25.185:443

Request

POST /openrtb/pbjs?s=633335 HTTP/2.0
host: htlb.casalemedia.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 2497
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:05 GMT
content-type: application/json
content-length: 38
cf-ray: 7e426e2168d20e32-AMS
cf-cache-status: DYNAMIC
access-control-allow-origin: https://arras.io
cache-control: no-cache
expires: 0
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GhIehCRn%2BGiMZIpkChoUyveZFCR4ZRrUXNps%2F%2F%2Fm%2B2%2BBcWAq2QpciuYaReOC%2BTb6h3N762wQv2BSVzC9ItAVmMANEh5DPo9%2BePkpHyG%2Bym3V0v%2BzOl5jEQhVT1hsUwpJMD17YMpa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
POST

https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

firefox.exe

Remote address:

34.235.214.237:443

Request

POST /universal/v1?supply_id=WYu2BXv1 HTTP/2.0
host: btlr.sharethrough.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 1431
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
date: Sun, 09 Jul 2023 17:54:05 GMT
POST

https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

firefox.exe

Remote address:

34.235.214.237:443

Request

POST /universal/v1?supply_id=WYu2BXv1 HTTP/2.0
host: btlr.sharethrough.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 1431
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
date: Sun, 09 Jul 2023 17:54:06 GMT
POST

https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

firefox.exe

Remote address:

34.235.214.237:443

Request

POST /universal/v1?supply_id=WYu2BXv1 HTTP/2.0
host: btlr.sharethrough.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 1451
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
date: Sun, 09 Jul 2023 17:54:06 GMT
POST

https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

firefox.exe

Remote address:

34.235.214.237:443

Request

POST /universal/v1?supply_id=WYu2BXv1 HTTP/2.0
host: btlr.sharethrough.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 1451
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
date: Sun, 09 Jul 2023 17:54:06 GMT
POST

https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

firefox.exe

Remote address:

34.235.214.237:443

Request

POST /universal/v1?supply_id=WYu2BXv1 HTTP/2.0
host: btlr.sharethrough.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 1432
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
date: Sun, 09 Jul 2023 17:54:34 GMT
POST

https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

firefox.exe

Remote address:

34.235.214.237:443

Request

POST /universal/v1?supply_id=WYu2BXv1 HTTP/2.0
host: btlr.sharethrough.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 1431
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
date: Sun, 09 Jul 2023 17:54:34 GMT
POST

https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

firefox.exe

Remote address:

34.235.214.237:443

Request

POST /universal/v1?supply_id=WYu2BXv1 HTTP/2.0
host: btlr.sharethrough.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 1453
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
date: Sun, 09 Jul 2023 17:54:34 GMT
POST

https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

firefox.exe

Remote address:

34.235.214.237:443

Request

POST /universal/v1?supply_id=WYu2BXv1 HTTP/2.0
host: btlr.sharethrough.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 1452
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
date: Sun, 09 Jul 2023 17:54:34 GMT
DNS

grid.bidswitch.net

firefox.exe

Remote address:

8.8.8.8:53

Request

grid.bidswitch.net

IN A

Response

grid.bidswitch.net

IN CNAME

grid-udp-use.bidswitch.net

grid-udp-use.bidswitch.net

IN A

35.211.82.127

grid-udp-use.bidswitch.net

IN A

35.211.11.46

grid-udp-use.bidswitch.net

IN A

35.211.105.191

grid-udp-use.bidswitch.net

IN A

35.211.130.113

grid-udp-use.bidswitch.net

IN A

35.211.19.95

grid-udp-use.bidswitch.net

IN A

35.211.180.124

grid-udp-use.bidswitch.net

IN A

35.211.159.70

grid-udp-use.bidswitch.net

IN A

35.211.49.20

grid-udp-use.bidswitch.net

IN A

35.211.136.186

grid-udp-use.bidswitch.net

IN A

35.211.159.137
DNS

tagged-by.rubiconproject.net.akadns.net

firefox.exe

Remote address:

8.8.8.8:53

Request

tagged-by.rubiconproject.net.akadns.net

IN A

Response

tagged-by.rubiconproject.net.akadns.net

IN A

69.173.144.140

tagged-by.rubiconproject.net.akadns.net

IN A

213.19.162.21

tagged-by.rubiconproject.net.akadns.net

IN A

213.19.162.41

tagged-by.rubiconproject.net.akadns.net

IN A

213.19.162.31

tagged-by.rubiconproject.net.akadns.net

IN A

213.19.162.51
DNS

mp.4dex.io

firefox.exe

Remote address:

8.8.8.8:53

Request

mp.4dex.io

IN A

Response

mp.4dex.io

IN A

104.18.3.114

mp.4dex.io

IN A

104.18.2.114
DNS

ib.adnxs.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ib.adnxs.com

IN A

Response

ib.adnxs.com

IN CNAME

g.geogslb.com

g.geogslb.com

IN CNAME

ib.anycast.adnxs.com

ib.anycast.adnxs.com

IN A

37.252.171.52

ib.anycast.adnxs.com

IN A

37.252.171.22

ib.anycast.adnxs.com

IN A

37.252.171.85

ib.anycast.adnxs.com

IN A

37.252.171.149

ib.anycast.adnxs.com

IN A

37.252.171.84

ib.anycast.adnxs.com

IN A

37.252.171.53

ib.anycast.adnxs.com

IN A

37.252.172.123

ib.anycast.adnxs.com

IN A

37.252.173.215

ib.anycast.adnxs.com

IN A

37.252.171.21
DNS

htlb.casalemedia.com.cdn.cloudflare.net

firefox.exe

Remote address:

8.8.8.8:53

Request

htlb.casalemedia.com.cdn.cloudflare.net

IN A

Response

htlb.casalemedia.com.cdn.cloudflare.net

IN A

104.18.24.185

htlb.casalemedia.com.cdn.cloudflare.net

IN A

104.18.25.185
DNS

rtb.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

rtb.openx.net

IN A

Response

rtb.openx.net

IN A

35.227.252.103

rtb.openx.net

IN A

35.186.253.211
DNS

ads.servenobid.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ads.servenobid.com

IN A

Response

ads.servenobid.com

IN A

3.139.163.229

ads.servenobid.com

IN A

18.190.112.82

ads.servenobid.com

IN A

18.217.231.85
DNS

166.87.77.80.in-addr.arpa

firefox.exe

Remote address:

8.8.8.8:53

Request

166.87.77.80.in-addr.arpa

IN PTR

Response
DNS

secure.cdn.fastclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

secure.cdn.fastclick.net

IN A

Response

secure.cdn.fastclick.net

IN CNAME

secure2.cdn.fastclick.net.edgekey.net

secure2.cdn.fastclick.net.edgekey.net

IN CNAME

e4536.g.akamaiedge.net

e4536.g.akamaiedge.net

IN A

23.39.253.208
DNS

mp.4dex.io

firefox.exe

Remote address:

8.8.8.8:53

Request

mp.4dex.io

IN AAAA

Response

mp.4dex.io

IN AAAA

2606:4700::6812:372

mp.4dex.io

IN AAAA

2606:4700::6812:272
DNS

tagged-by.rubiconproject.net.akadns.net

firefox.exe

Remote address:

8.8.8.8:53

Request

tagged-by.rubiconproject.net.akadns.net

IN AAAA

Response

tagged-by.rubiconproject.net.akadns.net

IN AAAA

2602:803:c004:200::140

tagged-by.rubiconproject.net.akadns.net

IN AAAA

2602:803:c003:200::31

tagged-by.rubiconproject.net.akadns.net

IN AAAA

2602:803:c003:200::51

tagged-by.rubiconproject.net.akadns.net

IN AAAA

2602:803:c003:200::41

tagged-by.rubiconproject.net.akadns.net

IN AAAA

2602:803:c003:200::21
POST

https://rtb.openx.net/openrtbb/prebidjs

firefox.exe

Remote address:

35.227.252.103:443

Request

POST /openrtbb/prebidjs HTTP/2.0
host: rtb.openx.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
content-length: 3757
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
DNS

btlr-us-east-1.sharethrough.com

firefox.exe

Remote address:

8.8.8.8:53

Request

btlr-us-east-1.sharethrough.com

IN A

Response

btlr-us-east-1.sharethrough.com

IN A

52.55.204.172
DNS

htlb.casalemedia.com.cdn.cloudflare.net

firefox.exe

Remote address:

8.8.8.8:53

Request

htlb.casalemedia.com.cdn.cloudflare.net

IN AAAA

Response
DNS

btlr-us-east-1.sharethrough.com

firefox.exe

Remote address:

8.8.8.8:53

Request

btlr-us-east-1.sharethrough.com

IN AAAA

Response
GET

https://script.4dex.io/adagio.js

firefox.exe

Remote address:

104.26.8.169:443

Request

GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Date: Sun, 09 Jul 2023 17:54:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
ETag: W/"845b176368f98c92daf7aa531dcbc491"
Last-Modified: Tue, 06 Jun 2023 12:52:54 GMT
Vary: Origin, Accept-Encoding
Access-Control-Expose-Headers:
CF-Cache-Status: HIT
Age: 188475
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CMBguLsGTQFHPGOFBVRkEVZkl56ElkoKAk3FkdrHYPr6D5JhPvEHre5Fj2sKzR1lI7czKRoONOImy3qFYQNBiOBFPPI6SaqX1S3v%2FOuQAkPIMwOrKRaIneemk%2FI1PvPJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7e426e233eec0e3a-AMS
Content-Encoding: br
DNS

ib.anycast.adnxs.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ib.anycast.adnxs.com

IN A

Response

ib.anycast.adnxs.com

IN A

37.252.171.53

ib.anycast.adnxs.com

IN A

37.252.171.85

ib.anycast.adnxs.com

IN A

37.252.172.123

ib.anycast.adnxs.com

IN A

37.252.171.52

ib.anycast.adnxs.com

IN A

37.252.171.22

ib.anycast.adnxs.com

IN A

37.252.173.215

ib.anycast.adnxs.com

IN A

37.252.171.21

ib.anycast.adnxs.com

IN A

37.252.171.84

ib.anycast.adnxs.com

IN A

37.252.171.149
DNS

rtb.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

rtb.openx.net

IN A

Response

rtb.openx.net

IN A

35.186.253.211

rtb.openx.net

IN A

35.227.252.103
DNS

e4536.g.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e4536.g.akamaiedge.net

IN A

Response

e4536.g.akamaiedge.net

IN A

23.39.253.208
DNS

us-u.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

us-u.openx.net

IN A

Response

us-u.openx.net

IN A

34.98.64.218

us-u.openx.net

IN A

35.244.159.8
DNS

ib.anycast.adnxs.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ib.anycast.adnxs.com

IN AAAA

Response
DNS

111.39.190.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

111.39.190.35.in-addr.arpa

IN PTR

Response

111.39.190.35.in-addr.arpa

IN PTR

1113919035bcgoogleusercontentcom
DNS

65.254.178.107.in-addr.arpa

Remote address:

8.8.8.8:53

Request

65.254.178.107.in-addr.arpa

IN PTR

Response

65.254.178.107.in-addr.arpa

IN PTR

65254178107bcgoogleusercontentcom
DNS

139.119.119.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

139.119.119.74.in-addr.arpa

IN PTR

Response
DNS

126.85.235.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

126.85.235.185.in-addr.arpa

IN PTR

Response
DNS

124.85.235.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

124.85.235.185.in-addr.arpa

IN PTR

Response
DNS

218.64.98.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

218.64.98.34.in-addr.arpa

IN PTR

Response

218.64.98.34.in-addr.arpa

IN PTR

218649834bcgoogleusercontentcom
DNS

82.138.19.162.in-addr.arpa

Remote address:

8.8.8.8:53

Request

82.138.19.162.in-addr.arpa

IN PTR

Response

82.138.19.162.in-addr.arpa

IN PTR

ns31532337 ip-162-19-138eu
DNS

109.136.222.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

109.136.222.52.in-addr.arpa

IN PTR

Response

109.136.222.52.in-addr.arpa

IN PTR

server-52-222-136-109ams50r cloudfrontnet
DNS

116.80.29.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

116.80.29.52.in-addr.arpa

IN PTR

Response

116.80.29.52.in-addr.arpa

IN PTR

ec2-52-29-80-116eu-central-1compute amazonawscom
DNS

226.168.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

226.168.217.172.in-addr.arpa

IN PTR

Response

226.168.217.172.in-addr.arpa

IN PTR

ams15s40-in-f21e100net
DNS

169.8.26.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

169.8.26.104.in-addr.arpa

IN PTR

Response
DNS

138.6.85.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

138.6.85.104.in-addr.arpa

IN PTR

Response

138.6.85.104.in-addr.arpa

IN PTR

a104-85-6-138deploystaticakamaitechnologiescom
DNS

31.162.19.213.in-addr.arpa

Remote address:

8.8.8.8:53

Request

31.162.19.213.in-addr.arpa

IN PTR

Response
DNS

114.2.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

114.2.18.104.in-addr.arpa

IN PTR

Response
DNS

8.1.166.69.in-addr.arpa

Remote address:

8.8.8.8:53

Request

8.1.166.69.in-addr.arpa

IN PTR

Response
DNS

185.25.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

185.25.18.104.in-addr.arpa

IN PTR

Response
DNS

52.171.252.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

52.171.252.37.in-addr.arpa

IN PTR

Response

52.171.252.37.in-addr.arpa

IN PTR

1005bm-nginx-loadbalancermgmtfra1adnexusnet
DNS

103.252.227.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

103.252.227.35.in-addr.arpa

IN PTR

Response

103.252.227.35.in-addr.arpa

IN PTR

10325222735bcgoogleusercontentcom
DNS

contextual.media.net

Remote address:

8.8.8.8:53

Request

contextual.media.net

IN AAAA

Response
DNS

237.214.235.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

237.214.235.34.in-addr.arpa

IN PTR

Response

237.214.235.34.in-addr.arpa

IN PTR

ec2-34-235-214-237 compute-1 amazonawscom
DNS

rtb.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

rtb.openx.net

IN AAAA

Response
DNS

e4536.g.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e4536.g.akamaiedge.net

IN AAAA

Response
DNS

grid-udp-use.bidswitch.net

firefox.exe

Remote address:

8.8.8.8:53

Request

grid-udp-use.bidswitch.net

IN A

Response

grid-udp-use.bidswitch.net

IN A

35.211.165.203

grid-udp-use.bidswitch.net

IN A

35.211.54.207

grid-udp-use.bidswitch.net

IN A

35.211.203.15

grid-udp-use.bidswitch.net

IN A

35.211.199.18

grid-udp-use.bidswitch.net

IN A

35.211.102.174

grid-udp-use.bidswitch.net

IN A

35.207.56.110

grid-udp-use.bidswitch.net

IN A

35.211.88.168

grid-udp-use.bidswitch.net

IN A

35.207.26.130

grid-udp-use.bidswitch.net

IN A

35.211.162.6

grid-udp-use.bidswitch.net

IN A

35.211.34.176
DNS

ads.servenobid.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ads.servenobid.com

IN A

Response

ads.servenobid.com

IN A

3.139.163.229

ads.servenobid.com

IN A

18.190.112.82

ads.servenobid.com

IN A

18.217.231.85
DNS

grid-udp-use.bidswitch.net

firefox.exe

Remote address:

8.8.8.8:53

Request

grid-udp-use.bidswitch.net

IN AAAA

Response
DNS

ads.servenobid.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ads.servenobid.com

IN AAAA

Response
DNS

ads.pubmatic.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ads.pubmatic.com

IN A

Response

ads.pubmatic.com

IN CNAME

pubmatic.edgekey.net

pubmatic.edgekey.net

IN CNAME

e6603.g.akamaiedge.net

e6603.g.akamaiedge.net

IN A

184.30.24.198
DNS

e6603.g.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e6603.g.akamaiedge.net

IN A

Response

e6603.g.akamaiedge.net

IN A

184.30.24.198
DNS

e6603.g.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e6603.g.akamaiedge.net

IN AAAA

Response
DNS

assets.msn.com

Remote address:

8.8.8.8:53

Request

assets.msn.com

IN A

Response

assets.msn.com

IN CNAME

assets.msn.com.edgekey.net

assets.msn.com.edgekey.net

IN CNAME

e28578.d.akamaiedge.net

e28578.d.akamaiedge.net

IN A

95.100.135.152

e28578.d.akamaiedge.net

IN A

95.100.135.137

e28578.d.akamaiedge.net

IN A

2.19.198.187

e28578.d.akamaiedge.net

IN A

95.100.135.226

e28578.d.akamaiedge.net

IN A

95.100.135.138

e28578.d.akamaiedge.net

IN A

95.100.135.155

e28578.d.akamaiedge.net

IN A

95.100.135.224

e28578.d.akamaiedge.net

IN A

95.100.135.249

e28578.d.akamaiedge.net

IN A

95.100.135.234
GET

https://assets.msn.com/serviceak/v1/news/Feed/Windows?apikey=qrUeHGGYvVowZJuHA3XaH0uUvg1ZJ0GUZnXk3mxxPF&activityId=8751f7f8-9fb4-465a-aec7-abae11a15ae6&ocid=windows-windowsShell-feeds&user=m-0929d3a238cc47ce8673f69c6eefd7d2&Treatment=T6&MaximumDimensions=660x640&experience=Taskbar&AppVersion=1&osLocale=en-US&caller=bgtask

Remote address:

95.100.135.152:443

Request

GET /serviceak/v1/news/Feed/Windows?apikey=qrUeHGGYvVowZJuHA3XaH0uUvg1ZJ0GUZnXk3mxxPF&activityId=8751f7f8-9fb4-465a-aec7-abae11a15ae6&ocid=windows-windowsShell-feeds&user=m-0929d3a238cc47ce8673f69c6eefd7d2&Treatment=T6&MaximumDimensions=660x640&experience=Taskbar&AppVersion=1&osLocale=en-US&caller=bgtask HTTP/2.0
host: assets.msn.com
x-search-account: None
accept-encoding: gzip, deflate
x-device-machineid: {D12C4634-8E54-424E-85E7-7D0A6A197942}
x-userageclass: Unknown
x-bm-market: US
x-bm-dateformat: M/d/yyyy
x-device-ossku: 48
x-bm-dtz: 0
x-deviceid: 0100B2E609000CC3
x-bm-windowsflights: FX:119E26AD,FX:11D898D7,FX:11DB147C,FX:11DE505A,FX:11E11E97,FX:11E3E2BA,FX:11E50151,FX:11E9EE98,FX:11F1992A,FX:11F4161E,FX:11F41B68,FX:11FB0F2F,FX:1201B330,FX:1202B7FC,FX:120BB68E,FX:121A20E1,FX:121BF15F,FX:121E5EC8,FX:122D8E86,FX:123031A3,FX:1231B88B,FX:123371B1,FX:1233C945,FX:123D7C31,FX:1240013C,FX:1246E4A3,FX:1248306D,FX:124B38D0,FX:1250080B,FX:125A7FDA,FX:1264FA75,FX:126DBC22,FX:127159BE,FX:12769734,FX:127C935B,FX:127DC03A,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5
sitename: www.msn.com
x-bm-theme: 000000;0078d7
muid: 0929D3A238CC47CE8673F69C6EEFD7D2
x-agent-deviceid: 0100B2E609000CC3
x-bm-onlinesearchdisabled: true
x-bm-cbt: 1688925239
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
x-device-isoptin: false
accept-language: en-US, en
x-device-touch: false
x-device-clientsession: 2F17FD5117104D47B49FA2062F18EEE3
cookie: MUID=0929D3A238CC47CE8673F69C6EEFD7D2

Response

HTTP/2.0 200

content-type: application/json; charset=utf-8
server: Kestrel
access-control-allow-credentials: true
access-control-allow-headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent
access-control-allow-methods: PUT,PATCH,POST,GET,OPTIONS,DELETE
access-control-allow-origin: *.msn.com
access-control-expose-headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent
content-encoding: gzip
ddd-authenticatedwithjwtflow: False
ddd-usertype: AnonymousMuid
ddd-tmpl: SageUser:0;coldStartUpsell:1;winbadge:1;lowC:0;daucoldcap:1;BingRecoCode:Success;tbn:0;lowT:0;coldStart:1;partialResponse:1;IsRecoNewUser:1
x-wpo-activityid: C8820E35-11CA-4273-86D5-2BB801E053D2|2023-07-09T17:54:06.6335559Z|fabric:/wpo|WEU|WPO_1
ddd-feednewsitemcount: 1
ddd-activityid: c8820e35-11ca-4273-86d5-2bb801e053d2
ddd-strategyexecutionlatency: 00:00:00.2367895
ddd-debugid: c8820e35-11ca-4273-86d5-2bb801e053d2|2023-07-09T17:54:06.6432752Z|fabric:/winfeed|WEU|WinFeed_427
onewebservicelatency: 237
x-msedge-responseinfo: 237
x-ceto-ref: 64aaf43eaecc4d54940eaf6bbe0fafa7|2023-07-09T17:54:06.402Z
expires: Sun, 09 Jul 2023 17:54:06 GMT
date: Sun, 09 Jul 2023 17:54:06 GMT
content-length: 1573
akamai-request-bc: [a=95.100.135.148,b=243015569,c=g,n=DE_HE_FRANKFURT,o=20940],[a=20.23.114.34,c=o]
server-timing: clientrtt; dur=47, clienttt; dur=249, origin; dur=249 , cdntime; dur=0
akamai-cache-status: Miss from child
akamai-server-ip: 95.100.135.148
akamai-request-id: e7c1f91
x-as-suppresssetcookie: 1
cache-control: private, max-age=0
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
vary: Origin
DNS

image6.pubmatic.com

firefox.exe

Remote address:

8.8.8.8:53

Request

image6.pubmatic.com

IN A

Response

image6.pubmatic.com

IN CNAME

image6v2.pubmnet.com

image6v2.pubmnet.com

IN CNAME

pugm-lhrc.pubmnet.com

pugm-lhrc.pubmnet.com

IN A

185.64.190.78
GET

https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB

firefox.exe

Remote address:

185.64.190.78:443

Request

GET /AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB HTTP/2.0
host: image6.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://ads.pubmatic.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

cache-control: private
content-type: text/html; charset=UTF-8
expires: Sat, 7 Oct 2023 10:27:30 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
date: Sun, 09 Jul 2023 17:54:06 GMT
content-length: 60
DNS

pugm-lhrc.pubmnet.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pugm-lhrc.pubmnet.com

IN A

Response

pugm-lhrc.pubmnet.com

IN A

185.64.190.78
DNS

pugm-lhrc.pubmnet.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pugm-lhrc.pubmnet.com

IN AAAA

Response
GET

https://secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js

firefox.exe

Remote address:

23.39.253.208:443

Request

GET /js/pubcid/latest/pubcid.min.js HTTP/2.0
host: secure.cdn.fastclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: Apache
last-modified: Mon, 23 Jan 2023 19:40:17 GMT
etag: "d734-5f2f3919e751f-gzip"
accept-ranges: bytes
content-encoding: gzip
content-length: 17407
content-type: application/javascript
cache-control: max-age=900
expires: Sun, 09 Jul 2023 18:09:06 GMT
date: Sun, 09 Jul 2023 17:54:06 GMT
vary: Accept-Encoding
GET

https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher-stub.min.js

firefox.exe

Remote address:

23.39.253.208:443

Request

GET /js/cnvr-launcher/latest/launcher-stub.min.js HTTP/2.0
host: secure.cdn.fastclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: Apache
last-modified: Tue, 20 Sep 2022 18:52:26 GMT
etag: "38c0-5e92054540ea5-gzip"
accept-ranges: bytes
content-encoding: gzip
content-length: 5252
content-type: application/javascript
cache-control: max-age=900
expires: Sun, 09 Jul 2023 18:09:06 GMT
date: Sun, 09 Jul 2023 17:54:06 GMT
vary: Accept-Encoding
GET

https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher.min.js

firefox.exe

Remote address:

23.39.253.208:443

Request

GET /js/cnvr-launcher/latest/launcher.min.js HTTP/2.0
host: secure.cdn.fastclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: Apache
last-modified: Tue, 20 Sep 2022 18:52:26 GMT
etag: "c4b6-5e920545406d3-gzip"
accept-ranges: bytes
content-encoding: gzip
content-length: 17042
content-type: application/javascript
cache-control: max-age=900
expires: Sun, 09 Jul 2023 18:09:06 GMT
date: Sun, 09 Jul 2023 17:54:06 GMT
vary: Accept-Encoding
GET

https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js

firefox.exe

Remote address:

23.39.253.208:443

Request

GET /js/cnvr-coreid/latest/coreid.min.js HTTP/2.0
host: secure.cdn.fastclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: Apache
last-modified: Thu, 13 Oct 2022 18:23:24 GMT
etag: "31332-5eaee9adb933b-gzip"
accept-ranges: bytes
content-encoding: gzip
content-type: application/javascript
content-length: 59461
cache-control: max-age=900
expires: Sun, 09 Jul 2023 18:09:07 GMT
date: Sun, 09 Jul 2023 17:54:07 GMT
vary: Accept-Encoding
DNS

simage4.pubmatic.com

firefox.exe

Remote address:

8.8.8.8:53

Request

simage4.pubmatic.com

IN A

Response

simage4.pubmatic.com

IN CNAME

image4-v2.pubmnet.com

image4-v2.pubmnet.com

IN CNAME

spug-lhrc.pubmnet.com

spug-lhrc.pubmnet.com

IN A

185.64.190.81
GET

https://simage4.pubmatic.com/AdServer/SPug?o=1&p=159110&sc=1&pr=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dpubmatic%26uid%3D(PM_UID)&u=A49D0C01-3DA4-4D4C-B1CE-35CE73D785CF&rs=3&gdpr=0&gdpr_consent=&us_privacy=

firefox.exe

Remote address:

185.64.190.81:443

Request

GET /AdServer/SPug?o=1&p=159110&sc=1&pr=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dpubmatic%26uid%3D(PM_UID)&u=A49D0C01-3DA4-4D4C-B1CE-35CE73D785CF&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/2.0
host: simage4.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://ads.pubmatic.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sun, 09 Jul 2023 17:54:05 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
GET

https://simage4.pubmatic.com/AdServer/SPug?o=1&p=162412&sc=1&pr=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D316%26uid%3DPM_UID&umc=PM_UID&u=A49D0C01-3DA4-4D4C-B1CE-35CE73D785CF&rs=3&gdpr=0&gdpr_consent=&us_privacy=1YN-

firefox.exe

Remote address:

185.64.190.81:443

Request

GET /AdServer/SPug?o=1&p=162412&sc=1&pr=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D316%26uid%3DPM_UID&umc=PM_UID&u=A49D0C01-3DA4-4D4C-B1CE-35CE73D785CF&rs=3&gdpr=0&gdpr_consent=&us_privacy=1YN- HTTP/2.0
host: simage4.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://ads.pubmatic.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sun, 09 Jul 2023 17:54:11 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
DNS

spug-lhrc.pubmnet.com

firefox.exe

Remote address:

8.8.8.8:53

Request

spug-lhrc.pubmnet.com

IN A

Response

spug-lhrc.pubmnet.com

IN A

185.64.190.81
DNS

spug-lhrc.pubmnet.com

firefox.exe

Remote address:

8.8.8.8:53

Request

spug-lhrc.pubmnet.com

IN AAAA

Response
DNS

229.163.139.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

229.163.139.3.in-addr.arpa

IN PTR

Response

229.163.139.3.in-addr.arpa

IN PTR

ec2-3-139-163-229 us-east-2compute amazonawscom
DNS

127.82.211.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

127.82.211.35.in-addr.arpa

IN PTR

Response

127.82.211.35.in-addr.arpa

IN PTR

1278221135bcgoogleusercontentcom
DNS

198.24.30.184.in-addr.arpa

Remote address:

8.8.8.8:53

Request

198.24.30.184.in-addr.arpa

IN PTR

Response

198.24.30.184.in-addr.arpa

IN PTR

a184-30-24-198deploystaticakamaitechnologiescom
DNS

152.135.100.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

152.135.100.95.in-addr.arpa

IN PTR

Response

152.135.100.95.in-addr.arpa

IN PTR

a95-100-135-152deploystaticakamaitechnologiescom
DNS

wt.rqtrk.eu

Remote address:

8.8.8.8:53

Request

wt.rqtrk.eu

IN A

Response

wt.rqtrk.eu

IN A

15.235.42.102

wt.rqtrk.eu

IN A

15.235.42.104

wt.rqtrk.eu

IN A

15.235.42.103
DNS

78.190.64.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

78.190.64.185.in-addr.arpa

IN PTR

Response
DNS

2.36.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

2.36.251.142.in-addr.arpa

IN PTR

Response

2.36.251.142.in-addr.arpa

IN PTR

ams15s44-in-f21e100net
DNS

208.253.39.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

208.253.39.23.in-addr.arpa

IN PTR

Response

208.253.39.23.in-addr.arpa

IN PTR

a23-39-253-208deploystaticakamaitechnologiescom
DNS

81.190.64.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

81.190.64.185.in-addr.arpa

IN PTR

Response
DNS

98.39.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

98.39.251.142.in-addr.arpa

IN PTR

Response

98.39.251.142.in-addr.arpa

IN PTR

ams15s48-in-f21e100net
DNS

127.70.226.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

127.70.226.3.in-addr.arpa

IN PTR

Response

127.70.226.3.in-addr.arpa

IN PTR

ec2-3-226-70-127 compute-1 amazonawscom
DNS

fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com

IN A

Response

fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com

IN CNAME

pagead-googlehosted.l.google.com

pagead-googlehosted.l.google.com

IN A

142.250.179.161
DNS

207.194.211.35.in-addr.arpa

firefox.exe

Remote address:

8.8.8.8:53

Request

207.194.211.35.in-addr.arpa

IN PTR

Response

207.194.211.35.in-addr.arpa

IN PTR

20719421135bcgoogleusercontentcom
DNS

proc.ad.cpe.dotomi.com

firefox.exe

Remote address:

8.8.8.8:53

Request

proc.ad.cpe.dotomi.com

IN A

Response

proc.ad.cpe.dotomi.com

IN CNAME

convex.global.dual.dotomi.weighted.com.akadns.net

convex.global.dual.dotomi.weighted.com.akadns.net

IN A

89.207.16.146
GET

https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

firefox.exe

Remote address:

142.250.179.161:443

Request

GET /safeframe/1-0-40/html/container.html HTTP/2.0
host: fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers
DNS

pagead-googlehosted.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pagead-googlehosted.l.google.com

IN A

Response

pagead-googlehosted.l.google.com

IN A

142.250.179.161
DNS

15.39.65.18.in-addr.arpa

firefox.exe

Remote address:

8.8.8.8:53

Request

15.39.65.18.in-addr.arpa

IN PTR

Response

15.39.65.18.in-addr.arpa

IN PTR

server-18-65-39-15ams1r cloudfrontnet
GET

https://proc.ad.cpe.dotomi.com/cvx/client/direct/launcher?version=1.1.1&lid=681

firefox.exe

Remote address:

89.207.16.146:443

Request

GET /cvx/client/direct/launcher?version=1.1.1&lid=681 HTTP/2.0
host: proc.ad.cpe.dotomi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sun, 09 Jul 2023 17:54:06 GMT
content-type: application/json
content-length: 190
cache-control: max-age=1800
access-control-allow-origin: https://arras.io
access-control-allow-credentials: true
vary: Origin
expires: Sun, 09 Jul 2023 18:24:06 GMT
DNS

convex.global.dual.dotomi.weighted.com.akadns.net

firefox.exe

Remote address:

8.8.8.8:53

Request

convex.global.dual.dotomi.weighted.com.akadns.net

IN A

Response

convex.global.dual.dotomi.weighted.com.akadns.net

IN A

89.207.16.146
DNS

pagead-googlehosted.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pagead-googlehosted.l.google.com

IN AAAA

Response

pagead-googlehosted.l.google.com

IN AAAA

2a00:1450:400e:802::2001
DNS

convex.global.dual.dotomi.weighted.com.akadns.net

firefox.exe

Remote address:

8.8.8.8:53

Request

convex.global.dual.dotomi.weighted.com.akadns.net

IN AAAA

Response

convex.global.dual.dotomi.weighted.com.akadns.net

IN AAAA

2a02:fa8:8806:20::2100
DNS

secure-assets.rubiconproject.com

firefox.exe

Remote address:

8.8.8.8:53

Request

secure-assets.rubiconproject.com

IN A

Response

secure-assets.rubiconproject.com

IN CNAME

digicertwc.rubiconproject.com.edgekey.net

digicertwc.rubiconproject.com.edgekey.net

IN CNAME

e8960.e2.akamaiedge.net

e8960.e2.akamaiedge.net

IN A

23.42.205.214
GET

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=onfocus&endpoint=eu

firefox.exe

Remote address:

23.42.205.214:443

Request

GET /utils/xapi/multi-sync.html?p=onfocus&endpoint=eu HTTP/2.0
host: secure-assets.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 301

server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=onfocus&endpoint=eu
date: Sun, 09 Jul 2023 17:54:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
GET

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=duration_media&endpoint=us-east

firefox.exe

Remote address:

23.42.205.214:443

Request

GET /utils/xapi/multi-sync.html?p=duration_media&endpoint=us-east HTTP/2.0
host: secure-assets.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 301

server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=duration_media&endpoint=us-east
date: Sun, 09 Jul 2023 17:54:09 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
GET

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=rise_engage&endpoint=us-east

firefox.exe

Remote address:

23.42.205.214:443

Request

GET /utils/xapi/multi-sync.html?p=rise_engage&endpoint=us-east HTTP/2.0
host: secure-assets.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 301

server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=rise_engage&endpoint=us-east
date: Sun, 09 Jul 2023 17:54:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
GET

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum

firefox.exe

Remote address:

23.42.205.214:443

Request

GET /utils/xapi/multi-sync.html?p=gumgum HTTP/2.0
host: secure-assets.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://g2.gumgum.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 301

server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=gumgum
date: Sun, 09 Jul 2023 17:54:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
DNS

e8960.e2.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e8960.e2.akamaiedge.net

IN A

Response

e8960.e2.akamaiedge.net

IN A

23.42.205.214
DNS

e8960.e2.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e8960.e2.akamaiedge.net

IN AAAA

Response
DNS

eus.rubiconproject.com

firefox.exe

Remote address:

8.8.8.8:53

Request

eus.rubiconproject.com

IN A

Response

eus.rubiconproject.com

IN CNAME

eus.rubiconproject.com.edgekey.net

eus.rubiconproject.com.edgekey.net

IN CNAME

e8960.b.akamaiedge.net

e8960.b.akamaiedge.net

IN A

104.85.6.138
GET

https://eus.rubiconproject.com/usync.html?p=onfocus&endpoint=eu

firefox.exe

Remote address:

104.85.6.138:443

Request

GET /usync.html?p=onfocus&endpoint=eu HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Sun, 09 Jul 2023 17:54:07 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET

https://eus.rubiconproject.com/usync.js

firefox.exe

Remote address:

104.85.6.138:443

Request

GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html?p=onfocus&endpoint=eu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

Response

HTTP/1.1 200 OK

Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Sun, 09 Jul 2023 01:53:01 GMT
Content-Encoding: gzip
Content-Length: 10154
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=28694
Expires: Mon, 10 Jul 2023 01:52:21 GMT
Date: Sun, 09 Jul 2023 17:54:07 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET

https://eus.rubiconproject.com/usync.html

firefox.exe

Remote address:

104.85.6.138:443

Request

GET /usync.html HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Sun, 09 Jul 2023 17:54:07 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET

https://eus.rubiconproject.com/usync.html?p=duration_media&endpoint=us-east

firefox.exe

Remote address:

104.85.6.138:443

Request

GET /usync.html?p=duration_media&endpoint=us-east HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://public.servenobid.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Sun, 09 Jul 2023 17:54:09 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET

https://eus.rubiconproject.com/usync.html?p=rise_engage&endpoint=us-east

firefox.exe

Remote address:

104.85.6.138:443

Request

GET /usync.html?p=rise_engage&endpoint=us-east HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cs-server-s2s.yellowblue.io/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Sun, 09 Jul 2023 17:54:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET

https://eus.rubiconproject.com/usync.html?p=gumgum

firefox.exe

Remote address:

104.85.6.138:443

Request

GET /usync.html?p=gumgum HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Sun, 09 Jul 2023 17:54:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
DNS

e8960.b.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e8960.b.akamaiedge.net

IN A

Response

e8960.b.akamaiedge.net

IN A

104.85.6.138
DNS

e8960.b.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e8960.b.akamaiedge.net

IN AAAA

Response
DNS

ats.rlcdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ats.rlcdn.com

IN A

Response

ats.rlcdn.com

IN A

13.227.219.24

ats.rlcdn.com

IN A

13.227.219.121

ats.rlcdn.com

IN A

13.227.219.37

ats.rlcdn.com

IN A

13.227.219.68
DNS

ats.rlcdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ats.rlcdn.com

IN A

Response

ats.rlcdn.com

IN A

52.84.90.12

ats.rlcdn.com

IN A

52.84.90.66

ats.rlcdn.com

IN A

52.84.90.122

ats.rlcdn.com

IN A

52.84.90.107
DNS

ats.rlcdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ats.rlcdn.com

IN AAAA

Response
DNS

acdn.adnxs.com

firefox.exe

Remote address:

8.8.8.8:53

Request

acdn.adnxs.com

IN A

Response

acdn.adnxs.com

IN CNAME

secure-adnxs.edgekey.net

secure-adnxs.edgekey.net

IN CNAME

e6115.g.akamaiedge.net

e6115.g.akamaiedge.net

IN A

184.30.24.185
DNS

public.servenobid.com

firefox.exe

Remote address:

8.8.8.8:53

Request

public.servenobid.com

IN A

Response

public.servenobid.com

IN A

18.65.39.15

public.servenobid.com

IN A

18.65.39.129

public.servenobid.com

IN A

18.65.39.39

public.servenobid.com

IN A

18.65.39.91
DNS

eb2.3lift.com

firefox.exe

Remote address:

8.8.8.8:53

Request

eb2.3lift.com

IN A

Response

eb2.3lift.com

IN CNAME

eu-eb2.3lift.com

eu-eb2.3lift.com

IN A

76.223.111.18

eu-eb2.3lift.com

IN A

13.248.245.213
DNS

playwire-d.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

playwire-d.openx.net

IN A

Response

playwire-d.openx.net

IN A

34.98.64.218

playwire-d.openx.net

IN A

35.244.159.8
DNS

x.bidswitch.net

firefox.exe

Remote address:

8.8.8.8:53

Request

x.bidswitch.net

IN A

Response

x.bidswitch.net

IN CNAME

user-data-us-east.bidswitch.net

user-data-us-east.bidswitch.net

IN A

35.211.178.172
GET

https://ats.rlcdn.com/ats.js

firefox.exe

Remote address:

13.227.219.24:443

Request

GET /ats.js HTTP/2.0
host: ats.rlcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript
last-modified: Thu, 08 Jun 2023 08:56:13 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: L2Uqg18UIi_4fqt_LD1.VZwHoDyvOGyd
server: AmazonS3
content-encoding: gzip
date: Sun, 09 Jul 2023 01:36:46 GMT
etag: W/"a23e5e8674928ef24c6825d63b8d2927"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2dc050ab05a5052054de7d000d6c5f50.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: rbAMu0AqzJhSn6tS8pGGnhHX9D48k5B5boqZbqsQ7aI4y_G81RFWVg==
age: 59057
DNS

eu-eb2.3lift.com

firefox.exe

Remote address:

8.8.8.8:53

Request

eu-eb2.3lift.com

IN A

Response

eu-eb2.3lift.com

IN A

76.223.111.18

eu-eb2.3lift.com

IN A

13.248.245.213
DNS

playwire-d.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

playwire-d.openx.net

IN A

Response

playwire-d.openx.net

IN A

35.244.159.8

playwire-d.openx.net

IN A

34.98.64.218
DNS

e6115.g.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e6115.g.akamaiedge.net

IN A

Response

e6115.g.akamaiedge.net

IN A

184.30.24.185
DNS

eu-eb2.3lift.com

firefox.exe

Remote address:

8.8.8.8:53

Request

eu-eb2.3lift.com

IN AAAA

Response
DNS

playwire-d.openx.net

firefox.exe

Remote address:

8.8.8.8:53

Request

playwire-d.openx.net

IN AAAA

Response
GET

https://public.servenobid.com/sync.html

firefox.exe

Remote address:

18.65.39.15:443

Request

GET /sync.html HTTP/2.0
host: public.servenobid.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/html
last-modified: Wed, 07 Jun 2023 17:56:33 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: 956b79d89029f14eaea1f363768b0942a0576bc42557ef6c8f6cc53fdc4d8515
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:559734745816:build/adserver-public-prod:0c92ffba-51e2-4731-859f-5f9f5816d5c0
x-amz-meta-codebuild-content-md5: 0784681e688ba45904ac0a64aa0b0a6b
server: AmazonS3
content-encoding: br
date: Sun, 09 Jul 2023 11:05:04 GMT
cache-control: max-age=86400
etag: W/"481f0eb11193eeaea6a690e5c66c57a4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 490623df85c571a18ba7da1511cc969e.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: TaDikhbQ8KgKjgpZgONFPUqCdD122HF85o5463TQpPnyEfobux_d-g==
age: 24545
vary: Origin
DNS

googleads.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

142.250.179.130
DNS

e6115.g.akamaiedge.net

firefox.exe

Remote address:

8.8.8.8:53

Request

e6115.g.akamaiedge.net

IN AAAA

Response
DNS

public.servenobid.com

firefox.exe

Remote address:

8.8.8.8:53

Request

public.servenobid.com

IN A

Response

public.servenobid.com

IN A

18.65.39.15

public.servenobid.com

IN A

18.65.39.129

public.servenobid.com

IN A

18.65.39.39

public.servenobid.com

IN A

18.65.39.91
DNS

googleads.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN AAAA

Response

googleads.g.doubleclick.net

IN AAAA

2a00:1450:400e:803::2002
DNS

user-data-us-east.bidswitch.net

firefox.exe

Remote address:

8.8.8.8:53

Request

user-data-us-east.bidswitch.net

IN A

Response

user-data-us-east.bidswitch.net

IN A

35.211.178.172
DNS

public.servenobid.com

firefox.exe

Remote address:

8.8.8.8:53

Request

public.servenobid.com

IN AAAA

Response
DNS

cdn.doubleverify.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn.doubleverify.com

IN A

Response

cdn.doubleverify.com

IN CNAME

cdn.doubleverify.com.edgesuite.net

cdn.doubleverify.com.edgesuite.net

IN CNAME

a1241.dsct.akamai.net

a1241.dsct.akamai.net

IN A

104.110.240.210

a1241.dsct.akamai.net

IN A

104.110.240.194
GET

https://cdn.doubleverify.com/dvbs_src.js?ctx=1000798&cmp=28691177&plc=347747402&sid=1083781&aufilter1=597658&prr=1&ppid=103&autt=1&auevent=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&c1=597658&auorder=1009233618&aucmp=18527764493&aucrtv=449406734&auxch=1&pltfrm=1&ausite=620110108258&turl=https://arras.io/&aubndl=&dvregion=0&unit=300x250

firefox.exe

Remote address:

104.110.240.210:443

Request

GET /dvbs_src.js?ctx=1000798&cmp=28691177&plc=347747402&sid=1083781&aufilter1=597658&prr=1&ppid=103&autt=1&auevent=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&c1=597658&auorder=1009233618&aucmp=18527764493&aucrtv=449406734&auxch=1&pltfrm=1&ausite=620110108258&turl=https://arras.io/&aubndl=&dvregion=0&unit=300x250 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Cache-Control: max-age=86400
Expires: Fri, 07 Jul 2023 08:49:08 GMT
Last-Modified: Thu, 06 Jul 2023 08:48:45 GMT
ETag: "13e76a55c1768ebd9902bee09661bf9c"
Content-Type: application/javascript
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: *
Server: UploadServer
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 09 Jul 2023 17:54:08 GMT
Content-Length: 913
Connection: keep-alive
DNS

a1241.dsct.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a1241.dsct.akamai.net

IN A

Response

a1241.dsct.akamai.net

IN A

104.110.240.194

a1241.dsct.akamai.net

IN A

104.110.240.210
GET

https://cdn.doubleverify.com/dvtp_src.js

firefox.exe

Remote address:

104.110.240.210:443

Request

GET /dvtp_src.js HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Cache-Control: max-age=900
Expires: Thu, 06 Jul 2023 12:35:20 GMT
Last-Modified: Thu, 06 Jul 2023 12:19:54 GMT
ETag: "8f00be3da9a0f0d7a1a8c47b91364b82"
Content-Type: application/javascript
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: *
Server: UploadServer
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 09 Jul 2023 17:54:08 GMT
Content-Length: 3377
Connection: keep-alive
GET

https://cdn.doubleverify.com/dvbs_src_internal118.js

firefox.exe

Remote address:

104.110.240.210:443

Request

GET /dvbs_src_internal118.js HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Cache-Control: max-age=946080000
Expires: Fri, 05 Jul 2024 08:49:08 GMT
Last-Modified: Thu, 06 Jul 2023 08:48:47 GMT
ETag: "086b600c888a4efae4380bd30a206f01"
Content-Type: application/javascript
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: *
Server: UploadServer
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18861
Date: Sun, 09 Jul 2023 17:54:11 GMT
Connection: keep-alive
GET

https://cdn.doubleverify.com/dv-measurements4122.js

firefox.exe

Remote address:

104.110.240.210:443

Request

GET /dv-measurements4122.js HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Cache-Control: max-age=946080900
Expires: Fri, 05 Jul 2024 07:43:19 GMT
Last-Modified: Thu, 06 Jul 2023 07:43:16 GMT
ETag: "9b4ec8c5f3573c4020d70289eee8e2d0"
Content-Type: application/javascript
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: *
Server: UploadServer
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 106219
Date: Sun, 09 Jul 2023 17:54:14 GMT
Connection: keep-alive
DNS

a1241.dsct.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a1241.dsct.akamai.net

IN AAAA

Response

a1241.dsct.akamai.net

IN AAAA

2a02:26f0:fe00::686e:f0d2

a1241.dsct.akamai.net

IN AAAA

2a02:26f0:fe00::686e:f0c2
DNS

user-data-us-east.bidswitch.net

firefox.exe

Remote address:

8.8.8.8:53

Request

user-data-us-east.bidswitch.net

IN AAAA

Response
DNS

beacon.sojern.com

firefox.exe

Remote address:

8.8.8.8:53

Request

beacon.sojern.com

IN A

Response

beacon.sojern.com

IN CNAME

pixelglobal.sojern.com

pixelglobal.sojern.com

IN A

107.178.244.119
DNS

pixelglobal.sojern.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pixelglobal.sojern.com

IN A

Response

pixelglobal.sojern.com

IN A

107.178.244.119
DNS

pixelglobal.sojern.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pixelglobal.sojern.com

IN AAAA

Response
DNS

choices.truste.com

firefox.exe

Remote address:

8.8.8.8:53

Request

choices.truste.com

IN A

Response

choices.truste.com

IN A

65.9.86.18

choices.truste.com

IN A

65.9.86.97

choices.truste.com

IN A

65.9.86.32

choices.truste.com

IN A

65.9.86.23
DNS

tpc.googlesyndication.com

firefox.exe

Remote address:

8.8.8.8:53

Request

tpc.googlesyndication.com

IN A

Response

tpc.googlesyndication.com

IN A

142.251.36.1
GET

https://choices.truste.com/ca?pid=sojern01&aid=sojern02_d&c=1688925246920311&js=pmw0&w=300&h=250&admarker=dynamic&cid=sojern

firefox.exe

Remote address:

65.9.86.18:443

Request

GET /ca?pid=sojern01&aid=sojern02_d&c=1688925246920311&js=pmw0&w=300&h=250&admarker=dynamic&cid=sojern HTTP/2.0
host: choices.truste.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript;charset=UTF-8
date: Sun, 09 Jul 2023 17:54:09 GMT
server: nginx
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: origin
permissions-policy: geolocation=(), microphone=(), payment=()
expect-ct: max-age=31536000
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: default-src 'self' 'unsafe-eval' *; font-src 'self' *; style-src 'self' 'unsafe-inline' *; img-src 'self' * data: https://cdn1.iconfinder.com https://js.userflow.com; frame-src 'self' *; frame-ancestors 'self' *; connect-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; object-src 'self' *; media-src 'self' *; child-src 'self' *; worker-src 'self' *; manifest-src 'self' *;
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 e10153740ff95eb4d0c9f3172baeb43e.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: b_sCrYq90erJfOz-UvYgIuM6XubNaSjvTZ7TjSZuNGUgtJ5k_EgWiQ==
vary: Origin
DNS

choices.truste.com

firefox.exe

Remote address:

8.8.8.8:53

Request

choices.truste.com

IN A

Response

choices.truste.com

IN A

65.9.86.32

choices.truste.com

IN A

65.9.86.18

choices.truste.com

IN A

65.9.86.23

choices.truste.com

IN A

65.9.86.97
GET

https://tpc.googlesyndication.com/pagead/js/r20230705/r20110914/client/qs_click_protection_fy2021.js

firefox.exe

Remote address:

142.251.36.1:443

Request

GET /pagead/js/r20230705/r20110914/client/qs_click_protection_fy2021.js HTTP/2.0
host: tpc.googlesyndication.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
DNS

tpc.googlesyndication.com

firefox.exe

Remote address:

8.8.8.8:53

Request

tpc.googlesyndication.com

IN A

Response

tpc.googlesyndication.com

IN A

142.251.36.1
DNS

www.googletagservices.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.googletagservices.com

IN A

Response

www.googletagservices.com

IN A

142.250.179.162
GET

https://www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914

firefox.exe

Remote address:

142.250.179.162:443

Request

GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/2.0
host: www.googletagservices.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

tpc.googlesyndication.com

firefox.exe

Remote address:

8.8.8.8:53

Request

tpc.googlesyndication.com

IN AAAA

Response

tpc.googlesyndication.com

IN AAAA

2a00:1450:400e:80f::2001
DNS

www.googletagservices.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.googletagservices.com

IN A

Response

www.googletagservices.com

IN A

142.251.39.98
DNS

choices.truste.com

firefox.exe

Remote address:

8.8.8.8:53

Request

choices.truste.com

IN AAAA

Response
DNS

www.googletagservices.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.googletagservices.com

IN AAAA

Response

www.googletagservices.com

IN AAAA

2a00:1450:400e:802::2002
DNS

ups.analytics.yahoo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ups.analytics.yahoo.com

IN A

Response

ups.analytics.yahoo.com

IN CNAME

prod.ups-ats.aolp-ds-prd.aws.oath.cloud

prod.ups-ats.aolp-ds-prd.aws.oath.cloud

IN CNAME

prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud

prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud

IN CNAME

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

IN A

3.225.218.10

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

IN A

34.200.65.202
DNS

g2.gumgum.com

firefox.exe

Remote address:

8.8.8.8:53

Request

g2.gumgum.com

IN A

Response

g2.gumgum.com

IN A

3.220.23.148

g2.gumgum.com

IN A

18.215.36.247

g2.gumgum.com

IN A

3.224.253.54

g2.gumgum.com

IN A

3.213.218.94

g2.gumgum.com

IN A

34.197.248.27

g2.gumgum.com

IN A

3.94.68.124

g2.gumgum.com

IN A

35.168.216.217

g2.gumgum.com

IN A

52.71.209.114
DNS

onetag-sys.com

firefox.exe

Remote address:

8.8.8.8:53

Request

onetag-sys.com

IN A

Response

onetag-sys.com

IN A

51.38.120.206

onetag-sys.com

IN A

51.75.86.98

onetag-sys.com

IN A

51.89.9.251

onetag-sys.com

IN A

51.89.9.254

onetag-sys.com

IN A

51.89.9.253

onetag-sys.com

IN A

51.89.9.252
DNS

ce.lijit.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ce.lijit.com

IN A

Response

ce.lijit.com

IN CNAME

emea.vap.lijit.com

emea.vap.lijit.com

IN A

216.52.2.39

emea.vap.lijit.com

IN A

216.52.2.48

emea.vap.lijit.com

IN A

216.52.2.91

emea.vap.lijit.com

IN A

216.52.2.16

emea.vap.lijit.com

IN A

216.52.2.6

emea.vap.lijit.com

IN A

216.52.2.30
DNS

ap.lijit.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ap.lijit.com

IN A

Response

ap.lijit.com

IN CNAME

vap.lijit.com

vap.lijit.com

IN CNAME

emeas.vap.lijit.com

emeas.vap.lijit.com

IN CNAME

oeu.vap.lijit.com

oeu.vap.lijit.com

IN A

216.52.2.48

oeu.vap.lijit.com

IN A

216.52.2.30

oeu.vap.lijit.com

IN A

216.52.2.6

oeu.vap.lijit.com

IN A

216.52.2.91

oeu.vap.lijit.com

IN A

216.52.2.39

oeu.vap.lijit.com

IN A

216.52.2.16
DNS

ssbsync.smartadserver.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ssbsync.smartadserver.com

IN A

Response

ssbsync.smartadserver.com

IN CNAME

ssbsync-geo.smartadserver.com

ssbsync-geo.smartadserver.com

IN CNAME

usersync-geo-global.usersync-prod-sas.akadns.net

usersync-geo-global.usersync-prod-sas.akadns.net

IN CNAME

ssbsync-itx5.smartadserver.com

ssbsync-itx5.smartadserver.com

IN A

185.86.138.150

ssbsync-itx5.smartadserver.com

IN A

185.86.138.155

ssbsync-itx5.smartadserver.com

IN A

185.86.138.154

ssbsync-itx5.smartadserver.com

IN A

185.86.138.152

ssbsync-itx5.smartadserver.com

IN A

185.86.138.151

ssbsync-itx5.smartadserver.com

IN A

185.86.138.153
DNS

ssum-sec.casalemedia.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ssum-sec.casalemedia.com

IN A

Response

ssum-sec.casalemedia.com

IN CNAME

um.indexww.com.akadns.net

um.indexww.com.akadns.net

IN CNAME

u12.lb.indexww.com

u12.lb.indexww.com

IN CNAME

fr-xn.lb.indexww.com

fr-xn.lb.indexww.com

IN A

185.80.39.216
DNS

cs-rtb.minutemedia-prebid.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cs-rtb.minutemedia-prebid.com

IN A

Response

cs-rtb.minutemedia-prebid.com

IN CNAME

dheoaz9svaqd1.cloudfront.net

dheoaz9svaqd1.cloudfront.net

IN A

52.222.139.18

dheoaz9svaqd1.cloudfront.net

IN A

52.222.139.76

dheoaz9svaqd1.cloudfront.net

IN A

52.222.139.47

dheoaz9svaqd1.cloudfront.net

IN A

52.222.139.106
GET

https://onetag-sys.com/usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1YN-&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1YN-&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=n7Aw6VHoT-AkeTwxmz-NsTXpT-CuAIf7XP6rql6VsVs; path=/; expires=Thu, 08 Aug 2024 10:12:27; domain=onetag-sys.com; SameSite=None; Secure
content-type: text/html
cache-control: no-transform, no-cache
content-encoding: gzip
content-length: 1398
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=106&redir=1&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1YN-&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D
cookie: OTP=n7Aw6VHoT-AkeTwxmz-NsTXpT-CuAIf7XP6rql6VsVs
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=n7Aw6VHoT-AkeTwxmz-NsTXpT-CuAIf7XP6rql6VsVs; path=/; expires=Thu, 08 Aug 2024 10:12:27; domain=onetag-sys.com; SameSite=None; Secure;
location: https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=AAABiTvKIKe2Syu3eazYp3oLMMWs_B7R1LUlKg
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=113&gdpr=0&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=113&gdpr=0&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1YN-&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D
cookie: OTP=n7Aw6VHoT-AkeTwxmz-NsTXpT-CuAIf7XP6rql6VsVs
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=n7Aw6VHoT-AkeTwxmz-NsTXpT-CuAIf7XP6rql6VsVs; path=/; expires=Thu, 08 Aug 2024 10:12:27; domain=onetag-sys.com; SameSite=None; Secure;
location: https://s.amazon-adsystem.com/ecm3?ex=onetag.com&id=n7Aw6VHoT-AkeTwxmz-NsTXpT-CuAIf7XP6rql6VsVs
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/usync/?pubId=5adb88524e24e50

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /usync/?pubId=5adb88524e24e50 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://sync.adkernel.com/
cookie: OTP=n7Aw6VHoT-AkeTwxmz-NsTXpT-CuAIf7XP6rql6VsVs
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=7R6hJOcoDUdDqT2OTDGyhtheKcE24yf01mbeRmOxx0k; path=/; expires=Thu, 08 Aug 2024 10:12:29; domain=onetag-sys.com; SameSite=None; Secure
content-type: text/html
cache-control: no-transform, no-cache
content-encoding: gzip
content-length: 1404
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent= HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
cookie: OTP=7R6hJOcoDUdDqT2OTDGyhtheKcE24yf01mbeRmOxx0k
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:30; domain=onetag-sys.com; SameSite=None; Secure
content-type: text/html
cache-control: no-transform, no-cache
content-encoding: gzip
content-length: 1399
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=107&uid=2928433158154113650

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=107&uid=2928433158154113650 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:30; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=1&uid=30cd64aa-f444-4500-bad9-7cc523f78d5d&gdpr=0&gdpr_consent=

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=1&uid=30cd64aa-f444-4500-bad9-7cc523f78d5d&gdpr=0&gdpr_consent= HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:30; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=113&gdpr=1&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/usync/?pubId=5adb88524e24e50
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:31; domain=onetag-sys.com; SameSite=None; Secure;
location: https://s.amazon-adsystem.com/ecm3?ex=onetag.com&id=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=98&gdpr=0&gdpr_consent=&uid=0

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=98&gdpr=0&gdpr_consent=&uid=0 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:31; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&google_error=3

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=106&google_error=3 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:31; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=113&gdpr=0&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=113&gdpr=0&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:31; domain=onetag-sys.com; SameSite=None; Secure;
location: https://s.amazon-adsystem.com/ecm3?ex=onetag.com&id=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=110&uid=

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=110&uid= HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:32; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=19&google_error=3

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=19&google_error=3 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:32; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=1&uid=45c264aa-f446-4900-8cd4-05aa35843a26&gdpr=1&gdpr_consent=

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=1&uid=45c264aa-f446-4900-8cd4-05aa35843a26&gdpr=1&gdpr_consent= HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:33; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=107&uid=4659596722685629180

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=107&uid=4659596722685629180 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:33; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=98&gdpr=1&gdpr_consent=&uid=0

firefox.exe

Remote address:

51.38.120.206:443

Request

GET /match/?int_id=98&gdpr=1&gdpr_consent=&uid=0 HTTP/2.0
host: onetag-sys.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=A4yq1yZi59kAwtgpweeKEZP2uKOsU18u7karbsjSX84; path=/; expires=Thu, 08 Aug 2024 10:12:33; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
DNS

sync.1rx.io

firefox.exe

Remote address:

8.8.8.8:53

Request

sync.1rx.io

IN A

Response

sync.1rx.io

IN A

199.127.204.171
DNS

p.rfihub.com

firefox.exe

Remote address:

8.8.8.8:53

Request

p.rfihub.com

IN A

Response

p.rfihub.com

IN CNAME

a.rfihub.com

a.rfihub.com

IN CNAME

a.rfihub.com.akadns.net

a.rfihub.com.akadns.net

IN CNAME

a-emea.rfihub.com.akadns.net

a-emea.rfihub.com.akadns.net

IN A

193.0.160.131
DNS

sync.go.sonobi.com

firefox.exe

Remote address:

8.8.8.8:53

Request

sync.go.sonobi.com

IN A

Response

sync.go.sonobi.com

IN CNAME

iad-2-sync.go.sonobi.com

iad-2-sync.go.sonobi.com

IN A

69.166.1.10

iad-2-sync.go.sonobi.com

IN A

69.166.1.12
DNS

prebid.a-mo.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prebid.a-mo.net

IN A

Response

prebid.a-mo.net

IN A

147.28.146.89
DNS

ssp.disqus.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ssp.disqus.com

IN A

Response

ssp.disqus.com

IN CNAME

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

34.235.214.126

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

3.225.85.119

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

50.19.34.26

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

184.72.144.54

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

23.22.136.75

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

54.86.102.114

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

3.219.119.70

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

44.213.191.194
DNS

sync.adkernel.com

firefox.exe

Remote address:

8.8.8.8:53

Request

sync.adkernel.com

IN A

Response

sync.adkernel.com

IN CNAME

1.cpm.ak-is2.net

1.cpm.ak-is2.net

IN A

77.245.57.72
DNS

cs-server-s2s.yellowblue.io

firefox.exe

Remote address:

8.8.8.8:53

Request

cs-server-s2s.yellowblue.io

IN A

Response

cs-server-s2s.yellowblue.io

IN A

3.226.99.159

cs-server-s2s.yellowblue.io

IN A

44.215.157.249

cs-server-s2s.yellowblue.io

IN A

34.225.236.157

cs-server-s2s.yellowblue.io

IN A

54.174.190.28
GET

https://ssum-sec.casalemedia.com/usermatch?s=195491&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D

firefox.exe

Remote address:

185.80.39.216:443

Request

GET /usermatch?s=195491&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://public.servenobid.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

Date: Sun, 09 Jul 2023 17:54:09 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /usermatch?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D&s=195491&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZKr0QWEnhAhMtXimbCD0jQAA; Path=/; Domain=casalemedia.com; Expires=Mon, 08 Jul 2024 17:54:09 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPS=3211; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 17:54:09 GMT; Max-Age=7776000; Secure; SameSite=None
Set-Cookie: CMPRO=3211; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 17:54:09 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
GET

https://ssum-sec.casalemedia.com/usermatchredir?s=194558&cb=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dindexexchange%26uid%3D

firefox.exe

Remote address:

185.80.39.216:443

Request

GET /usermatchredir?s=194558&cb=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dindexexchange%26uid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

Date: Sun, 09 Jul 2023 17:54:09 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /usermatchredir?cb=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dindexexchange%26uid%3D&s=194558&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZKr0QWEnhAhMtXimbCD0jgAA; Path=/; Domain=casalemedia.com; Expires=Mon, 08 Jul 2024 17:54:09 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPS=3211; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 17:54:09 GMT; Max-Age=7776000; Secure; SameSite=None
Set-Cookie: CMPRO=3211; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 17:54:09 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
GET

https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D&s=195491&C=1

firefox.exe

Remote address:

185.80.39.216:443

Request

GET /usermatch?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D&s=195491&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://public.servenobid.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Date: Sun, 09 Jul 2023 17:54:09 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: text/html
Expires: 0
Pragma: no-cache
Content-Length: 177
Keep-Alive: timeout=1, max=498
Connection: Keep-Alive
DNS

ad-cdn.technoratimedia.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ad-cdn.technoratimedia.com

IN A

Response

ad-cdn.technoratimedia.com

IN CNAME

cs1561.wpc.edgecastcdn.net

cs1561.wpc.edgecastcdn.net

IN A

152.199.5.184
GET

https://cs-rtb.minutemedia-prebid.com/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D348%26uid%3D%7BpartnerId%7D

firefox.exe

Remote address:

52.222.139.18:443

Request

GET /sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D348%26uid%3D%7BpartnerId%7D HTTP/2.0
host: cs-rtb.minutemedia-prebid.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/html
content-length: 384
date: Sun, 09 Jul 2023 17:54:09 GMT
access-control-allow-credentials: true
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-origin: https://public.servenobid.com/
set-cookie: wrvUserID=9_b1qBRtCp_mm; Path=/; Domain=.minutemedia-prebid.com; Expires=Tue, 08 Aug 2023 17:54:09 UTC; Max-Age=2592000; HttpOnly; SameSite=None; Secure
x-envoy-upstream-service-time: 1
server: istio-envoy
x-cache: Miss from cloudfront
via: 1.1 ac979e099d122e39d3a8fac95688a69a.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: 5rnUu2CGpffjGp-CBsGO1LSQ_oRoWqNFS7CCBmRfcOxZcrT14lu7nw==
DNS

match.sharethrough.com

firefox.exe

Remote address:

8.8.8.8:53

Request

match.sharethrough.com

IN A

Response

match.sharethrough.com

IN CNAME

match-us-east-1-ecs.sharethrough.com

match-us-east-1-ecs.sharethrough.com

IN A

34.199.223.174

match-us-east-1-ecs.sharethrough.com

IN A

52.20.26.116

match-us-east-1-ecs.sharethrough.com

IN A

3.216.226.119

match-us-east-1-ecs.sharethrough.com

IN A

3.223.214.240

match-us-east-1-ecs.sharethrough.com

IN A

3.217.98.147

match-us-east-1-ecs.sharethrough.com

IN A

44.209.72.229

match-us-east-1-ecs.sharethrough.com

IN A

23.23.229.19

match-us-east-1-ecs.sharethrough.com

IN A

54.162.239.167
DNS

hbx.media.net

firefox.exe

Remote address:

8.8.8.8:53

Request

hbx.media.net

IN A

Response

hbx.media.net

IN A

95.100.244.20
DNS

onetag-sys.com

firefox.exe

Remote address:

8.8.8.8:53

Request

onetag-sys.com

IN A

Response

onetag-sys.com

IN A

51.89.9.254

onetag-sys.com

IN A

51.89.9.253

onetag-sys.com

IN A

51.75.86.98

onetag-sys.com

IN A

51.89.9.252

onetag-sys.com

IN A

51.38.120.206

onetag-sys.com

IN A

51.89.9.251
GET

https://ssbsync.smartadserver.com/api/sync?callerId=9&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D317%26uid%3D%24UID

firefox.exe

Remote address:

185.86.138.150:443

Request

GET /api/sync?callerId=9&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D317%26uid%3D%24UID HTTP/1.1
Host: ssbsync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://public.servenobid.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

content-length: 769
content-type: text/html
date: Sun, 09 Jul 2023 17:54:09 GMT
set-cookie: pid=1185027777187828322; expires=Thu, 08 Aug 2024 17:53:09 GMT; domain=smartadserver.com; path=/; secure; samesite=none
GET

https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent=

firefox.exe

Remote address:

185.86.138.150:443

Request

GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1
Host: ssbsync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2.gumgum.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

content-length: 0
date: Sun, 09 Jul 2023 17:54:12 GMT
location: https://usersync.gumgum.com/usersync?b=sad&i=2003648513740657237
set-cookie: pid=2003648513740657237; expires=Thu, 08 Aug 2024 17:53:12 GMT; domain=smartadserver.com; path=/; secure; samesite=none
GET

https://ssbsync.smartadserver.com/api/sync?callerId=77&gdpr=0&gdpr_consent=

firefox.exe

Remote address:

185.86.138.150:443

Request

GET /api/sync?callerId=77&gdpr=0&gdpr_consent= HTTP/1.1
Host: ssbsync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cs-server-s2s.yellowblue.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

content-length: 0
date: Sun, 09 Jul 2023 17:54:12 GMT
location: https://cs.yellowblue.io/cs?aid=11600&id=2719629848430531127&gdpr=0&gdpr_consent=
set-cookie: pid=2719629848430531127; expires=Thu, 08 Aug 2024 17:53:12 GMT; domain=smartadserver.com; path=/; secure; samesite=none
GET

https://ups.analytics.yahoo.com/ups/58675/occ?gdpr=0&gdpr_consent=

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58675/occ?gdpr=0&gdpr_consent= HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58559/occ

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58559/occ HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58632/occ

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58632/occ HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=0&gdpr_consent=

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58488/occ?&gdpr=0&gdpr_consent= HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58675/occ?gdpr=0&gdpr_consent=&verify=true

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58675/occ?gdpr=0&gdpr_consent=&verify=true HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58559/occ?verify=true

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58559/occ?verify=true HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58632/occ?verify=true

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58632/occ?verify=true HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=0&gdpr_consent=&verify=true

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58488/occ?&gdpr=0&gdpr_consent=&verify=true HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58760/sync?redir=true&gdpr=0&gdpr_consent=

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58760/sync?redir=true&gdpr=0&gdpr_consent= HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=1&gdpr_consent=

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58488/occ?&gdpr=1&gdpr_consent= HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://ups.analytics.yahoo.com/ups/58760/sync?redir=true&gdpr=0&gdpr_consent=&verify=true

firefox.exe

Remote address:

3.225.218.10:443

Request

GET /ups/58760/sync?redir=true&gdpr=0&gdpr_consent=&verify=true HTTP/2.0
host: ups.analytics.yahoo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

onetag-sys.com

firefox.exe

Remote address:

8.8.8.8:53

Request

onetag-sys.com

IN AAAA

Response
GET

https://ce.lijit.com/merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D

firefox.exe

Remote address:

216.52.2.39:443

Request

GET /merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D HTTP/1.1
Host: ce.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://public.servenobid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

Date: Sun, 09 Jul 2023 17:54:09 GMT
Set-Cookie: ljt_reader=G8_SvRZHD6xVsaZHQLyXhweX; Path=/; Domain=.lijit.com; Expires=Mon, 08-Jul-2024 17:54:09 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://ce.lijit.com/merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D&dnr=1
Content-Length: 0
X-Sovrn-Pod: ad_ap7ams1
GET

https://ce.lijit.com/merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D&dnr=1

firefox.exe

Remote address:

216.52.2.39:443

Request

GET /merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D&dnr=1 HTTP/1.1
Host: ce.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://public.servenobid.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 204 No Content

Date: Sun, 09 Jul 2023 17:54:11 GMT
Set-Cookie: ljt_reader=G8_SvRZH4F1U5da2SKCvgzMI; Path=/; Domain=.lijit.com; Expires=Mon, 08-Jul-2024 17:54:11 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap7ams1
GET

https://ap.lijit.com/pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID

firefox.exe

Remote address:

216.52.2.48:443

Request

GET /pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://public.servenobid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 307 Temporary Redirect

Date: Sun, 09 Jul 2023 17:54:09 GMT
Location: https://ap.lijit.com/pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID&sovrn_retry=true
Set-Cookie: ljt_reader=G8_StLZHHHZWlRh6TDyJ8ZmM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Content-Length: 0
X-Sovrn-Pod: ad_ap5ams1
GET

https://ap.lijit.com/pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID&sovrn_retry=true

firefox.exe

Remote address:

216.52.2.48:443

Request

GET /pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID&sovrn_retry=true HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://public.servenobid.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 307 Temporary Redirect

Date: Sun, 09 Jul 2023 17:54:11 GMT
Location: https://ads.servenobid.com/sync?pid=310&uid=
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Content-Length: 0
X-Sovrn-Pod: ad_ap5ams1
GET

https://hbx.media.net/cksync.php?cs=1&type=pbs&ovsid=setstatuscode&bidder=medianet&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D353%26uid%3D%3Cvsid%3E

firefox.exe

Remote address:

95.100.244.20:443

Request

GET /cksync.php?cs=1&type=pbs&ovsid=setstatuscode&bidder=medianet&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D353%26uid%3D%3Cvsid%3E HTTP/2.0
host: hbx.media.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

server: Apache
content-length: 154
content-type: text/html
location: https://ads.servenobid.com/sync?pid=353&uid=0000EEA
set-cookie: data-pbs=setstatuscode~~1;Expires=Mon, 08 Jul 2024 17:54:09 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA"
p3p: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=86400 ; includeSubDomains
strict-transport-security: max-age=604800
x-mnet-hl2: E
expires: Sun, 09 Jul 2023 17:54:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 09 Jul 2023 17:54:09 GMT
DNS

emea.vap.lijit.com

firefox.exe

Remote address:

8.8.8.8:53

Request

emea.vap.lijit.com

IN A

Response

emea.vap.lijit.com

IN A

216.52.2.91

emea.vap.lijit.com

IN A

216.52.2.6

emea.vap.lijit.com

IN A

216.52.2.39

emea.vap.lijit.com

IN A

216.52.2.30

emea.vap.lijit.com

IN A

216.52.2.48

emea.vap.lijit.com

IN A

216.52.2.16
GET

https://ad-cdn.technoratimedia.com/html/usersync.html?gdpr=0&gdpr_consent=&us_privacy=1YN-&srv=cs&source=duration&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D362%26uid%3D%5BUSER_ID%5D

firefox.exe

Remote address:

152.199.5.184:443

Request

GET /html/usersync.html?gdpr=0&gdpr_consent=&us_privacy=1YN-&srv=cs&source=duration&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D362%26uid%3D%5BUSER_ID%5D HTTP/2.0
host: ad-cdn.technoratimedia.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-encoding: gzip
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-expose-headers: access-control-allow-credentials,access-control-allow-methods,access-control-allow-origin,date,etag,opc-client-info,opc-request-id,x-api-id
age: 166
cache-control: max-age=900
content-md5: BWNiLq3WgjMFnqlZeqylmg==
content-type: text/html; charset=utf-8
date: Sun, 09 Jul 2023 17:54:09 GMT
etag: 3c7cbe5d-b074-41c0-9aea-5feaec65b4f6
expires: Sun, 09 Jul 2023 18:09:09 GMT
last-modified: Fri, 09 Jun 2023 15:10:42 GMT
opc-request-id: iad-1:oZruRJtVx6ZBamyCahBJpMzIN5MSBFVK7ugYKFnAWQCy8rX849DpiCHzL7EG9Bc-
server: ECAcc (bsa/EB7B)
storage-tier: Standard
vary: Accept-Encoding
version-id: 54260ee6-b896-4a59-bf66-caede0de27cf
x-api-id: native
x-cache: HIT
content-length: 6056
GET

https://prebid.a-mo.net/cchain/0?gdpr=0&gdpr_consent=&us_privacy=1YN-&&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D327%26uid%3D

firefox.exe

Remote address:

147.28.146.89:443

Request

GET /cchain/0?gdpr=0&gdpr_consent=&us_privacy=1YN-&&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D327%26uid%3D HTTP/2.0
host: prebid.a-mo.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

cache-control: max-age=0, private, must-revalidate
content-length: 0
date: Sun, 09 Jul 2023 17:54:09 GMT
location: https://ads.servenobid.com/sync?pid=327&uid=
server: envoy
x-envoy-upstream-service-time: 0
DNS

g2.gumgum.com

firefox.exe

Remote address:

8.8.8.8:53

Request

g2.gumgum.com

IN A

Response

g2.gumgum.com

IN A

34.197.68.66

g2.gumgum.com

IN A

3.220.23.148

g2.gumgum.com

IN A

35.169.77.225

g2.gumgum.com

IN A

52.2.186.127

g2.gumgum.com

IN A

54.173.35.109

g2.gumgum.com

IN A

3.226.160.148

g2.gumgum.com

IN A

3.225.218.40

g2.gumgum.com

IN A

18.214.132.150
DNS

sync.1rx.io

firefox.exe

Remote address:

8.8.8.8:53

Request

sync.1rx.io

IN A

Response

sync.1rx.io

IN A

199.127.204.171
DNS

g2.gumgum.com

firefox.exe

Remote address:

8.8.8.8:53

Request

g2.gumgum.com

IN AAAA

Response
DNS

emea.vap.lijit.com

firefox.exe

Remote address:

8.8.8.8:53

Request

emea.vap.lijit.com

IN AAAA

Response
DNS

sync.1rx.io

firefox.exe

Remote address:

8.8.8.8:53

Request

sync.1rx.io

IN AAAA

Response
DNS

iad-2-sync.go.sonobi.com

firefox.exe

Remote address:

8.8.8.8:53

Request

iad-2-sync.go.sonobi.com

IN A

Response

iad-2-sync.go.sonobi.com

IN A

69.166.1.10

iad-2-sync.go.sonobi.com

IN A

69.166.1.12
DNS

a-emea.rfihub.com.akadns.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a-emea.rfihub.com.akadns.net

IN A

Response

a-emea.rfihub.com.akadns.net

IN A

193.0.160.130
DNS

iad-2-sync.go.sonobi.com

firefox.exe

Remote address:

8.8.8.8:53

Request

iad-2-sync.go.sonobi.com

IN AAAA

Response
DNS

a-emea.rfihub.com.akadns.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a-emea.rfihub.com.akadns.net

IN AAAA

Response
DNS

fr-xn.lb.indexww.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fr-xn.lb.indexww.com

IN A

Response

fr-xn.lb.indexww.com

IN A

185.80.39.216
DNS

fr-xn.lb.indexww.com

firefox.exe

Remote address:

8.8.8.8:53

Request

fr-xn.lb.indexww.com

IN AAAA

Response
DNS

dheoaz9svaqd1.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

dheoaz9svaqd1.cloudfront.net

IN A

Response

dheoaz9svaqd1.cloudfront.net

IN A

52.222.139.47

dheoaz9svaqd1.cloudfront.net

IN A

52.222.139.76

dheoaz9svaqd1.cloudfront.net

IN A

52.222.139.106

dheoaz9svaqd1.cloudfront.net

IN A

52.222.139.18
DNS

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

firefox.exe

Remote address:

8.8.8.8:53

Request

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

IN A

Response

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

IN A

3.225.218.10

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

IN A

34.200.65.202
DNS

oeu.vap.lijit.com

firefox.exe

Remote address:

8.8.8.8:53

Request

oeu.vap.lijit.com

IN A

Response

oeu.vap.lijit.com

IN A

216.52.2.91

oeu.vap.lijit.com

IN A

216.52.2.30

oeu.vap.lijit.com

IN A

216.52.2.39

oeu.vap.lijit.com

IN A

216.52.2.6

oeu.vap.lijit.com

IN A

216.52.2.48

oeu.vap.lijit.com

IN A

216.52.2.16
DNS

oeu.vap.lijit.com

firefox.exe

Remote address:

8.8.8.8:53

Request

oeu.vap.lijit.com

IN AAAA

Response
DNS

dheoaz9svaqd1.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

dheoaz9svaqd1.cloudfront.net

IN AAAA

Response

dheoaz9svaqd1.cloudfront.net

IN AAAA

2600:9000:239f:b600:1f:4c18:bd40:93a1

dheoaz9svaqd1.cloudfront.net

IN AAAA

2600:9000:239f:9200:1f:4c18:bd40:93a1

dheoaz9svaqd1.cloudfront.net

IN AAAA

2600:9000:239f:c600:1f:4c18:bd40:93a1

dheoaz9svaqd1.cloudfront.net

IN AAAA

2600:9000:239f:b200:1f:4c18:bd40:93a1

dheoaz9svaqd1.cloudfront.net

IN AAAA

2600:9000:239f:1800:1f:4c18:bd40:93a1

dheoaz9svaqd1.cloudfront.net

IN AAAA

2600:9000:239f:9800:1f:4c18:bd40:93a1

dheoaz9svaqd1.cloudfront.net

IN AAAA

2600:9000:239f:f600:1f:4c18:bd40:93a1

dheoaz9svaqd1.cloudfront.net

IN AAAA

2600:9000:239f:6400:1f:4c18:bd40:93a1
DNS

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

firefox.exe

Remote address:

8.8.8.8:53

Request

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

IN AAAA

Response
DNS

sync.mathtag.com

firefox.exe

Remote address:

8.8.8.8:53

Request

sync.mathtag.com

IN A

Response

sync.mathtag.com

IN CNAME

pixel-origin.mathtag.com

pixel-origin.mathtag.com

IN A

185.29.132.241

pixel-origin.mathtag.com

IN A

185.29.132.245

pixel-origin.mathtag.com

IN A

185.29.134.248

pixel-origin.mathtag.com

IN A

185.29.134.244
DNS

pixel-eu.rubiconproject.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pixel-eu.rubiconproject.com

IN A

Response

pixel-eu.rubiconproject.com

IN CNAME

pixel-eu.rubiconproject.net.akadns.net

pixel-eu.rubiconproject.net.akadns.net

IN A

213.19.162.80

pixel-eu.rubiconproject.net.akadns.net

IN A

213.19.162.90
DNS

pixel.rubiconproject.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pixel.rubiconproject.com

IN A

Response

pixel.rubiconproject.com

IN CNAME

pixel.rubiconproject.net.akadns.net

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.90

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.80
DNS

ssbsync-global.smartadserver.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ssbsync-global.smartadserver.com

IN A

Response

ssbsync-global.smartadserver.com

IN CNAME

usersync-geo-global.usersync-prod-sas.akadns.net

usersync-geo-global.usersync-prod-sas.akadns.net

IN CNAME

ssbsync-itx5.smartadserver.com

ssbsync-itx5.smartadserver.com

IN A

185.86.138.150

ssbsync-itx5.smartadserver.com

IN A

185.86.138.151

ssbsync-itx5.smartadserver.com

IN A

185.86.138.154

ssbsync-itx5.smartadserver.com

IN A

185.86.138.155

ssbsync-itx5.smartadserver.com

IN A

185.86.138.153

ssbsync-itx5.smartadserver.com

IN A

185.86.138.152
DNS

id.rlcdn.com

firefox.exe

Remote address:

8.8.8.8:53

Request

id.rlcdn.com

IN A

Response

id.rlcdn.com

IN A

35.190.60.146
DNS

ssbsync-itx5.smartadserver.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ssbsync-itx5.smartadserver.com

IN A

Response

ssbsync-itx5.smartadserver.com

IN A

185.86.138.152

ssbsync-itx5.smartadserver.com

IN A

185.86.138.154

ssbsync-itx5.smartadserver.com

IN A

185.86.138.151

ssbsync-itx5.smartadserver.com

IN A

185.86.138.150

ssbsync-itx5.smartadserver.com

IN A

185.86.138.153

ssbsync-itx5.smartadserver.com

IN A

185.86.138.155
DNS

hbx.media.net

firefox.exe

Remote address:

8.8.8.8:53

Request

hbx.media.net

IN A

Response

hbx.media.net

IN A

95.100.244.20
DNS

cs-server-s2s.yellowblue.io

firefox.exe

Remote address:

8.8.8.8:53

Request

cs-server-s2s.yellowblue.io

IN A

Response

cs-server-s2s.yellowblue.io

IN A

54.174.190.28

cs-server-s2s.yellowblue.io

IN A

44.215.157.249

cs-server-s2s.yellowblue.io

IN A

3.226.99.159

cs-server-s2s.yellowblue.io

IN A

34.225.236.157
DNS

ssbsync-itx5.smartadserver.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ssbsync-itx5.smartadserver.com

IN AAAA

Response
DNS

image8.pubmatic.com

firefox.exe

Remote address:

8.8.8.8:53

Request

image8.pubmatic.com

IN A

Response

image8.pubmatic.com

IN CNAME

image8-v2.pubmnet.com

image8-v2.pubmnet.com

IN CNAME

imagesync-lhrc.pubmnet.com

imagesync-lhrc.pubmnet.com

IN A

185.64.190.79
DNS

cs1561.wpc.edgecastcdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cs1561.wpc.edgecastcdn.net

IN A

Response

cs1561.wpc.edgecastcdn.net

IN A

152.199.5.184
DNS

cs1561.wpc.edgecastcdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cs1561.wpc.edgecastcdn.net

IN AAAA

Response

cs1561.wpc.edgecastcdn.net

IN AAAA

2606:2800:21f:2cf1:7be6:911:71d9:25f7
DNS

cs-server-s2s.yellowblue.io

firefox.exe

Remote address:

8.8.8.8:53

Request

cs-server-s2s.yellowblue.io

IN AAAA

Response
DNS

hbx.media.net

firefox.exe

Remote address:

8.8.8.8:53

Request

hbx.media.net

IN AAAA

Response
DNS

prebid.a-mo.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prebid.a-mo.net

IN A

Response

prebid.a-mo.net

IN A

147.28.129.37
DNS

1.cpm.ak-is2.net

firefox.exe

Remote address:

8.8.8.8:53

Request

1.cpm.ak-is2.net

IN A

Response

1.cpm.ak-is2.net

IN A

77.245.57.72
DNS

match-us-east-1-ecs.sharethrough.com

Request

match-us-east-1-ecs.sharethrough.com

IN A

Response

match-us-east-1-ecs.sharethrough.com

IN A

3.217.98.147

match-us-east-1-ecs.sharethrough.com

IN A

44.207.72.204

match-us-east-1-ecs.sharethrough.com

IN A

34.199.223.174

match-us-east-1-ecs.sharethrough.com

IN A

52.1.99.247

match-us-east-1-ecs.sharethrough.com

IN A

23.23.229.19

match-us-east-1-ecs.sharethrough.com

IN A

54.162.239.167

match-us-east-1-ecs.sharethrough.com

IN A

44.209.72.229

match-us-east-1-ecs.sharethrough.com

IN A

23.23.247.47
DNS

1.cpm.ak-is2.net

Request

1.cpm.ak-is2.net

IN AAAA

Response
DNS

match-us-east-1-ecs.sharethrough.com

Request

match-us-east-1-ecs.sharethrough.com

IN AAAA

Response
DNS

prebid.a-mo.net

Request

prebid.a-mo.net

IN AAAA

Response
DNS

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

Request

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

Response

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

54.81.63.100

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

3.225.85.119

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

23.22.136.75

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

3.232.2.118

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

3.210.236.185

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

34.197.132.33

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

54.86.102.114

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN A

184.72.144.54
DNS

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

Request

zeta-ssp-385516103.us-east-1.elb.amazonaws.com

IN AAAA

Response
DNS

pixel-origin.mathtag.com

Request

pixel-origin.mathtag.com

IN A

Response

pixel-origin.mathtag.com

IN A

185.29.132.241

pixel-origin.mathtag.com

IN A

185.29.132.245

pixel-origin.mathtag.com

IN A

185.29.134.244

pixel-origin.mathtag.com

IN A

185.29.134.248
DNS

pixel.rubiconproject.net.akadns.net

Request

pixel.rubiconproject.net.akadns.net

IN A

Response

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.80

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.90
DNS

match.adsrvr.org

Request

match.adsrvr.org

IN A

Response

match.adsrvr.org

IN A

52.223.40.198

match.adsrvr.org

IN A

35.71.131.137

match.adsrvr.org

IN A

15.197.193.217

match.adsrvr.org

IN A

3.33.220.150
DNS

pixel-origin.mathtag.com

Request

pixel-origin.mathtag.com

IN AAAA

Response
DNS

pixel-eu.rubiconproject.net.akadns.net

Request

pixel-eu.rubiconproject.net.akadns.net

IN A

Response

pixel-eu.rubiconproject.net.akadns.net

IN A

213.19.162.80

pixel-eu.rubiconproject.net.akadns.net

IN A

213.19.162.90
DNS

id.rlcdn.com

Request

id.rlcdn.com

IN A

Response

id.rlcdn.com

IN A

35.190.60.146
DNS

pixel.rubiconproject.net.akadns.net

Request

pixel.rubiconproject.net.akadns.net

IN AAAA

Response
DNS

id.rlcdn.com

Request

id.rlcdn.com

IN AAAA

Response
DNS

pixel-eu.rubiconproject.net.akadns.net

Request

pixel-eu.rubiconproject.net.akadns.net

IN AAAA

Response
DNS

imagesync-lhrc.pubmnet.com

Request

imagesync-lhrc.pubmnet.com

IN A

Response

imagesync-lhrc.pubmnet.com

IN A

185.64.190.79
DNS

imagesync-lhrc.pubmnet.com

Request

imagesync-lhrc.pubmnet.com

IN AAAA

Response
DNS

match.adsrvr.org

Request

match.adsrvr.org

IN A

Response

match.adsrvr.org

IN A

52.223.40.198

match.adsrvr.org

IN A

35.71.131.137

match.adsrvr.org

IN A

15.197.193.217

match.adsrvr.org

IN A

3.33.220.150
DNS

match.adsrvr.org

Request

match.adsrvr.org

IN AAAA

Response
GET

https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=0&gdpr_consent=&us_privacy=1YN-&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid]

Request

GET /api/sync?callerId=5&gdpr=0&gdpr_consent=&us_privacy=1YN-&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/1.1
Host: ssbsync-global.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onetag-sys.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

content-length: 0
date: Sun, 09 Jul 2023 17:54:10 GMT
location: https://onetag-sys.com/match/?int_id=107&uid=2928433158154113650
set-cookie: pid=2928433158154113650; expires=Thu, 08 Aug 2024 17:53:10 GMT; domain=smartadserver.com; path=/; secure; samesite=none
GET

https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=1&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid]

Request

GET /api/sync?callerId=5&gdpr=1&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/1.1
Host: ssbsync-global.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onetag-sys.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

content-length: 0
date: Sun, 09 Jul 2023 17:54:13 GMT
GET

https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid]

Request

GET /api/sync?callerId=5&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/1.1
Host: ssbsync-global.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onetag-sys.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

content-length: 0
date: Sun, 09 Jul 2023 17:54:13 GMT
location: https://onetag-sys.com/match/?int_id=107&uid=4659596722685629180
set-cookie: pid=4659596722685629180; expires=Thu, 08 Aug 2024 17:53:14 GMT; domain=smartadserver.com; path=/; secure; samesite=none
GET

https://image8.pubmatic.com/AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=1YN-&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID

Request

GET /AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=1YN-&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID HTTP/2.0
host: image8.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=1YN-&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Sun, 09 Jul 2023 17:54:10 GMT
content-length: 236
GET

https://image8.pubmatic.com/AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=1YN-&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID&rdf=1

Request

GET /AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=1YN-&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID&rdf=1 HTTP/2.0
host: image8.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:11 GMT
content-length: 0
GET

https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID

Request

GET /AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID HTTP/2.0
host: image8.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Sun, 09 Jul 2023 17:54:12 GMT
content-length: 172
GET

https://image8.pubmatic.com/AdServer/ImgSync?p=159706&gdpr=1&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID

Request

GET /AdServer/ImgSync?p=159706&gdpr=1&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID HTTP/2.0
host: image8.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:13 GMT
content-length: 0
GET

https://image8.pubmatic.com/AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID

Request

GET /AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID HTTP/2.0
host: image8.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Sun, 09 Jul 2023 17:54:13 GMT
content-length: 232
GET

https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&rdf=1

Request

GET /AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&rdf=1 HTTP/2.0
host: image8.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:13 GMT
content-length: 0
GET

https://image8.pubmatic.com/AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID&rdf=1

Request

GET /AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID&rdf=1 HTTP/2.0
host: image8.pubmatic.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://onetag-sys.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:13 GMT
content-length: 0
DNS

b1sync.zemanta.com

Request

b1sync.zemanta.com

IN A

Response
DNS

cms.quantserve.com

Request

cms.quantserve.com

IN A

Response

cms.quantserve.com

IN CNAME

2kpixel.quantserve.com

2kpixel.quantserve.com

IN CNAME

global.px.quantserve.com

global.px.quantserve.com

IN A

192.184.69.167

global.px.quantserve.com

IN A

192.184.69.215

global.px.quantserve.com

IN A

192.184.69.239

global.px.quantserve.com

IN A

192.184.69.252

global.px.quantserve.com

IN A

192.184.69.201
DNS

rtb-csync.smartadserver.com

Request

rtb-csync.smartadserver.com

IN A

Response

rtb-csync.smartadserver.com

IN CNAME

rtb-csync-geo.usersync-prod-sas.akadns.net

rtb-csync-geo.usersync-prod-sas.akadns.net

IN CNAME

rtb-csync-itx5.smartadserver.com

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.151

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.155

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.152

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.153

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.154

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.150
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=150&partneruserid=0&redirurl=https%3A%2F%2Fwt.rqtrk.eu%3Fpid%3D58a76248-f101-4e52-b8f7-c4de9362ea12%26src%3Dwww%26type%3D100%26sid%3D0%26uid%3DSMART_USER_ID%26gdpr_pd%3D0&gdpr=0&gdpr_consent=

Request

GET /redir/?issi=1&partnerid=150&partneruserid=0&redirurl=https%3A%2F%2Fwt.rqtrk.eu%3Fpid%3D58a76248-f101-4e52-b8f7-c4de9362ea12%26src%3Dwww%26type%3D100%26sid%3D0%26uid%3DSMART_USER_ID%26gdpr_pd%3D0&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssbsync.smartadserver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

Response

HTTP/1.1 302 Found

content-length: 0
date: Sun, 09 Jul 2023 17:54:10 GMT
cache-control: no-cache,no-store
location: https://wt.rqtrk.eu?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=24385411736425139&gdpr_pd=0&gdpr=0&gdpr_consent=
pragma: no-cache
set-cookie: pid=24385411736425139; expires=Thu, 08 Aug 2024 17:54:11 GMT; domain=smartadserver.com; path=/
set-cookie: TestIfCookieP=ok; expires=Thu, 08 Aug 2024 17:54:11 GMT; domain=smartadserver.com; path=/
set-cookie: csync=150:0; expires=Tue, 09 Jul 2024 17:54:11 GMT; domain=smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=80&&partneruserid=gLfKYdC3nzOb4ZpmjrWGYdS2nWGbts42juDkMeTU

Request

GET /redir/?partnerid=80&&partneruserid=gLfKYdC3nzOb4ZpmjrWGYdS2nWGbts42juDkMeTU HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ssbsync.smartadserver.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Sun, 09 Jul 2023 17:54:12 GMT
transfer-encoding: chunked
DNS

rtb-csync-itx5.smartadserver.com

Request

rtb-csync-itx5.smartadserver.com

IN A

Response

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.153

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.154

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.155

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.151

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.152

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.150
DNS

b1sync.zemanta.com

Request

b1sync.zemanta.com

IN A

Response

b1sync.zemanta.com

IN CNAME

zemanta-nychi.zemanta.com

zemanta-nychi.zemanta.com

IN A

70.42.32.255

zemanta-nychi.zemanta.com

IN A

70.42.32.127

zemanta-nychi.zemanta.com

IN A

64.202.112.191

zemanta-nychi.zemanta.com

IN A

50.31.142.31

zemanta-nychi.zemanta.com

IN A

64.74.236.159

zemanta-nychi.zemanta.com

IN A

64.74.236.95

zemanta-nychi.zemanta.com

IN A

64.202.112.95

zemanta-nychi.zemanta.com

IN A

64.202.112.223

zemanta-nychi.zemanta.com

IN A

64.74.236.191

zemanta-nychi.zemanta.com

IN A

50.31.142.95

zemanta-nychi.zemanta.com

IN A

64.202.112.159

zemanta-nychi.zemanta.com

IN A

70.42.32.191

zemanta-nychi.zemanta.com

IN A

70.42.32.95

zemanta-nychi.zemanta.com

IN A

64.202.112.63

zemanta-nychi.zemanta.com

IN A

70.42.32.159

zemanta-nychi.zemanta.com

IN A

64.202.112.127

zemanta-nychi.zemanta.com

IN A

64.74.236.255

zemanta-nychi.zemanta.com

IN A

50.31.142.159

zemanta-nychi.zemanta.com

IN A

50.31.142.63

zemanta-nychi.zemanta.com

IN A

64.74.236.31

zemanta-nychi.zemanta.com

IN A

50.31.142.255

zemanta-nychi.zemanta.com

IN A

64.74.236.223

zemanta-nychi.zemanta.com

IN A

64.74.236.127

zemanta-nychi.zemanta.com

IN A

64.74.236.63

zemanta-nychi.zemanta.com

IN A

50.31.142.191

zemanta-nychi.zemanta.com

IN A

70.42.32.31

zemanta-nychi.zemanta.com

IN A

70.42.32.223

zemanta-nychi.zemanta.com

IN A

64.202.112.31

zemanta-nychi.zemanta.com

IN A

50.31.142.223

zemanta-nychi.zemanta.com

IN A

64.202.112.255

zemanta-nychi.zemanta.com

IN A

50.31.142.127

zemanta-nychi.zemanta.com

IN A

70.42.32.63
GET

https://ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dindexexchange%26uid%3D&s=194558&C=1

Request

GET /usermatchredir?cb=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dindexexchange%26uid%3D&s=194558&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

Date: Sun, 09 Jul 2023 17:54:11 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: https://u.4dex.io/setuid?bidder=indexexchange&uid=0
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
GET

https://ssum-sec.casalemedia.com/usermatchredir?s=189872&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diex%26i%3D

Request

GET /usermatchredir?s=189872&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diex%26i%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2.gumgum.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

Date: Sun, 09 Jul 2023 17:54:12 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /usermatchredir?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diex%26i%3D&s=189872&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZKr0RC0VP3yjFehLmD9G3gAA; Path=/; Domain=casalemedia.com; Expires=Mon, 08 Jul 2024 17:54:12 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPS=1195; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 17:54:12 GMT; Max-Age=7776000; Secure; SameSite=None
Set-Cookie: CMPRO=1195; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 17:54:12 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
GET

https://ssum-sec.casalemedia.com/usermatchredir?s=194590&cb=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11583%26id%3D

Request

GET /usermatchredir?s=194590&cb=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11583%26id%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cs-server-s2s.yellowblue.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

Date: Sun, 09 Jul 2023 17:54:12 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /usermatchredir?cb=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11583%26id%3D&s=194590&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZKr0RC0VP3yjFehLmD9G3wAA; Path=/; Domain=casalemedia.com; Expires=Mon, 08 Jul 2024 17:54:12 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPS=1195; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 17:54:12 GMT; Max-Age=7776000; Secure; SameSite=None
Set-Cookie: CMPRO=1195; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 17:54:12 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=498
Connection: Keep-Alive
DNS

s.amazon-adsystem.com

Request

s.amazon-adsystem.com

IN A

Response

s.amazon-adsystem.com

IN A

52.46.130.91
DNS

rtb-csync-itx5.smartadserver.com

Request

rtb-csync-itx5.smartadserver.com

IN AAAA

Response
DNS

s.amazon-adsystem.com

Request

s.amazon-adsystem.com

IN A

Response

s.amazon-adsystem.com

IN A

52.46.151.131
DNS

global.px.quantserve.com

Request

global.px.quantserve.com

IN A

Response

global.px.quantserve.com

IN A

192.184.69.252

global.px.quantserve.com

IN A

192.184.69.201

global.px.quantserve.com

IN A

192.184.69.167

global.px.quantserve.com

IN A

192.184.69.215

global.px.quantserve.com

IN A

192.184.69.239
DNS

s0.2mdn.net

Request

s0.2mdn.net

IN A

Response

s0.2mdn.net

IN A

142.250.179.134
DNS

s.amazon-adsystem.com

Request

s.amazon-adsystem.com

IN AAAA

Response
DNS

zemanta-nychi.zemanta.com

Request

zemanta-nychi.zemanta.com

IN A

Response
DNS

global.px.quantserve.com

Request

global.px.quantserve.com

IN AAAA

Response

global.px.quantserve.com

IN AAAA

2600:1f1c:a99:832c:cd3f:57:d0bc:dbb2

global.px.quantserve.com

IN AAAA

2600:1f1c:a99:832c:ec8b:437a:257b:cb2d

global.px.quantserve.com

IN AAAA

2600:1f1c:a99:832c:d4e8:8c1e:e58e:3348

global.px.quantserve.com

IN AAAA

2600:1f1c:a99:832c:e958:87e0:dc9b:7bb1

global.px.quantserve.com

IN AAAA

2600:1f1c:a99:832c:2412:5a3c:977a:e751
DNS

s0.2mdn.net

Request

s0.2mdn.net

IN A

Response

s0.2mdn.net

IN A

142.250.179.134
GET

https://s0.2mdn.net/simgad/18158262838287695910?sqp=uqWu0g0ICPoBEMoHQGQ&rs=AOga4ql5kAARReeiQdRs7HunqqlF5fK1yQ

Request

GET /simgad/18158262838287695910?sqp=uqWu0g0ICPoBEMoHQGQ&rs=AOga4ql5kAARReeiQdRs7HunqqlF5fK1yQ HTTP/2.0
host: s0.2mdn.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

bh.contextweb.com

Request

bh.contextweb.com

IN A

Response

bh.contextweb.com

IN CNAME

lga-bh.contextweb.com

lga-bh.contextweb.com

IN CNAME

lga-bh-bgp.contextweb.com

lga-bh-bgp.contextweb.com

IN A

198.148.27.140

lga-bh-bgp.contextweb.com

IN A

198.148.27.139
DNS

zemanta-nychi.zemanta.com

Request

zemanta-nychi.zemanta.com

IN AAAA

Response
DNS

s0.2mdn.net

Request

s0.2mdn.net

IN AAAA

Response

s0.2mdn.net

IN AAAA

2a00:1450:400e:801::2006
DNS

lga-bh-bgp.contextweb.com

Request

lga-bh-bgp.contextweb.com

IN A

Response

lga-bh-bgp.contextweb.com

IN A

198.148.27.140

lga-bh-bgp.contextweb.com

IN A

198.148.27.139
GET

https://bh.contextweb.com/bh/rtset?pid=562894&ev=1&us_privacy=&rurl=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D29%26buyeruid%3D%25%25VGUID%25%25%26r%3DCid1YS1iNTQ2NzA2Ny0zZmUwLTM1MWMtYThjNi1jMjMzZWNlNGYxN2IQ____________ASpTaHR0cHM6Ly9hZHMuc2VydmVub2JpZC5jb20vc3luYz9waWQ9MzQ2JnVpZD11YS1iNTQ2NzA2Ny0zZmUwLTM1MWMtYThjNi1jMjMzZWNlNGYxN2IyAh0OOAE=%26gdpr%3D%26gdpr_consent%3D

Request

GET /bh/rtset?pid=562894&ev=1&us_privacy=&rurl=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D29%26buyeruid%3D%25%25VGUID%25%25%26r%3DCid1YS1iNTQ2NzA2Ny0zZmUwLTM1MWMtYThjNi1jMjMzZWNlNGYxN2IQ____________ASpTaHR0cHM6Ly9hZHMuc2VydmVub2JpZC5jb20vc3luYz9waWQ9MzQ2JnVpZD11YS1iNTQ2NzA2Ny0zZmUwLTM1MWMtYThjNi1jMjMzZWNlNGYxN2IyAh0OOAE=%26gdpr%3D%26gdpr_consent%3D HTTP/2.0
host: bh.contextweb.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://public.servenobid.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version
cw-server: bh-deployment-5bd7dc84cc-gvjrz
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
location: https://ssp.disqus.com/match?bidder=29&buyeruid=VJyUApIcmqmM&r=Cid1YS1iNTQ2NzA2Ny0zZmUwLTM1MWMtYThjNi1jMjMzZWNlNGYxN2IQ____________ASpTaHR0cHM6Ly9hZHMuc2VydmVub2JpZC5jb20vc3luYz9waWQ9MzQ2JnVpZD11YS1iNTQ2NzA2Ny0zZmUwLTM1MWMtYThjNi1jMjMzZWNlNGYxN2IyAh0OOAE=&gdpr=&gdpr_consent=&ev=1&us_privacy=&pid=562894
server: Jetty(10.0.14)
strict-transport-security: max-age=15768000
set-cookie: INGRESSCOOKIE=d951c7765e87d3a0; path=/; HttpOnly; Secure; SameSite=None
GET

https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&rurl=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25

Request

GET /bh/rtset?pid=558355&ev=1&rurl=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/2.0
host: bh.contextweb.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://g2.gumgum.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version
cw-server: bh-deployment-5bd7dc84cc-xnf89
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
location: https://usersync.gumgum.com/usersync?b=pln&i=lJkdQqgZbRYr&ev=1&pid=558355
server: Jetty(10.0.14)
strict-transport-security: max-age=15768000
set-cookie: INGRESSCOOKIE=280e03fb7942a023; path=/; HttpOnly; Secure; SameSite=None
GET

https://bh.contextweb.com/bh/rtset?pid=562615&ev=1&us_privacy=[US_PRIVACY]&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11592%26uid%3D%25%25VGUID%25%25

Request

GET /bh/rtset?pid=562615&ev=1&us_privacy=[US_PRIVACY]&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11592%26uid%3D%25%25VGUID%25%25 HTTP/2.0
host: bh.contextweb.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version
cw-server: bh-deployment-5bd7dc84cc-x2n5b
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
location: https://cs-server-s2s.yellowblue.io/cs?aid=11592&uid=Y9sWVypsc0e0&ev=1&us_privacy=[US_PRIVACY]&pid=562615&gdpr_consent=&gdpr=0
server: Jetty(10.0.14)
strict-transport-security: max-age=15768000
set-cookie: INGRESSCOOKIE=88d6c45c4994d9e1; path=/; HttpOnly; Secure; SameSite=None
DNS

lga-bh-bgp.contextweb.com

Request

lga-bh-bgp.contextweb.com

IN AAAA

Response
DNS

visitor.omnitagjs.com

Request

visitor.omnitagjs.com

IN A

Response

visitor.omnitagjs.com

IN CNAME

visitor-fra02.omnitagjs.com

visitor-fra02.omnitagjs.com

IN A

185.255.84.153

visitor-fra02.omnitagjs.com

IN A

185.255.84.152
DNS

visitor-fra02.omnitagjs.com

Request

visitor-fra02.omnitagjs.com

IN A

Response

visitor-fra02.omnitagjs.com

IN A

185.255.84.153

visitor-fra02.omnitagjs.com

IN A

185.255.84.152
GET

https://visitor.omnitagjs.com/visitor/bsync?uid=a1aca1d7a7acd80e26595e82223f1e6f&name=MinuteMedia&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21502%26id%3D%5BBUYER_ID%5D

Request

GET /visitor/bsync?uid=a1aca1d7a7acd80e26595e82223f1e6f&name=MinuteMedia&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21502%26id%3D%5BBUYER_ID%5D HTTP/2.0
host: visitor.omnitagjs.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-rtb.minutemedia-prebid.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 307

cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
expires: 0
location: https://cs.minutemedia-prebid.com/cs?aid=21502&id=7bb57b61344d6bf4583f4de37db9e792
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=7bb57b61344d6bf4583f4de37db9e792; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Sun, 09 Jul 2023 17:54:11 GMT
content-length: 0
x-envoy-upstream-service-time: 15
server: ayl-lb-fra02
DNS

googleads4.g.doubleclick.net

Request

googleads4.g.doubleclick.net

IN A

Response

googleads4.g.doubleclick.net

IN A

142.250.179.162
GET

https://googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsuu7WqB9O_3F_jK2Ev4yfdNC7jpCkQc-jrvIxAo4Zxd6iFqVGBpVILUBhc6AgXSjmVjPGzUNxzXEoPlK1MXHOHvnxLjX9wPZm7U9drbeVn_aUbS3grbE_l6epOSriKovJOuNN1UfuMtV7fNjvbuZ0w5A_5pgSqjjKLvwM8ftv3zw646bamHmjqRnoF0BfdnA0AzASiriW23t2yfkVzBkfs9czOTvCkrMQqBRi47sffr8GQssECTwOuz2kvyOQIIn_46G4j0AVfB69yHTnfremgw7HD9iuu-VlsrbnbKw4gR3jiSNF5vccGO33dbxZQKBBsQFdvzEcQikj6s9FQR8KaP4pyX-sHcEPwrkTJlwYPwRsmE07yk5PYzdwP8PE8Np-pI6Fp6uGmQ1K7dccMrjEfBrT09iQmeGUdCyVD68ufA5ONDF-ow7W9247Bb04rsch3qitP1pqN6mGxBZTfjA_ld90F9ZQQf_lf8kM-xSydGGcq5T1Z9mmkxp9TWyk_MunCBps8JHz21AXXsa8QRzRxk_3eh-nqK9rM72YKDt6MkdgntOMiAQG5TZjZaDip6txV9qn-zWrXhqPV51hamaUuJbc19tUueTTTz7FEDVg7VWdYYICheUm18x6IBFAPRd1XLwpvCls98xOlNPMhfaDHNlBdSFvpUdRMqXY50VVaFBpR5hMntCJzvCPi0v1yy56qxyBJogRUyuwHp1mlmcjgvclkaRVZkIsJXsqshmQzRgdBkajsJV74rdT_-7Os66mDPteDrUGmR1MdGS8Mzcb1CeB0QiO49VlK-3BffOHYRJMQpI3nLm-TdSMsFMhugKEodY5eK_qIcBjBcNJQsYiMlWm7wcNeea5IprKCJNl87TJc71ATs6lbIkUZtHQP76DzcYf2_3wOfxD8s0WpzsAt51X_sAh9pjoQApRrPT7gaFRLqCfTy3f2DvCKeMA31q2m_wz2InYQxc66984xTRpb8HPs7jNaLVbpXw69of6wVf98pPBXsWCEqVbP1kLSEb8m63IKmQIW69l-Pj-pWzu41tLPAz4_os59yiy1Pk1Sra8NsK87lIsV48hhEQXAZbuVu2GWCgFpDnIB-jM3HlVPglIMyPXuphkKVJKxxux9T1dtegJokeuNwfkhtw5dKTWbKM3VYit7H1OxQGRhvBTt1gVC4&sai=AMfl-YSUJzwc3o9mYkQo7P_Rxe5yypNe_NBLX99edCkxk7SK4S7YPqhLbjC6hx2NI7b7oZlI9dQGwC2nRjpGrJj27lF_cNlqgomEagG1LJiqoYzJanrwysL8fC6q3idpHoGFAuBqzk8wEKlCB-YDjR22huoyBFMoZpQ3DxojSF80yfzGc-XfmdZIdWUFhDmJ01pdymkW8-omKaRAXGBZHYgorarX6m5_pmHo5NCu2i_3pGtElNgiHh9GBrOLvUTN7IDfudkdJq6fevWJV6VJ0If5_bD9arMau-jSzcw8UMysrw&sig=Cg0ArKJSzHA8z5ujnd7JEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=10&cbvp=1&cstd=0&cisv=r20230705.56661&arae=0&ftch=1&adurl=

Request

GET /pcs/view?xai=AKAOjsuu7WqB9O_3F_jK2Ev4yfdNC7jpCkQc-jrvIxAo4Zxd6iFqVGBpVILUBhc6AgXSjmVjPGzUNxzXEoPlK1MXHOHvnxLjX9wPZm7U9drbeVn_aUbS3grbE_l6epOSriKovJOuNN1UfuMtV7fNjvbuZ0w5A_5pgSqjjKLvwM8ftv3zw646bamHmjqRnoF0BfdnA0AzASiriW23t2yfkVzBkfs9czOTvCkrMQqBRi47sffr8GQssECTwOuz2kvyOQIIn_46G4j0AVfB69yHTnfremgw7HD9iuu-VlsrbnbKw4gR3jiSNF5vccGO33dbxZQKBBsQFdvzEcQikj6s9FQR8KaP4pyX-sHcEPwrkTJlwYPwRsmE07yk5PYzdwP8PE8Np-pI6Fp6uGmQ1K7dccMrjEfBrT09iQmeGUdCyVD68ufA5ONDF-ow7W9247Bb04rsch3qitP1pqN6mGxBZTfjA_ld90F9ZQQf_lf8kM-xSydGGcq5T1Z9mmkxp9TWyk_MunCBps8JHz21AXXsa8QRzRxk_3eh-nqK9rM72YKDt6MkdgntOMiAQG5TZjZaDip6txV9qn-zWrXhqPV51hamaUuJbc19tUueTTTz7FEDVg7VWdYYICheUm18x6IBFAPRd1XLwpvCls98xOlNPMhfaDHNlBdSFvpUdRMqXY50VVaFBpR5hMntCJzvCPi0v1yy56qxyBJogRUyuwHp1mlmcjgvclkaRVZkIsJXsqshmQzRgdBkajsJV74rdT_-7Os66mDPteDrUGmR1MdGS8Mzcb1CeB0QiO49VlK-3BffOHYRJMQpI3nLm-TdSMsFMhugKEodY5eK_qIcBjBcNJQsYiMlWm7wcNeea5IprKCJNl87TJc71ATs6lbIkUZtHQP76DzcYf2_3wOfxD8s0WpzsAt51X_sAh9pjoQApRrPT7gaFRLqCfTy3f2DvCKeMA31q2m_wz2InYQxc66984xTRpb8HPs7jNaLVbpXw69of6wVf98pPBXsWCEqVbP1kLSEb8m63IKmQIW69l-Pj-pWzu41tLPAz4_os59yiy1Pk1Sra8NsK87lIsV48hhEQXAZbuVu2GWCgFpDnIB-jM3HlVPglIMyPXuphkKVJKxxux9T1dtegJokeuNwfkhtw5dKTWbKM3VYit7H1OxQGRhvBTt1gVC4&sai=AMfl-YSUJzwc3o9mYkQo7P_Rxe5yypNe_NBLX99edCkxk7SK4S7YPqhLbjC6hx2NI7b7oZlI9dQGwC2nRjpGrJj27lF_cNlqgomEagG1LJiqoYzJanrwysL8fC6q3idpHoGFAuBqzk8wEKlCB-YDjR22huoyBFMoZpQ3DxojSF80yfzGc-XfmdZIdWUFhDmJ01pdymkW8-omKaRAXGBZHYgorarX6m5_pmHo5NCu2i_3pGtElNgiHh9GBrOLvUTN7IDfudkdJq6fevWJV6VJ0If5_bD9arMau-jSzcw8UMysrw&sig=Cg0ArKJSzHA8z5ujnd7JEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=10&cbvp=1&cstd=0&cisv=r20230705.56661&arae=0&ftch=1&adurl= HTTP/2.0
host: googleads4.g.doubleclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsuu7WqB9O_3F_jK2Ev4yfdNC7jpCkQc-jrvIxAo4Zxd6iFqVGBpVILUBhc6AgXSjmVjPGzUNxzXEoPlK1MXHOHvnxLjX9wPZm7U9drbeVn_aUbS3grbE_l6epOSriKovJOuNN1UfuMtV7fNjvbuZ0w5A_5pgSqjjKLvwM8ftv3zw646bamHmjqRnoF0BfdnA0AzASiriW23t2yfkVzBkfs9czOTvCkrMQqBRi47sffr8GQssECTwOuz2kvyOQIIn_46G4j0AVfB69yHTnfremgw7HD9iuu-VlsrbnbKw4gR3jiSNF5vccGO33dbxZQKBBsQFdvzEcQikj6s9FQR8KaP4pyX-sHcEPwrkTJlwYPwRsmE07yk5PYzdwP8PE8Np-pI6Fp6uGmQ1K7dccMrjEfBrT09iQmeGUdCyVD68ufA5ONDF-ow7W9247Bb04rsch3qitP1pqN6mGxBZTfjA_ld90F9ZQQf_lf8kM-xSydGGcq5T1Z9mmkxp9TWyk_MunCBps8JHz21AXXsa8QRzRxk_3eh-nqK9rM72YKDt6MkdgntOMiAQG5TZjZaDip6txV9qn-zWrXhqPV51hamaUuJbc19tUueTTTz7FEDVg7VWdYYICheUm18x6IBFAPRd1XLwpvCls98xOlNPMhfaDHNlBdSFvpUdRMqXY50VVaFBpR5hMntCJzvCPi0v1yy56qxyBJogRUyuwHp1mlmcjgvclkaRVZkIsJXsqshmQzRgdBkajsJV74rdT_-7Os66mDPteDrUGmR1MdGS8Mzcb1CeB0QiO49VlK-3BffOHYRJMQpI3nLm-TdSMsFMhugKEodY5eK_qIcBjBcNJQsYiMlWm7wcNeea5IprKCJNl87TJc71ATs6lbIkUZtHQP76DzcYf2_3wOfxD8s0WpzsAt51X_sAh9pjoQApRrPT7gaFRLqCfTy3f2DvCKeMA31q2m_wz2InYQxc66984xTRpb8HPs7jNaLVbpXw69of6wVf98pPBXsWCEqVbP1kLSEb8m63IKmQIW69l-Pj-pWzu41tLPAz4_os59yiy1Pk1Sra8NsK87lIsV48hhEQXAZbuVu2GWCgFpDnIB-jM3HlVPglIMyPXuphkKVJKxxux9T1dtegJokeuNwfkhtw5dKTWbKM3VYit7H1OxQGRhvBTt1gVC4&sai=AMfl-YSUJzwc3o9mYkQo7P_Rxe5yypNe_NBLX99edCkxk7SK4S7YPqhLbjC6hx2NI7b7oZlI9dQGwC2nRjpGrJj27lF_cNlqgomEagG1LJiqoYzJanrwysL8fC6q3idpHoGFAuBqzk8wEKlCB-YDjR22huoyBFMoZpQ3DxojSF80yfzGc-XfmdZIdWUFhDmJ01pdymkW8-omKaRAXGBZHYgorarX6m5_pmHo5NCu2i_3pGtElNgiHh9GBrOLvUTN7IDfudkdJq6fevWJV6VJ0If5_bD9arMau-jSzcw8UMysrw&sig=Cg0ArKJSzHA8z5ujnd7JEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=3660&vt=11&dtpt=3650&dett=4&cstd=0&cisv=r20230705.56661&arae=0&ftch=1&adurl=

Request

GET /pcs/view?xai=AKAOjsuu7WqB9O_3F_jK2Ev4yfdNC7jpCkQc-jrvIxAo4Zxd6iFqVGBpVILUBhc6AgXSjmVjPGzUNxzXEoPlK1MXHOHvnxLjX9wPZm7U9drbeVn_aUbS3grbE_l6epOSriKovJOuNN1UfuMtV7fNjvbuZ0w5A_5pgSqjjKLvwM8ftv3zw646bamHmjqRnoF0BfdnA0AzASiriW23t2yfkVzBkfs9czOTvCkrMQqBRi47sffr8GQssECTwOuz2kvyOQIIn_46G4j0AVfB69yHTnfremgw7HD9iuu-VlsrbnbKw4gR3jiSNF5vccGO33dbxZQKBBsQFdvzEcQikj6s9FQR8KaP4pyX-sHcEPwrkTJlwYPwRsmE07yk5PYzdwP8PE8Np-pI6Fp6uGmQ1K7dccMrjEfBrT09iQmeGUdCyVD68ufA5ONDF-ow7W9247Bb04rsch3qitP1pqN6mGxBZTfjA_ld90F9ZQQf_lf8kM-xSydGGcq5T1Z9mmkxp9TWyk_MunCBps8JHz21AXXsa8QRzRxk_3eh-nqK9rM72YKDt6MkdgntOMiAQG5TZjZaDip6txV9qn-zWrXhqPV51hamaUuJbc19tUueTTTz7FEDVg7VWdYYICheUm18x6IBFAPRd1XLwpvCls98xOlNPMhfaDHNlBdSFvpUdRMqXY50VVaFBpR5hMntCJzvCPi0v1yy56qxyBJogRUyuwHp1mlmcjgvclkaRVZkIsJXsqshmQzRgdBkajsJV74rdT_-7Os66mDPteDrUGmR1MdGS8Mzcb1CeB0QiO49VlK-3BffOHYRJMQpI3nLm-TdSMsFMhugKEodY5eK_qIcBjBcNJQsYiMlWm7wcNeea5IprKCJNl87TJc71ATs6lbIkUZtHQP76DzcYf2_3wOfxD8s0WpzsAt51X_sAh9pjoQApRrPT7gaFRLqCfTy3f2DvCKeMA31q2m_wz2InYQxc66984xTRpb8HPs7jNaLVbpXw69of6wVf98pPBXsWCEqVbP1kLSEb8m63IKmQIW69l-Pj-pWzu41tLPAz4_os59yiy1Pk1Sra8NsK87lIsV48hhEQXAZbuVu2GWCgFpDnIB-jM3HlVPglIMyPXuphkKVJKxxux9T1dtegJokeuNwfkhtw5dKTWbKM3VYit7H1OxQGRhvBTt1gVC4&sai=AMfl-YSUJzwc3o9mYkQo7P_Rxe5yypNe_NBLX99edCkxk7SK4S7YPqhLbjC6hx2NI7b7oZlI9dQGwC2nRjpGrJj27lF_cNlqgomEagG1LJiqoYzJanrwysL8fC6q3idpHoGFAuBqzk8wEKlCB-YDjR22huoyBFMoZpQ3DxojSF80yfzGc-XfmdZIdWUFhDmJ01pdymkW8-omKaRAXGBZHYgorarX6m5_pmHo5NCu2i_3pGtElNgiHh9GBrOLvUTN7IDfudkdJq6fevWJV6VJ0If5_bD9arMau-jSzcw8UMysrw&sig=Cg0ArKJSzHA8z5ujnd7JEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=3660&vt=11&dtpt=3650&dett=4&cstd=0&cisv=r20230705.56661&arae=0&ftch=1&adurl= HTTP/2.0
host: googleads4.g.doubleclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

googleads4.g.doubleclick.net

Request

googleads4.g.doubleclick.net

IN A

Response

googleads4.g.doubleclick.net

IN A

142.250.179.162
DNS

googleads4.g.doubleclick.net

Request

googleads4.g.doubleclick.net

IN AAAA

Response
DNS

ads.stickyadstv.com

Request

ads.stickyadstv.com

IN A

Response

ads.stickyadstv.com

IN CNAME

ip1.ads.stickyadstv.com.akadns.net

ip1.ads.stickyadstv.com.akadns.net

IN CNAME

ip2.ads.stickyadstv.com.akadns.net

ip2.ads.stickyadstv.com.akadns.net

IN CNAME

cidr1.ads.stickyadstv.com.akadns.net

cidr1.ads.stickyadstv.com.akadns.net

IN CNAME

ads.stickyadstv.com.edgesuite.net

ads.stickyadstv.com.edgesuite.net

IN CNAME

a179.b.akamai.net

a179.b.akamai.net

IN A

2.18.121.77

a179.b.akamai.net

IN A

2.18.121.82

a179.b.akamai.net

IN A

2.18.121.83
DNS

ads.yieldmo.com

Request

ads.yieldmo.com

IN A

Response

ads.yieldmo.com

IN CNAME

rw.yieldmo.com

rw.yieldmo.com

IN CNAME

us-east-1.world.rw.yieldmo.com

us-east-1.world.rw.yieldmo.com

IN CNAME

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

3.226.70.127

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

18.208.29.47

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

52.87.50.66

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

54.164.127.24

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

52.87.72.126

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

54.84.121.99

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

54.85.141.114

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

35.173.14.212
DNS

ssc-cms.33across.com

Request

ssc-cms.33across.com

IN A

Response

ssc-cms.33across.com

IN CNAME

pixel.33across.com

pixel.33across.com

IN A

67.202.105.22

pixel.33across.com

IN A

67.202.105.23
DNS

pixel.33across.com

Request

pixel.33across.com

IN A

Response

pixel.33across.com

IN A

67.202.105.22

pixel.33across.com

IN A

67.202.105.21
DNS

pixel.33across.com

Request

pixel.33across.com

IN AAAA

Response
DNS

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

Request

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

Response

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

44.209.212.18

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

3.218.124.205

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

44.193.101.203

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

54.85.70.247

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

52.87.50.66

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

34.194.68.115

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

52.87.72.126

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN A

34.202.191.141
DNS

a179.b.akamai.net

Request

a179.b.akamai.net

IN A

Response

a179.b.akamai.net

IN A

2.18.121.82

a179.b.akamai.net

IN A

2.18.121.77

a179.b.akamai.net

IN A

2.18.121.83
DNS

csync.loopme.me

Request

csync.loopme.me

IN A

Response

csync.loopme.me

IN CNAME

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.206.80

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.132.202

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.137.15

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.252.206

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.254.205

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.152.101

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.141.39
DNS

contextual.media.net

Request

contextual.media.net

IN A

Response

contextual.media.net

IN A

104.85.4.23
DNS

us-u.openx.net

Request

us-u.openx.net

IN A

Response

us-u.openx.net

IN A

34.98.64.218

us-u.openx.net

IN A

35.244.159.8
DNS

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

Request

rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com

IN AAAA

Response
DNS

a179.b.akamai.net

Request

a179.b.akamai.net

IN AAAA

Response
DNS

contextual.media.net

Request

contextual.media.net

IN A

Response

contextual.media.net

IN A

104.85.4.23
DNS

secure.adnxs.com

Request

secure.adnxs.com

IN A

Response

secure.adnxs.com

IN CNAME

g.geogslb.com

g.geogslb.com

IN CNAME

ib.anycast.adnxs.com

ib.anycast.adnxs.com

IN A

185.89.210.20

ib.anycast.adnxs.com

IN A

185.89.210.212

ib.anycast.adnxs.com

IN A

185.89.211.132

ib.anycast.adnxs.com

IN A

185.89.210.180

ib.anycast.adnxs.com

IN A

185.89.210.90

ib.anycast.adnxs.com

IN A

185.89.210.141

ib.anycast.adnxs.com

IN A

185.89.210.244

ib.anycast.adnxs.com

IN A

185.89.211.12

ib.anycast.adnxs.com

IN A

185.89.210.46

ib.anycast.adnxs.com

IN A

185.89.211.84

ib.anycast.adnxs.com

IN A

185.89.210.153

ib.anycast.adnxs.com

IN A

185.89.210.122
DNS

sync.outbrain.com

Request

sync.outbrain.com

IN A

Response

sync.outbrain.com

IN CNAME

alldcs.outbrain.org

alldcs.outbrain.org

IN CNAME

nydc1.outbrain.org

nydc1.outbrain.org

IN A

70.42.32.127
DNS

sync.srv.stackadapt.com

Request

sync.srv.stackadapt.com

IN A

Response

sync.srv.stackadapt.com

IN A

52.20.224.27

sync.srv.stackadapt.com

IN A

54.234.180.12

sync.srv.stackadapt.com

IN A

54.163.224.69

sync.srv.stackadapt.com

IN A

54.235.195.83

sync.srv.stackadapt.com

IN A

54.205.93.130

sync.srv.stackadapt.com

IN A

54.211.72.252

sync.srv.stackadapt.com

IN A

54.173.30.48

sync.srv.stackadapt.com

IN A

52.7.28.2
DNS

pr-bh.ybp.yahoo.com

Request

pr-bh.ybp.yahoo.com

IN A

Response

pr-bh.ybp.yahoo.com

IN CNAME

ds-pr-bh.ybp.gysm.yahoodns.net

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

52.210.246.118

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

54.229.134.204

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

34.252.143.254

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

52.48.244.241
GET

https://csync.loopme.me/?pubid=11362&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11571%26id%3D%7Bdevice_id%7D

Request

GET /?pubid=11362&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11571%26id%3D%7Bdevice_id%7D HTTP/2.0
host: csync.loopme.me
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 307

set-cookie: viewer_token=d4664d29-5575-4fd5-9be7-08f49435c82d; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Mon, 09-Oct-2023 17:54:12 GMT; SameSite=None
location: https://cs-server-s2s.yellowblue.io/cs?aid=11571&id=d4664d29-5575-4fd5-9be7-08f49435c82d&gdpr_consent=null&gdpr=0
content-length: 0
date: Sun, 09 Jul 2023 17:54:12 GMT
server: _
DNS

sync.ipredictive.com

Request

sync.ipredictive.com

IN A

Response

sync.ipredictive.com

IN A

54.175.145.52

sync.ipredictive.com

IN A

52.201.138.102

sync.ipredictive.com

IN A

44.195.117.16

sync.ipredictive.com

IN A

52.201.176.247

sync.ipredictive.com

IN A

34.206.147.83

sync.ipredictive.com

IN A

52.54.173.81

sync.ipredictive.com

IN A

52.5.246.207

sync.ipredictive.com

IN A

52.21.85.14
DNS

sync.technoratimedia.com

Request

sync.technoratimedia.com

IN A

Response

sync.technoratimedia.com

IN CNAME

adserver.technoratimedia.com

adserver.technoratimedia.com

IN A

193.122.128.135
DNS

match.deepintent.com

Request

match.deepintent.com

IN A

Response

match.deepintent.com

IN CNAME

m.deepintent.com

m.deepintent.com

IN A

169.197.150.7

m.deepintent.com

IN A

8.18.47.7

m.deepintent.com

IN A

38.91.45.7

m.deepintent.com

IN A

169.197.150.8
DNS

ad.360yield.com

Request

ad.360yield.com

IN A

Response

ad.360yield.com

IN CNAME

ice.360yield.com

ice.360yield.com

IN CNAME

na-ice.360yield.com

na-ice.360yield.com

IN A

23.22.98.130

na-ice.360yield.com

IN A

35.173.174.14

na-ice.360yield.com

IN A

52.70.13.84

na-ice.360yield.com

IN A

3.226.30.176

na-ice.360yield.com

IN A

34.234.157.255

na-ice.360yield.com

IN A

18.232.216.169

na-ice.360yield.com

IN A

44.196.254.107

na-ice.360yield.com

IN A

3.216.198.205
DNS

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

Request

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

Response

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.137.15

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.152.101

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.141.39

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.252.206

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.206.80

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.254.205

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.132.202
DNS

cs.iqzone.com

Request

cs.iqzone.com

IN A

Response

cs.iqzone.com

IN A

8.2.111.13
DNS

sync-tm.everesttech.net

Request

sync-tm.everesttech.net

IN A

Response

sync-tm.everesttech.net

IN CNAME

sync.tubemogul.com

sync.tubemogul.com

IN CNAME

syncf.tubemogul.com

syncf.tubemogul.com

IN CNAME

h2.shared.global.fastly.net

h2.shared.global.fastly.net

IN A

151.101.2.49

h2.shared.global.fastly.net

IN A

151.101.66.49

h2.shared.global.fastly.net

IN A

151.101.130.49

h2.shared.global.fastly.net

IN A

151.101.194.49
DNS

tg.socdm.com

Request

tg.socdm.com

IN A

Response

tg.socdm.com

IN CNAME

tg.dr.socdm.com

tg.dr.socdm.com

IN A

124.146.215.50

tg.dr.socdm.com

IN A

202.241.208.56

tg.dr.socdm.com

IN A

124.146.215.42

tg.dr.socdm.com

IN A

124.146.215.43

tg.dr.socdm.com

IN A

124.146.215.44

tg.dr.socdm.com

IN A

124.146.215.46

tg.dr.socdm.com

IN A

202.241.208.57

tg.dr.socdm.com

IN A

124.146.215.48

tg.dr.socdm.com

IN A

124.146.215.47

tg.dr.socdm.com

IN A

124.146.215.52

tg.dr.socdm.com

IN A

124.146.215.45

tg.dr.socdm.com

IN A

124.146.215.49

tg.dr.socdm.com

IN A

202.241.208.55

tg.dr.socdm.com

IN A

202.241.208.54

tg.dr.socdm.com

IN A

124.146.215.51

tg.dr.socdm.com

IN A

202.241.208.100

tg.dr.socdm.com

IN A

202.241.208.53

tg.dr.socdm.com

IN A

202.241.208.52
DNS

nydc1.outbrain.org

Request

nydc1.outbrain.org

IN A

Response

nydc1.outbrain.org

IN A

70.42.32.159
DNS

cs.admanmedia.com

Request

cs.admanmedia.com

IN A

Response

cs.admanmedia.com

IN A

80.77.87.166
GET

https://sync.technoratimedia.com/services?gdpr=0&gdpr_consent=&us_privacy=1YN-&srv=cs&source=duration&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D362%26uid%3D%5BUSER_ID%5D&att=99

Request

GET /services?gdpr=0&gdpr_consent=&us_privacy=1YN-&srv=cs&source=duration&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D362%26uid%3D%5BUSER_ID%5D&att=99 HTTP/2.0
host: sync.technoratimedia.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://ad-cdn.technoratimedia.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 307

server: nginx
date: Sun, 09 Jul 2023 17:54:12 GMT
content-length: 0
location: https://ads.servenobid.com/sync?pid=362&uid=GDPR
set-cookie: tads_uid=GDPR; Max-Age=63072000; Expires=Tue, 08 Jul 2025 17:54:12 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None
access-control-allow-origin: https://ad-cdn.technoratimedia.com/
access-control-allow-credentials: true
access-control-allow-methods: POST,GET,HEAD,OPTIONS
x-varnish: 458985985
age: 0
via: 1.1 varnish
GET

https://sync.technoratimedia.com/services?srv=cs&pid=65&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsnc%26i%3D%5BUSER_ID%5D

Request

GET /services?srv=cs&pid=65&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsnc%26i%3D%5BUSER_ID%5D HTTP/2.0
host: sync.technoratimedia.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://g2.gumgum.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 307

server: nginx
date: Sun, 09 Jul 2023 17:54:12 GMT
content-length: 0
location: https://usersync.gumgum.com/usersync?b=snc&i=GDPR
set-cookie: tads_uid=GDPR; Max-Age=63072000; Expires=Tue, 08 Jul 2025 17:54:12 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None
access-control-allow-origin: https://g2.gumgum.com/
access-control-allow-credentials: true
access-control-allow-methods: POST,GET,HEAD,OPTIONS
x-varnish: 454402804
age: 0
via: 1.1 varnish
GET

https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D

Request

GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/2.0
host: match.deepintent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://g2.gumgum.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI'
set-cookie: CDIUSER=di_43badbe18f9743ecbef0b; Max-Age=47260800; SameSite=None; Expires=Mon, 6 Jan 2025 17:54:12 GMT; Domain=deepintent.com; Secure; Path=/
content-type: image/gif
content-length: 0
date: Sun, 09 Jul 2023 17:54:12 GMT
server: b
GET

https://match.deepintent.com/usersync/143

Request

GET /usersync/143 HTTP/2.0
host: match.deepintent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://eus.rubiconproject.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI'
set-cookie: CDIUSER=di_8112b0d3484f4880817be; Max-Age=47260800; SameSite=None; Expires=Mon, 6 Jan 2025 17:54:16 GMT; Domain=deepintent.com; Secure; Path=/
content-type: image/gif
content-length: 0
date: Sun, 09 Jul 2023 17:54:15 GMT
server: b
GET

https://ssc-cms.33across.com/ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11580%26puid%3D33XUSERID33X

Request

GET /ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11580%26puid%3D33XUSERID33X HTTP/2.0
host: ssc-cms.33across.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
set-cookie: 33x_ps=u%3D212204255007477%3As1%3D1688925252676%3Ats%3D1688925252676; Domain=.33across.com; Expires=Mon, 08-Jul-2024 17:54:12 GMT; Path=/; Secure; SameSite=None
referrer-policy: unsafe-url
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01-Jan-70 00:00:01 GMT
x-33x-status: 100000000008200000C
server: 33XP007
location: https://cs-server-s2s.yellowblue.io/cs?aid=11580&puid=212204255007477
content-length: 0
date: Sun, 09 Jul 2023 17:54:12 GMT
GET

https://contextual.media.net/cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11585%26id%3D%3Cvsid%3E

Request

GET /cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11585%26id%3D%3Cvsid%3E HTTP/2.0
host: contextual.media.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://cs-server-s2s.yellowblue.io/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: Apache
content-length: 61
content-type: image/gif
set-cookie: data-ris={{APID}}~~25;Expires=Mon, 08 Jul 2024 17:54:12 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA"
p3p: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Sun, 09 Jul 2023 17:54:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 09 Jul 2023 17:54:12 GMT
GET

https://beacon.sojern.com/imp/dbm?auc=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&li=18527764493&cr=449406734&io=1009233618&seg=&src=https://arras.io/&ord=1688925246920311

Request

GET /imp/dbm?auc=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&li=18527764493&cr=449406734&io=1009233618&seg=&src=https://arras.io/&ord=1688925246920311 HTTP/2.0
host: beacon.sojern.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

creativecdn.com

Request

creativecdn.com

IN A

Response

creativecdn.com

IN A

185.184.8.90
DNS

nydc1.outbrain.org

Request

nydc1.outbrain.org

IN AAAA

Response
DNS

rtb0.doubleverify.com

Request

rtb0.doubleverify.com

IN A

Response

rtb0.doubleverify.com

IN CNAME

bs-geo.dvgtm.akadns.net

bs-geo.dvgtm.akadns.net

IN CNAME

bs-wlb-eu.dvgtm.akadns.net

bs-wlb-eu.dvgtm.akadns.net

IN CNAME

rtbc-ew1.doubleverify.com

rtbc-ew1.doubleverify.com

IN A

130.211.44.5
DNS

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

Request

envoy-hl.envoy-csync1.core-b8mf.ov1o.com

IN AAAA

Response
DNS

us-u.openx.net

Request

us-u.openx.net

IN AAAA

Response
GET

https://rtb0.doubleverify.com/verify.js?flvr=0&jsCallback=__verify_callback_624851608972&jsTagObjCallback=__tagObject_callback_624851608972&num=6&ctx=1000798&cmp=28691177&plc=347747402&sid=1083781&advid=&adsrv=&unit=300x250&isdvvid=&uid=624851608972&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Win32&brid=1&brver=&bridua=2&dup=null&ppid=103&auevent=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&aucmp=18527764493&aucrtv=449406734&auorder=1009233618&ausite=620110108258&auxch=1&pltfrm=1&aufilter1=597658&autt=1&c1=597658&turl=https://arras.io/&srcurlD=0&ssl=1&refD=1&htmlmsging=1&tstype=128&prr=1&m1=13&noc=4&fcifrms=22&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=166&eparams=DC4FC%3Dl9EEADTbpTauTau2CC2D%5D%3A%40Tau&dvp_exetime=9.00&aubndl=&callbackName=__verify_callback_624851608972

Request

GET /verify.js?flvr=0&jsCallback=__verify_callback_624851608972&jsTagObjCallback=__tagObject_callback_624851608972&num=6&ctx=1000798&cmp=28691177&plc=347747402&sid=1083781&advid=&adsrv=&unit=300x250&isdvvid=&uid=624851608972&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Win32&brid=1&brver=&bridua=2&dup=null&ppid=103&auevent=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&aucmp=18527764493&aucrtv=449406734&auorder=1009233618&ausite=620110108258&auxch=1&pltfrm=1&aufilter1=597658&autt=1&c1=597658&turl=https://arras.io/&srcurlD=0&ssl=1&refD=1&htmlmsging=1&tstype=128&prr=1&m1=13&noc=4&fcifrms=22&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=166&eparams=DC4FC%3Dl9EEADTbpTauTau2CC2D%5D%3A%40Tau&dvp_exetime=9.00&aubndl=&callbackName=__verify_callback_624851608972 HTTP/1.1
Host: rtb0.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Date: Sun, 09 Jul 2023 17:54:13 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 07/08/2023 17:54:13
Pragma: no-cache
Vary: Accept-Encoding
Timing-Allow-Origin: *
X-DV-Response: 1
DNS

ds-pr-bh.ybp.gysm.yahoodns.net

Request

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

Response

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

18.203.211.183

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

54.229.134.204

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

99.80.65.46

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

52.48.244.241
DNS

sync.ipredictive.com

Request

sync.ipredictive.com

IN A

Response

sync.ipredictive.com

IN A

52.21.85.14

sync.ipredictive.com

IN A

52.206.114.15

sync.ipredictive.com

IN A

52.0.248.85

sync.ipredictive.com

IN A

34.238.29.96

sync.ipredictive.com

IN A

52.45.170.110

sync.ipredictive.com

IN A

52.72.194.129

sync.ipredictive.com

IN A

52.5.246.207

sync.ipredictive.com

IN A

52.23.70.188
DNS

adserver.technoratimedia.com

Request

adserver.technoratimedia.com

IN A

Response

adserver.technoratimedia.com

IN A

193.122.130.38
GET

https://creativecdn.com/cm-notify?pi=gumgum

Request

GET /cm-notify?pi=gumgum HTTP/2.0
host: creativecdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://g2.gumgum.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

date: Sun, 09 Jul 2023 17:54:13 GMT
set-cookie: u=669KdixZwK7EeaVG0M0L;Path=/;Domain=.creativecdn.com;Expires=Mon, 08-Jul-2024 17:54:13 GMT;Max-Age=31536000;Secure;SameSite=None
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: ts=1688925253;Path=/;Domain=.creativecdn.com;Expires=Mon, 08-Jul-2024 17:54:13 GMT;Max-Age=31536000;Secure;SameSite=None
location: https://creativecdn.com/cm-notify?pi=gumgum&tc=1
content-length: 0
GET

https://creativecdn.com/cm-notify?pi=gumgum&tc=1

Request

GET /cm-notify?pi=gumgum&tc=1 HTTP/2.0
host: creativecdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://g2.gumgum.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:14 GMT
content-type: image/gif
content-length: 42
DNS

ds-pr-bh.ybp.gysm.yahoodns.net

Request

ds-pr-bh.ybp.gysm.yahoodns.net

IN AAAA

Response

ds-pr-bh.ybp.gysm.yahoodns.net

IN AAAA

2a05:d018:d29:3602:90bf:1892:a2de:b1dc

ds-pr-bh.ybp.gysm.yahoodns.net

IN AAAA

2a05:d018:d29:3601:3b81:1ce8:1866:5f20

ds-pr-bh.ybp.gysm.yahoodns.net

IN AAAA

2a05:d018:d29:3605:6cdc:9419:1549:d39d

ds-pr-bh.ybp.gysm.yahoodns.net

IN AAAA

2a05:d018:d29:3605:c958:4a7f:3095:994e
DNS

adserver.technoratimedia.com

Request

adserver.technoratimedia.com

IN AAAA

Response

adserver.technoratimedia.com

IN AAAA

2603:c020:400d:3000:7130:bb0b:d7e:bee2
DNS

sync.ipredictive.com

Request

sync.ipredictive.com

IN AAAA

Response
DNS

sync.srv.stackadapt.com

Request

sync.srv.stackadapt.com

IN A

Response

sync.srv.stackadapt.com

IN A

54.152.111.171

sync.srv.stackadapt.com

IN A

52.20.224.27

sync.srv.stackadapt.com

IN A

54.156.56.88

sync.srv.stackadapt.com

IN A

52.7.28.2

sync.srv.stackadapt.com

IN A

54.210.184.31

sync.srv.stackadapt.com

IN A

54.234.180.12

sync.srv.stackadapt.com

IN A

54.211.72.252

sync.srv.stackadapt.com

IN A

52.0.31.80
DNS

m.deepintent.com

Request

m.deepintent.com

IN A

Response

m.deepintent.com

IN A

169.197.150.8

m.deepintent.com

IN A

8.18.47.7

m.deepintent.com

IN A

38.91.45.7

m.deepintent.com

IN A

169.197.150.7
DNS

ib.anycast.adnxs.com

Request

ib.anycast.adnxs.com

IN AAAA

Response
DNS

u.4dex.io

Request

u.4dex.io

IN A

Response

u.4dex.io

IN A

34.149.40.38
DNS

stags.bluekai.com

Request

stags.bluekai.com

IN A

Response

stags.bluekai.com

IN CNAME

tags.bluekai.com.edgekey.net

tags.bluekai.com.edgekey.net

IN CNAME

e9126.x.akamaiedge.net

e9126.x.akamaiedge.net

IN A

23.55.96.210
DNS

cs.minutemedia-prebid.com

Request

cs.minutemedia-prebid.com

IN A

Response

cs.minutemedia-prebid.com

IN CNAME

cs.digbearings.com

cs.digbearings.com

IN A

44.215.157.249

cs.digbearings.com

IN A

34.225.236.157

cs.digbearings.com

IN A

3.226.99.159

cs.digbearings.com

IN A

54.174.190.28
DNS

pixel-us-east.rubiconproject.com

Request

pixel-us-east.rubiconproject.com

IN A

Response

pixel-us-east.rubiconproject.com

IN CNAME

pixel-us-east.rubiconproject.net.akadns.net

pixel-us-east.rubiconproject.net.akadns.net

IN A

8.43.72.97

pixel-us-east.rubiconproject.net.akadns.net

IN A

8.43.72.98
DNS

m.deepintent.com

Request

m.deepintent.com

IN AAAA

Response
DNS

cs.admanmedia.com

Request

cs.admanmedia.com

IN A

Response

cs.admanmedia.com

IN A

80.77.87.162
DNS

tg.dr.socdm.com

Request

tg.dr.socdm.com

IN A

Response

tg.dr.socdm.com

IN A

124.146.215.47

tg.dr.socdm.com

IN A

202.241.208.57

tg.dr.socdm.com

IN A

202.241.208.52

tg.dr.socdm.com

IN A

124.146.215.46

tg.dr.socdm.com

IN A

124.146.215.42

tg.dr.socdm.com

IN A

202.241.208.53

tg.dr.socdm.com

IN A

124.146.215.45

tg.dr.socdm.com

IN A

124.146.215.44

tg.dr.socdm.com

IN A

124.146.215.48

tg.dr.socdm.com

IN A

202.241.208.56

tg.dr.socdm.com

IN A

202.241.208.54

tg.dr.socdm.com

IN A

202.241.208.55

tg.dr.socdm.com

IN A

124.146.215.43

tg.dr.socdm.com

IN A

202.241.208.100

tg.dr.socdm.com

IN A

124.146.215.49

tg.dr.socdm.com

IN A

124.146.215.51

tg.dr.socdm.com

IN A

124.146.215.50

tg.dr.socdm.com

IN A

124.146.215.52
GET

https://wt.rqtrk.eu/?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=24385411736425139&gdpr_pd=0&gdpr=0&gdpr_consent=

Request

GET /?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=24385411736425139&gdpr_pd=0&gdpr=0&gdpr_consent= HTTP/2.0
host: wt.rqtrk.eu
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://ssbsync.smartadserver.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: istio-envoy
date: Sun, 09 Jul 2023 17:54:13 GMT
content-type: image/gif
content-length: 43
p3p: CP="NOI DSP COR DEVa PSAa PSDa OUR BUS UNI COM NAV STA"
cache-control: no-cache,private
pragma: no-cache
expires: Sun, 09 Jul 2023 17:54:12 GMT
set-cookie: browser_id=1:9eab145d-f70f-4058-9fd2-2335901a8f93; Expires=Sun, 16 Jul 2023 17:54:13 GMT; Domain=.rqtrk.eu; Secure; SameSite=None
x-envoy-upstream-service-time: 0
GET

https://u.4dex.io/setuid?bidder=indexexchange&uid=0

Request

GET /setuid?bidder=indexexchange&uid=0 HTTP/2.0
host: u.4dex.io
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
cookie: uids=eyJzeW5jcyI6eyJpbmRleGV4Y2hhbmdlIjoiMjAyMy0wNy0wOVQxNzo1NDowNS43NjI1NTA1MjFaIiwicHVibWF0aWMiOiIyMDIzLTA3LTA5VDE3OjU0OjA1Ljc2MjUyMTQ5NloiLCJydWJpY29uIjoiMjAyMy0wNy0wOVQxNzo1NDowNS43NjI1Mjg4NjFaIiwieWFob28iOiIyMDIzLTA3LTA5VDE3OjU0OjA1Ljc2MjUzNDk5NFoifSwidWlkcyI6eyJhZGFnaW8iOnsidWlkIjoiZTFkMTVkNTEtNDFjMi00ZmM4LTk5YmMtMzBjYTBjODUzYjQ3IiwiZXhwaXJlcyI6IjIwMjMtMDktMDdUMTc6NTQ6MDUuNzYwODQ3NDc4WiJ9fSwiYmRheSI6IjIwMjMtMDctMDlUMTc6NTQ6MDUuNzYwNzg4Njc1WiJ9
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://stags.bluekai.com/site/23178?id=dtONxRS9iuCldI3RSpsv&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS64TUMIWWG43ZNZRS443NMFZHIYLEONSXE5TFOIXGG33NF5ZGKZDJOIXT6ZLYMNUGC3THMU6XG3LBOJ2CMZ3EOBZD2MBGNFZXG2J5GETHAYLSORXGK4TJMQ6TCMJWEZYGC4TUNZSXE5LTMVZGSZB5MR2E6TTYKJJTS2LVINWGISJTKJJXA43W&gdpr=0

Request

GET /site/23178?id=dtONxRS9iuCldI3RSpsv&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS64TUMIWWG43ZNZRS443NMFZHIYLEONSXE5TFOIXGG33NF5ZGKZDJOIXT6ZLYMNUGC3THMU6XG3LBOJ2CMZ3EOBZD2MBGNFZXG2J5GETHAYLSORXGK4TJMQ6TCMJWEZYGC4TUNZSXE5LTMVZGSZB5MR2E6TTYKJJTS2LVINWGISJTKJJXA43W&gdpr=0 HTTP/2.0
host: stags.bluekai.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://ssbsync.smartadserver.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

content-length: 0
location: https://b1sync.zemanta.com/usersync/bluekai/callback/?d=NB2HI4DTHIXS64TUMIWWG43ZNZRS443NMFZHIYLEONSXE5TFOIXGG33NF5ZGKZDJOIXT6ZLYMNUGC3THMU6XG3LBOJ2CMZ3EOBZD2MBGNFZXG2J5GETHAYLSORXGK4TJMQ6TCMJWEZYGC4TUNZSXE5LTMVZGSZB5MR2E6TTYKJJTS2LVINWGISJTKJJXA43W
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Sun, 09 Jul 2023 17:54:13 GMT
set-cookie: bku=ikG99WU63ZEHHXz9; Path=/; Domain=.bluekai.com; Expires=Tue, 09 Jan 2024 17:54:13 GMT; Secure; SameSite=None
set-cookie: bkpa=KJyWyBNr3M9z9wY73j5bq9+7rpYn4nu66eSM4bE6eGaLHcxszJkfIFNt0fQmm6ptdNdKhFfxg6qdkwjN41HEn6CofXFljCfbzE8Xgr+2xKu/1WmR744nX2j+4T5gKNFqq45NHjQ2kZaK7gzmRUSKcLmkcHaZUE+B8fSf/1yxRE6iiR8yJZQYZU9toa9oD5KzW322SuAkVMs4iSj/MqRreR9jTEQ7Hnw9X2y76QQcGuXSouLKWXCDaEomiLC/cY+wDCw8Ovr/SIR5hpnQvVEcogYZ5e07/BPfYnsu5KGqckmG+nzrexoxJXI+MyJPTMxWSc/oyKniJcEBCjVxuIZmkBuqMdTIcdf2ex9Kfs90; Path=/; Domain=.bluekai.com; Expires=Tue, 09 Jan 2024 17:54:13 GMT; Secure; SameSite=None
GET

https://stags.bluekai.com/site/23178?id=Ga39eBvKDUOdBp5_aEwO&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS65LTMVZHG6LOMMXGO5LNM52W2LTDN5WS65LTMVZHG6LOMM7WEPL2MVWSMZLYMNUGC3THMU6WO5LNM52W2JTHMRYHEPJQEZUT2R3BGM4WKQTWJNCFKT3EIJYDKX3BIV3U6JTVONPXA4TJOZQWG6J5GEWS2LI&gdpr=0&us_privacy=1---

Request

GET /site/23178?id=Ga39eBvKDUOdBp5_aEwO&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS65LTMVZHG6LOMMXGO5LNM52W2LTDN5WS65LTMVZHG6LOMM7WEPL2MVWSMZLYMNUGC3THMU6WO5LNM52W2JTHMRYHEPJQEZUT2R3BGM4WKQTWJNCFKT3EIJYDKX3BIV3U6JTVONPXA4TJOZQWG6J5GEWS2LI&gdpr=0&us_privacy=1--- HTTP/2.0
host: stags.bluekai.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://g2.gumgum.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

content-length: 0
location: https://b1sync.zemanta.com/usersync/bluekai/callback/?d=NB2HI4DTHIXS65LTMVZHG6LOMMXGO5LNM52W2LTDN5WS65LTMVZHG6LOMM7WEPL2MVWSMZLYMNUGC3THMU6WO5LNM52W2JTHMRYHEPJQEZUT2R3BGM4WKQTWJNCFKT3EIJYDKX3BIV3U6JTVONPXA4TJOZQWG6J5GEWS2LI
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Sun, 09 Jul 2023 17:54:14 GMT
set-cookie: bku=ikG99Wq63ZuIR9Wp; Path=/; Domain=.bluekai.com; Expires=Tue, 09 Jan 2024 17:54:14 GMT; Secure; SameSite=None
set-cookie: bkpa=KJhz06NFLM9z9wOwDtd3TfIYpy8AWSsa6G/FCu/UDbcjiYXMaalRoN2ttVc7Ul8pty8Ze7ihIFdSBCfPI1UTp0E/LXqF7J1mwfBJq83t22bcGq1/ghWxOmuXLmm277tjZfTwKkjdlOYxCpV2cKXN97vIwLha+yC/gSdULbTFwyIEOrWQ2usvkTs1TFnQmk0vGG3G0p1CuoG8wODmvm90uOlNhNz3lc/xCE3/iC2aZ+1Bkoc/U4UfZ/pWdCiaVfRn3NpYcF+DnaV0AT3ks8J/c1qLsYxk2r1Y80bEHjjr0dPuL3pSvKG0CTq39e0KFeP5fdtqwm0ob2r7gA5F1jNmFyz9dIC5Px==; Path=/; Domain=.bluekai.com; Expires=Tue, 09 Jan 2024 17:54:14 GMT; Secure; SameSite=None
GET

https://stags.bluekai.com/site/23178?id=rFpxPTcIGtt3xYg-7IB5&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS64DJPBSWYLTSOVRGSY3PNZYHE33KMVRXILTDN5WS65DBOAXHA2DQH5SXQY3IMFXGOZJ5OJ2WE2LDN5XCMZLYOBUXEZLTHUZTAJTONFSD2MZZHEZCM4DVOQ6XERTQPBIFIY2JI52HIM3YLFTS2N2JII2SM5R5GE2DINJZHA

Request

GET /site/23178?id=rFpxPTcIGtt3xYg-7IB5&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS64DJPBSWYLTSOVRGSY3PNZYHE33KMVRXILTDN5WS65DBOAXHA2DQH5SXQY3IMFXGOZJ5OJ2WE2LDN5XCMZLYOBUXEZLTHUZTAJTONFSD2MZZHEZCM4DVOQ6XERTQPBIFIY2JI52HIM3YLFTS2N2JII2SM5R5GE2DINJZHA HTTP/2.0
host: stags.bluekai.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://eus.rubiconproject.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

content-length: 0
location: https://b1sync.zemanta.com/usersync/bluekai/callback/?d=NB2HI4DTHIXS64DJPBSWYLTSOVRGSY3PNZYHE33KMVRXILTDN5WS65DBOAXHA2DQH5SXQY3IMFXGOZJ5OJ2WE2LDN5XCMZLYOBUXEZLTHUZTAJTONFSD2MZZHEZCM4DVOQ6XERTQPBIFIY2JI52HIM3YLFTS2N2JII2SM5R5GE2DINJZHA
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Sun, 09 Jul 2023 17:54:15 GMT
set-cookie: bku=ikG99W463ZEUkAWb; Path=/; Domain=.bluekai.com; Expires=Tue, 09 Jan 2024 17:54:15 GMT; Secure; SameSite=None
set-cookie: bkpa=KJyWy1Nryi9z9wY7Rq5odYmbiNkSvxPVGYtGyvlVjZFXZskgG7FbdKjMwlPpy/FNht5dtQpLdih5vdJoyLdydqTVvUAqrk1dqcbZbETi7YOQYBCh1q8rfK0FrpSl3jZNFNzWfeatydib+xMRX4nGpAtwQnUB8UJLtM1YCM9f/DhNYkyL3KwYt2Vu0MvNCN9TSdjNqQ1r5xyXydCnfVLFYAzNm5QPGSkJwWI9PohRUyDLawm8ij/RYRz1Y33JlboROJwr4ORnhl4HJ5/jpuyaauwwTkR+b58Dv8dPgioEyDx9vxCyGU9GZnmQxxGOPosS8OkxGVUA04X9a3ajYy==; Path=/; Domain=.bluekai.com; Expires=Tue, 09 Jan 2024 17:54:15 GMT; Secure; SameSite=None
DNS

na-ice.360yield.com

Request

na-ice.360yield.com

IN A

Response

na-ice.360yield.com

IN A

52.6.251.109

na-ice.360yield.com

IN A

23.22.98.130

na-ice.360yield.com

IN A

107.21.176.117

na-ice.360yield.com

IN A

52.6.215.72

na-ice.360yield.com

IN A

44.209.118.85

na-ice.360yield.com

IN A

44.208.197.254

na-ice.360yield.com

IN A

3.234.8.147

na-ice.360yield.com

IN A

34.227.131.55
DNS

cs.admanmedia.com

Request

cs.admanmedia.com

IN AAAA

Response
DNS

tg.dr.socdm.com

Request

tg.dr.socdm.com

IN AAAA

Response
DNS

cs.iqzone.com

Request

cs.iqzone.com

IN A

Response

cs.iqzone.com

IN A

8.2.111.13
DNS

na-ice.360yield.com

Request

na-ice.360yield.com

IN AAAA

Response
DNS

token.rubiconproject.com

Request

token.rubiconproject.com

IN A

Response

token.rubiconproject.com

IN CNAME

pixel.rubiconproject.net.akadns.net

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.90

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.80
DNS

pixel.mathtag.com

Request

pixel.mathtag.com

IN A

Response

pixel.mathtag.com

IN CNAME

pixel.mathtag.com.edgekey.net

pixel.mathtag.com.edgekey.net

IN CNAME

e6791.b.akamaiedge.net

e6791.b.akamaiedge.net

IN A

104.85.4.209
DNS

h2.shared.global.fastly.net

Request

h2.shared.global.fastly.net

IN A

Response

h2.shared.global.fastly.net

IN A

151.101.2.49

h2.shared.global.fastly.net

IN A

151.101.66.49

h2.shared.global.fastly.net

IN A

151.101.130.49

h2.shared.global.fastly.net

IN A

151.101.194.49
DNS

cs.iqzone.com

Request

cs.iqzone.com

IN AAAA

Response
DNS

rtbc-ew1.doubleverify.com

Request

rtbc-ew1.doubleverify.com

IN A

Response

rtbc-ew1.doubleverify.com

IN A

130.211.44.5
DNS

h2.shared.global.fastly.net

Request

h2.shared.global.fastly.net

IN AAAA

Response
DNS

creativecdn.com

Request

creativecdn.com

IN A

Response

creativecdn.com

IN A

185.184.8.90
DNS

rtbc-ew1.doubleverify.com

Request

rtbc-ew1.doubleverify.com

IN AAAA

Response
DNS

creativecdn.com

Request

creativecdn.com

IN AAAA

Response
DNS

e9126.x.akamaiedge.net

Request

e9126.x.akamaiedge.net

IN A

Response

e9126.x.akamaiedge.net

IN A

23.222.37.108
DNS

wt.rqtrk.eu

Request

wt.rqtrk.eu

IN A

Response

wt.rqtrk.eu

IN A

15.235.42.102

wt.rqtrk.eu

IN A

15.235.42.104

wt.rqtrk.eu

IN A

15.235.42.103
DNS

e9126.x.akamaiedge.net

Request

e9126.x.akamaiedge.net

IN AAAA

Response
DNS

wt.rqtrk.eu

Request

wt.rqtrk.eu

IN AAAA

Response
DNS

u.4dex.io

Request

u.4dex.io

IN A

Response

u.4dex.io

IN A

34.149.40.38
DNS

u.4dex.io

Request

u.4dex.io

IN AAAA

Response
DNS

cs.digbearings.com

Request

cs.digbearings.com

IN A

Response

cs.digbearings.com

IN A

3.226.99.159

cs.digbearings.com

IN A

54.174.190.28

cs.digbearings.com

IN A

34.225.236.157

cs.digbearings.com

IN A

44.215.157.249
DNS

pixel-us-east.rubiconproject.net.akadns.net

Request

pixel-us-east.rubiconproject.net.akadns.net

IN A

Response

pixel-us-east.rubiconproject.net.akadns.net

IN A

8.43.72.98

pixel-us-east.rubiconproject.net.akadns.net

IN A

8.43.72.97
DNS

e6791.b.akamaiedge.net

Request

e6791.b.akamaiedge.net

IN A

Response

e6791.b.akamaiedge.net

IN A

104.85.4.209
DNS

cs.digbearings.com

Request

cs.digbearings.com

IN AAAA

Response
DNS

pixel-us-east.rubiconproject.net.akadns.net

Request

pixel-us-east.rubiconproject.net.akadns.net

IN AAAA

Response
DNS

e6791.b.akamaiedge.net

Request

e6791.b.akamaiedge.net

IN AAAA

Response
DNS

cs.yellowblue.io

Request

cs.yellowblue.io

IN A

Response

cs.yellowblue.io

IN A

44.215.157.249

cs.yellowblue.io

IN A

3.226.99.159

cs.yellowblue.io

IN A

54.174.190.28

cs.yellowblue.io

IN A

34.225.236.157
GET

http://sync.adkernel.com/user-sync?zone=175005&r=n7Aw6VHoT-AkeTwxmz-NsTXpT-CuAIf7XP6rql6VsVs

Request

GET /user-sync?zone=175005&r=n7Aw6VHoT-AkeTwxmz-NsTXpT-CuAIf7XP6rql6VsVs HTTP/1.1
Host: sync.adkernel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

Response

HTTP/1.1 400 Bad Request

Cache-Control: no-store
Content-Length: 22
Age: 0
Connection: keep-alive
Pragma: no-cache
DNS

cs.yellowblue.io

Request

cs.yellowblue.io

IN A

Response

cs.yellowblue.io

IN A

3.226.99.159

cs.yellowblue.io

IN A

44.215.157.249

cs.yellowblue.io

IN A

34.225.236.157

cs.yellowblue.io

IN A

54.174.190.28
DNS

cs.yellowblue.io

Request

cs.yellowblue.io

IN AAAA

Response
GET

https://ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diex%26i%3D&s=189872&C=1

Request

GET /usermatchredir?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diex%26i%3D&s=189872&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Date: Sun, 09 Jul 2023 17:54:13 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
GET

https://ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11583%26id%3D&s=194590&C=1

Request

GET /usermatchredir?cb=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11583%26id%3D&s=194590&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cs-server-s2s.yellowblue.io/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Found

Date: Sun, 09 Jul 2023 17:54:14 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: https://cs-server-s2s.yellowblue.io/cs?aid=11583&id=0
Pragma: no-cache
Content-Length: 0
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
DNS

usersync.gumgum.com

Request

usersync.gumgum.com

IN A

Response

usersync.gumgum.com

IN A

54.87.127.173

usersync.gumgum.com

IN A

3.214.33.241

usersync.gumgum.com

IN A

35.172.99.217

usersync.gumgum.com

IN A

3.213.224.199

usersync.gumgum.com

IN A

52.207.45.55
GET

https://usersync.gumgum.com/usersync?b=aad&i=10c4e51d-5b66-411b-b9d5-cadee4b1d794

Request

GET /usersync?b=aad&i=10c4e51d-5b66-411b-b9d5-cadee4b1d794 HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:14 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
GET

https://usersync.gumgum.com/usersync?b=sad&i=2003648513740657237

Request

GET /usersync?b=sad&i=2003648513740657237 HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:14 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
GET

https://usersync.gumgum.com/usersync?b=apn&i=0

Request

GET /usersync?b=apn&i=0 HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:15 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
GET

https://usersync.gumgum.com/usersync?b=oth&i=y-mJFjjvZE2pelJz6_VeX4RdmF3r1cHTBRoG7N~A

Request

GET /usersync?b=oth&i=y-mJFjjvZE2pelJz6_VeX4RdmF3r1cHTBRoG7N~A HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:14 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
GET

https://usersync.gumgum.com/usersync?b=sus&i=ZKr0RcCo8XsAAOo8u.kAAAAA

Request

GET /usersync?b=sus&i=ZKr0RcCo8XsAAOo8u.kAAAAA HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:15 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
DNS

usersync.gumgum.com

Request

usersync.gumgum.com

IN A

Response

usersync.gumgum.com

IN A

54.87.127.173

usersync.gumgum.com

IN A

3.213.224.199

usersync.gumgum.com

IN A

35.172.99.217

usersync.gumgum.com

IN A

3.214.33.241

usersync.gumgum.com

IN A

52.207.45.55
GET

https://usersync.gumgum.com/usersync?b=obn&i=ENC%28KzAtJmZiNPR0EYFc4JllwCd_1rzLCCilGVEMPHv3eJcoBozqE8Yr-0JISZLBQuyO%29&r=https%3A%2F%2Fsync.outbrain.com%2FsyncUser%3FplatformId%3D%7Bplatform_id%7D%26platformUid%3D%7Bplatform_uid%7D%26obuid%3DENC%28KzAtJmZiNPR0EYFc4JllwCd_1rzLCCilGVEMPHv3eJcoBozqE8Yr-0JISZLBQuyO%29%26gdpr%3D0

Request

GET /usersync?b=obn&i=ENC%28KzAtJmZiNPR0EYFc4JllwCd_1rzLCCilGVEMPHv3eJcoBozqE8Yr-0JISZLBQuyO%29&r=https%3A%2F%2Fsync.outbrain.com%2FsyncUser%3FplatformId%3D%7Bplatform_id%7D%26platformUid%3D%7Bplatform_uid%7D%26obuid%3DENC%28KzAtJmZiNPR0EYFc4JllwCd_1rzLCCilGVEMPHv3eJcoBozqE8Yr-0JISZLBQuyO%29%26gdpr%3D0 HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:14 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
GET

https://usersync.gumgum.com/usersync?b=opx&i=0fc77ae1-3b79-4c37-9ea9-efd9c1c19bdd

Request

GET /usersync?b=opx&i=0fc77ae1-3b79-4c37-9ea9-efd9c1c19bdd HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:15 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
DNS

usersync.gumgum.com

Request

usersync.gumgum.com

IN AAAA

Response
GET

https://usersync.gumgum.com/usersync?b=pln&i=lJkdQqgZbRYr&ev=1&pid=558355

Request

GET /usersync?b=pln&i=lJkdQqgZbRYr&ev=1&pid=558355 HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:14 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
GET

https://usersync.gumgum.com/usersync?b=snc&i=GDPR

Request

GET /usersync?b=snc&i=GDPR HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:14 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
GET

https://usersync.gumgum.com/usersync?b=sta&i=0-5e5a7478-88b7-5521-6061-17dce7c69737$ip$154.61.71.13

Request

GET /usersync?b=sta&i=0-5e5a7478-88b7-5521-6061-17dce7c69737$ip$154.61.71.13 HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:15 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
DNS

qvdt3feo.com

Request

qvdt3feo.com

IN A

Response

qvdt3feo.com

IN A

44.205.88.227

qvdt3feo.com

IN A

35.169.202.51

qvdt3feo.com

IN A

52.71.37.165

qvdt3feo.com

IN A

3.210.10.81

qvdt3feo.com

IN A

3.212.191.96

qvdt3feo.com

IN A

54.80.24.65
DNS

qvdt3feo.com

Request

qvdt3feo.com

IN A

Response

qvdt3feo.com

IN A

3.210.10.81

qvdt3feo.com

IN A

3.212.191.96

qvdt3feo.com

IN A

35.169.202.51

qvdt3feo.com

IN A

52.71.37.165

qvdt3feo.com

IN A

54.80.24.65

qvdt3feo.com

IN A

44.205.88.227
GET

https://usersync.gumgum.com/usersync?b=vnt&i=07084eb2-8cdb-46f4-bc16-abde227157c3

Request

GET /usersync?b=vnt&i=07084eb2-8cdb-46f4-bc16-abde227157c3 HTTP/1.1
Host: usersync.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://g2.gumgum.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200

Date: Sun, 09 Jul 2023 17:54:14 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: private, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
DNS

qvdt3feo.com

Request

qvdt3feo.com

IN AAAA

Response
DNS

cdn.besafe.global

Request

cdn.besafe.global

IN A

Response

cdn.besafe.global

IN CNAME

d3thp5n8nvi90o.cloudfront.net

d3thp5n8nvi90o.cloudfront.net

IN A

52.222.139.80

d3thp5n8nvi90o.cloudfront.net

IN A

52.222.139.38

d3thp5n8nvi90o.cloudfront.net

IN A

52.222.139.74

d3thp5n8nvi90o.cloudfront.net

IN A

52.222.139.16
DNS

rubicon-match.dotomi.com

Request

rubicon-match.dotomi.com

IN A

Response

rubicon-match.dotomi.com

IN CNAME

bfp.global.dual.dotomi.weighted.com.akadns.net

bfp.global.dual.dotomi.weighted.com.akadns.net

IN A

89.207.16.140
DNS

d3thp5n8nvi90o.cloudfront.net

Request

d3thp5n8nvi90o.cloudfront.net

IN A

Response

d3thp5n8nvi90o.cloudfront.net

IN A

52.222.139.38

d3thp5n8nvi90o.cloudfront.net

IN A

52.222.139.74

d3thp5n8nvi90o.cloudfront.net

IN A

52.222.139.16

d3thp5n8nvi90o.cloudfront.net

IN A

52.222.139.80
GET

https://cdn.besafe.global/globalpassback_300x250.gif

Request

GET /globalpassback_300x250.gif HTTP/2.0
host: cdn.besafe.global
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: image/gif
content-length: 13504
date: Sun, 09 Jul 2023 03:39:55 GMT
last-modified: Fri, 15 Jul 2022 20:03:12 GMT
etag: "d52875943b6fe3d6acebdddae888df6c"
x-amz-meta-sha256: 36819ca2340b20813e1d2eecff934810e65167f054d1f62cdbaf774f0136bfb4
x-amz-meta-s3b-last-modified: 20190925T154054Z
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fcaa7ae40e5e547fbbd3d693139fae.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: wDJWwsp72EU7jMaeChpw2iR1uI9MslBytICRsMNsm9ouxuTf7m8qPg==
age: 51260
GET

https://ads.stickyadstv.com/user-matching?id=3663&gdpr=0&gdpr_consent=

Request

GET /user-matching?id=3663&gdpr=0&gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cs-server-s2s.yellowblue.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 302 Moved Temporarily

Server: nginx
Content-Length: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1688925254861006-587
Location: https://cs.yellowblue.io/cs?aid=11601&id=df7743f62886b99b7d3f59af29257a48&gdpr_consent=&gdpr=0
Expires: Sun, 09 Jul 2023 17:54:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 09 Jul 2023 17:54:14 GMT
Connection: keep-alive
Set-Cookie: UID=df7743f62886b99b7d3f59af29257a48; Domain=ads.stickyadstv.com; Expires=Tue, 08-Aug-2023 17:54:14 GMT; Path=/
DNS

d3thp5n8nvi90o.cloudfront.net

Request

d3thp5n8nvi90o.cloudfront.net

IN AAAA

Response

d3thp5n8nvi90o.cloudfront.net

IN AAAA

2600:9000:2204:2200:8:455e:4a00:93a1

d3thp5n8nvi90o.cloudfront.net

IN AAAA

2600:9000:2204:c200:8:455e:4a00:93a1

d3thp5n8nvi90o.cloudfront.net

IN AAAA

2600:9000:2204:e400:8:455e:4a00:93a1

d3thp5n8nvi90o.cloudfront.net

IN AAAA

2600:9000:2204:dc00:8:455e:4a00:93a1

d3thp5n8nvi90o.cloudfront.net

IN AAAA

2600:9000:2204:8000:8:455e:4a00:93a1

d3thp5n8nvi90o.cloudfront.net

IN AAAA

2600:9000:2204:c000:8:455e:4a00:93a1

d3thp5n8nvi90o.cloudfront.net

IN AAAA

2600:9000:2204:5200:8:455e:4a00:93a1

d3thp5n8nvi90o.cloudfront.net

IN AAAA

2600:9000:2204:2400:8:455e:4a00:93a1
DNS

bfp.global.dual.dotomi.weighted.com.akadns.net

Request

bfp.global.dual.dotomi.weighted.com.akadns.net

IN A

Response

bfp.global.dual.dotomi.weighted.com.akadns.net

IN A

64.158.223.137
DNS

bfp.global.dual.dotomi.weighted.com.akadns.net

Request

bfp.global.dual.dotomi.weighted.com.akadns.net

IN AAAA

Response

bfp.global.dual.dotomi.weighted.com.akadns.net

IN AAAA

2a02:fa8:8806:12::1400
DNS

tps.doubleverify.com

Request

tps.doubleverify.com

IN A

Response

tps.doubleverify.com

IN CNAME

tps-geo.dvgtm.akadns.net

tps-geo.dvgtm.akadns.net

IN CNAME

tps-wlb-eu.dvgtm.akadns.net

tps-wlb-eu.dvgtm.akadns.net

IN CNAME

tpsc-ew1.doubleverify.com

tpsc-ew1.doubleverify.com

IN A

130.211.44.5
GET

https://tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=1881&ttfrms=82&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTau2CC2D%5D%3A%40Tau&srcurlD=0&aUrlD=0&ssl=https:&uid=1688925253795756&jsCallback=dvCallback_1688925253795245&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=696&wouw=1296&scah=680&scaw=1280&jsver=4122&tgjsver=4122&lvvn=28&m1=13&refD=1&fcifrms=22&brh=1&sdf=2&dvp_epl=40&noc=4&nav_pltfrm=Win32&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://arras.io/&c1=597658&prr=1&errorURL=https://tps.doubleverify.com/visit.jpg&ppid=103&auevent=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&aucmp=18527764493&aucrtv=449406734&auorder=1009233618&ausite=620110108258&auxch=1&pltfrm=1&aufilter1=597658&autt=1&mib=0&dvp_rcp=2&dvp_htec=1&dvp_seem=2&dvp_tuk=1&dvp_sukv=1618604323521.993&dvp_tukv=367289170562.8147&dvp_strhd=6&dvpx_strhd=6&dvp_tuid=1320080976711&jurtd=1456025530

Request

GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=1881&ttfrms=82&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTau2CC2D%5D%3A%40Tau&srcurlD=0&aUrlD=0&ssl=https:&uid=1688925253795756&jsCallback=dvCallback_1688925253795245&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=696&wouw=1296&scah=680&scaw=1280&jsver=4122&tgjsver=4122&lvvn=28&m1=13&refD=1&fcifrms=22&brh=1&sdf=2&dvp_epl=40&noc=4&nav_pltfrm=Win32&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://arras.io/&c1=597658&prr=1&errorURL=https://tps.doubleverify.com/visit.jpg&ppid=103&auevent=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&aucmp=18527764493&aucrtv=449406734&auorder=1009233618&ausite=620110108258&auxch=1&pltfrm=1&aufilter1=597658&autt=1&mib=0&dvp_rcp=2&dvp_htec=1&dvp_seem=2&dvp_tuk=1&dvp_sukv=1618604323521.993&dvp_tukv=367289170562.8147&dvp_strhd=6&dvpx_strhd=6&dvp_tuid=1320080976711&jurtd=1456025530 HTTP/1.1
Host: tps.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Date: Sun, 09 Jul 2023 17:54:15 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 07/08/2023 17:54:15
Pragma: no-cache
Vary: Accept-Encoding
Timing-Allow-Origin: *
DNS

tpsc-ew1.doubleverify.com

Request

tpsc-ew1.doubleverify.com

IN A

Response

tpsc-ew1.doubleverify.com

IN A

130.211.44.5
DNS

tpsc-ew1.doubleverify.com

Request

tpsc-ew1.doubleverify.com

IN AAAA

Response
DNS

aax-eu.amazon-adsystem.com

Request

aax-eu.amazon-adsystem.com

IN A

Response

aax-eu.amazon-adsystem.com

IN A

67.220.226.232
DNS

aax-eu.amazon-adsystem.com

Request

aax-eu.amazon-adsystem.com

IN A

Response

aax-eu.amazon-adsystem.com

IN A

67.220.228.200
DNS

aax-eu.amazon-adsystem.com

Request

aax-eu.amazon-adsystem.com

IN AAAA

Response
DNS

rcp.c.appier.net

Request

rcp.c.appier.net

IN A

Response

rcp.c.appier.net

IN CNAME

cm119.appier.org

cm119.appier.org

IN A

172.105.220.23
GET

https://rcp.c.appier.net/rbcm

Request

GET /rbcm HTTP/2.0
host: rcp.c.appier.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://eus.rubiconproject.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

server: nginx
date: Sun, 09 Jul 2023 17:54:16 GMT
content-type: text/html; charset=utf-8
content-length: 131
accept-ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version
cache-control: no-store
location: https://pixel.rubiconproject.com/tap.php?v=70596&nid=3632&put=DImENO5sBdu9CNzKSPSqZA&expires=365
p3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: _auid=DImENO5sBdu9CNzKSPSqZA; Path=/; Domain=c.appier.net; Expires=Tue, 09 Jul 2024 17:54:16 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
DNS

cm119.appier.org

Request

cm119.appier.org

IN A

Response

cm119.appier.org

IN A

172.105.220.23
DNS

rtbc-ew1.doubleverify.com

Request

rtbc-ew1.doubleverify.com

IN A

Response

rtbc-ew1.doubleverify.com

IN A

130.211.44.5
GET

https://rtbc-ew1.doubleverify.com/bsevent.gif?flvr=0&impid=df23314f47844f6bb5b2d5e6b968a6e1&dvpx_gfbc=1&cbust=1688925251833963&google_error=3

Request

GET /bsevent.gif?flvr=0&impid=df23314f47844f6bb5b2d5e6b968a6e1&dvpx_gfbc=1&cbust=1688925251833963&google_error=3 HTTP/1.1
Host: rtbc-ew1.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 204 No Content

Date: Sun, 09 Jul 2023 17:54:15 GMT
Connection: keep-alive
Cache-Control: max-age=0
Expires: 07/08/2023 17:54:15
Pragma: no-cache
DNS

cm119.appier.org

Request

cm119.appier.org

IN AAAA

Response
DNS

sync.smartadserver.com

Request

sync.smartadserver.com

IN A

Response

sync.smartadserver.com

IN CNAME

rtb-csync.smartadserver.com

rtb-csync.smartadserver.com

IN CNAME

rtb-csync-geo.usersync-prod-sas.akadns.net

rtb-csync-geo.usersync-prod-sas.akadns.net

IN CNAME

rtb-csync-itx4.smartadserver.com

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.101

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.102

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.94

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.93

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.103

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.104
DNS

s.company-target.com

Request

s.company-target.com

IN A

Response

s.company-target.com

IN CNAME

s.dsp-prod.demandbase.com

s.dsp-prod.demandbase.com

IN A

34.96.71.22
DNS

rubiconcm.digitaleast.mobi

Request

rubiconcm.digitaleast.mobi

IN A

Response

rubiconcm.digitaleast.mobi

IN A

34.95.81.168
DNS

rubiconcm.digitaleast.mobi

Request

rubiconcm.digitaleast.mobi

IN A

Response

rubiconcm.digitaleast.mobi

IN A

34.95.81.168
GET

https://rubiconcm.digitaleast.mobi/usersync/rubicon.gif

Request

GET /usersync/rubicon.gif HTTP/2.0
host: rubiconcm.digitaleast.mobi
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://eus.rubiconproject.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

s.dsp-prod.demandbase.com

Request

s.dsp-prod.demandbase.com

IN A

Response

s.dsp-prod.demandbase.com

IN A

34.96.71.22
DNS

161.179.250.142.in-addr.arpa

Request

161.179.250.142.in-addr.arpa

IN PTR

Response

161.179.250.142.in-addr.arpa

IN PTR

ams15s41-in-f11e100net
DNS

146.16.207.89.in-addr.arpa

Request

146.16.207.89.in-addr.arpa

IN PTR

Response

146.16.207.89.in-addr.arpa

IN PTR

ams03-convex-float1dotomicom
DNS

214.205.42.23.in-addr.arpa

Request

214.205.42.23.in-addr.arpa

IN PTR

Response

214.205.42.23.in-addr.arpa

IN PTR

a23-42-205-214deploystaticakamaitechnologiescom
DNS

24.219.227.13.in-addr.arpa

Request

24.219.227.13.in-addr.arpa

IN PTR

Response

24.219.227.13.in-addr.arpa

IN PTR

server-13-227-219-24ams54r cloudfrontnet
DNS

18.111.223.76.in-addr.arpa

Request

18.111.223.76.in-addr.arpa

IN PTR

Response

18.111.223.76.in-addr.arpa

IN PTR

a0f671730127a0812awsglobalacceleratorcom
DNS

185.24.30.184.in-addr.arpa

Request

185.24.30.184.in-addr.arpa

IN PTR

Response

185.24.30.184.in-addr.arpa

IN PTR

a184-30-24-185deploystaticakamaitechnologiescom
DNS

210.240.110.104.in-addr.arpa

Request

210.240.110.104.in-addr.arpa

IN PTR

Response

210.240.110.104.in-addr.arpa

IN PTR

a104-110-240-210deploystaticakamaitechnologiescom
DNS

18.86.9.65.in-addr.arpa

Request

18.86.9.65.in-addr.arpa

IN PTR

Response

18.86.9.65.in-addr.arpa

IN PTR

server-65-9-86-18ams1r cloudfrontnet
DNS

1.36.251.142.in-addr.arpa

Request

1.36.251.142.in-addr.arpa

IN PTR

Response

1.36.251.142.in-addr.arpa

IN PTR

ams15s44-in-f11e100net
DNS

162.179.250.142.in-addr.arpa

Request

162.179.250.142.in-addr.arpa

IN PTR

Response

162.179.250.142.in-addr.arpa

IN PTR

ams15s41-in-f21e100net
DNS

206.120.38.51.in-addr.arpa

Request

206.120.38.51.in-addr.arpa

IN PTR

Response

206.120.38.51.in-addr.arpa

IN PTR

ip206ip-51-38-120eu
DNS

18.139.222.52.in-addr.arpa

Request

18.139.222.52.in-addr.arpa

IN PTR

Response

18.139.222.52.in-addr.arpa

IN PTR

server-52-222-139-18ams50r cloudfrontnet
DNS

172.178.211.35.in-addr.arpa

Request

172.178.211.35.in-addr.arpa

IN PTR

Response

172.178.211.35.in-addr.arpa

IN PTR

17217821135bcgoogleusercontentcom
DNS

rtb-csync-itx4.smartadserver.com

Request

rtb-csync-itx4.smartadserver.com

IN A

Response

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.103

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.101

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.94

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.104

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.93

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.102
DNS

216.39.80.185.in-addr.arpa

Request

216.39.80.185.in-addr.arpa

IN PTR

Response
DNS

150.138.86.185.in-addr.arpa

Request

150.138.86.185.in-addr.arpa

IN PTR

Response
DNS

10.218.225.3.in-addr.arpa

Request

10.218.225.3.in-addr.arpa

IN PTR

Response

10.218.225.3.in-addr.arpa

IN PTR

ec2-3-225-218-10 compute-1 amazonawscom
DNS

148.23.220.3.in-addr.arpa

Request

148.23.220.3.in-addr.arpa

IN PTR

Response

148.23.220.3.in-addr.arpa

IN PTR

ec2-3-220-23-148 compute-1 amazonawscom
DNS

159.99.226.3.in-addr.arpa

Request

159.99.226.3.in-addr.arpa

IN PTR

Response

159.99.226.3.in-addr.arpa

IN PTR

ec2-3-226-99-159 compute-1 amazonawscom
DNS

48.2.52.216.in-addr.arpa

Request

48.2.52.216.in-addr.arpa

IN PTR

Response
DNS

39.2.52.216.in-addr.arpa

Request

39.2.52.216.in-addr.arpa

IN PTR

Response
DNS

131.160.0.193.in-addr.arpa

Request

131.160.0.193.in-addr.arpa

IN PTR

Response
DNS

20.244.100.95.in-addr.arpa

Request

20.244.100.95.in-addr.arpa

IN PTR

Response

20.244.100.95.in-addr.arpa

IN PTR

a95-100-244-20deploystaticakamaitechnologiescom
DNS

72.57.245.77.in-addr.arpa

Request

72.57.245.77.in-addr.arpa

IN PTR

Response
DNS

184.5.199.152.in-addr.arpa

Request

184.5.199.152.in-addr.arpa

IN PTR

Response
DNS

ib.anycast.adnxs.com

Request

ib.anycast.adnxs.com

IN AAAA

Response
DNS

10.1.166.69.in-addr.arpa

Request

10.1.166.69.in-addr.arpa

IN PTR

Response
DNS

171.204.127.199.in-addr.arpa

Request

171.204.127.199.in-addr.arpa

IN PTR

Response
DNS

89.146.28.147.in-addr.arpa

Request

89.146.28.147.in-addr.arpa

IN PTR

Response
DNS

174.223.199.34.in-addr.arpa

Request

174.223.199.34.in-addr.arpa

IN PTR

Response

174.223.199.34.in-addr.arpa

IN PTR

ec2-34-199-223-174 compute-1 amazonawscom
DNS

126.214.235.34.in-addr.arpa

Request

126.214.235.34.in-addr.arpa

IN PTR

Response

126.214.235.34.in-addr.arpa

IN PTR

ec2-34-235-214-126 compute-1 amazonawscom
DNS

80.162.19.213.in-addr.arpa

Request

80.162.19.213.in-addr.arpa

IN PTR

Response
DNS

90.162.19.213.in-addr.arpa

Request

90.162.19.213.in-addr.arpa

IN PTR

Response
DNS

198.40.223.52.in-addr.arpa

Request

198.40.223.52.in-addr.arpa

IN PTR

Response

198.40.223.52.in-addr.arpa

IN PTR

a6370ebea231e0c9aawsglobalacceleratorcom
DNS

79.190.64.185.in-addr.arpa

Request

79.190.64.185.in-addr.arpa

IN PTR

Response
DNS

241.132.29.185.in-addr.arpa

Request

241.132.29.185.in-addr.arpa

IN PTR

Response
DNS

s.dsp-prod.demandbase.com

Request

s.dsp-prod.demandbase.com

IN AAAA

Response
DNS

134.179.250.142.in-addr.arpa

Request

134.179.250.142.in-addr.arpa

IN PTR

Response

134.179.250.142.in-addr.arpa

IN PTR

ams17s10-in-f61e100net
DNS

91.130.46.52.in-addr.arpa

Request

91.130.46.52.in-addr.arpa

IN PTR

Response
DNS

255.32.42.70.in-addr.arpa

Request

255.32.42.70.in-addr.arpa

IN PTR

Response

255.32.42.70.in-addr.arpa

IN PTR

nyoutbraincom
DNS

151.138.86.185.in-addr.arpa

Request

151.138.86.185.in-addr.arpa

IN PTR

Response
DNS

167.69.184.192.in-addr.arpa

Request

167.69.184.192.in-addr.arpa

IN PTR

Response
DNS

140.27.148.198.in-addr.arpa

Request

140.27.148.198.in-addr.arpa

IN PTR

Response
DNS

153.84.255.185.in-addr.arpa

Request

153.84.255.185.in-addr.arpa

IN PTR

Response
DNS

20.210.89.185.in-addr.arpa

Request

20.210.89.185.in-addr.arpa

IN PTR

Response

20.210.89.185.in-addr.arpa

IN PTR

944bm-nginx-loadbalancermgmtams3adnexusnet
DNS

135.128.122.193.in-addr.arpa

Request

135.128.122.193.in-addr.arpa

IN PTR

Response
DNS

118.246.210.52.in-addr.arpa

Request

118.246.210.52.in-addr.arpa

IN PTR

Response

118.246.210.52.in-addr.arpa

IN PTR

ec2-52-210-246-118 eu-west-1compute amazonawscom
DNS

80.206.214.35.in-addr.arpa

Request

80.206.214.35.in-addr.arpa

IN PTR

Response

80.206.214.35.in-addr.arpa

IN PTR

8020621435bcgoogleusercontentcom
DNS

27.224.20.52.in-addr.arpa

Request

27.224.20.52.in-addr.arpa

IN PTR

Response

27.224.20.52.in-addr.arpa

IN PTR

ec2-52-20-224-27 compute-1 amazonawscom
DNS

127.32.42.70.in-addr.arpa

Request

127.32.42.70.in-addr.arpa

IN PTR

Response

127.32.42.70.in-addr.arpa

IN PTR

nyoutbraincom
DNS

rubiconcm.digitaleast.mobi

Request

rubiconcm.digitaleast.mobi

IN AAAA

Response
DNS

7.150.197.169.in-addr.arpa

Request

7.150.197.169.in-addr.arpa

IN PTR

Response

7.150.197.169.in-addr.arpa

IN PTR

g deepintentcom
DNS

52.145.175.54.in-addr.arpa

Request

52.145.175.54.in-addr.arpa

IN PTR

Response

52.145.175.54.in-addr.arpa

IN PTR

ec2-54-175-145-52 compute-1 amazonawscom
DNS

119.244.178.107.in-addr.arpa

Request

119.244.178.107.in-addr.arpa

IN PTR

Response

119.244.178.107.in-addr.arpa

IN PTR

119244178107bcgoogleusercontentcom
DNS

22.105.202.67.in-addr.arpa

Request

22.105.202.67.in-addr.arpa

IN PTR

Response

22.105.202.67.in-addr.arpa

IN PTR

ip22 67-202-105staticsteadfastdnsnet
DNS

49.2.101.151.in-addr.arpa

Request

49.2.101.151.in-addr.arpa

IN PTR

Response
DNS

130.98.22.23.in-addr.arpa

Request

130.98.22.23.in-addr.arpa

IN PTR

Response

130.98.22.23.in-addr.arpa

IN PTR

ec2-23-22-98-130 compute-1 amazonawscom
DNS

5.44.211.130.in-addr.arpa

Request

5.44.211.130.in-addr.arpa

IN PTR

Response

5.44.211.130.in-addr.arpa

IN PTR

544211130bcgoogleusercontentcom
DNS

50.215.146.124.in-addr.arpa

Request

50.215.146.124.in-addr.arpa

IN PTR

Response
DNS

90.8.184.185.in-addr.arpa

Request

90.8.184.185.in-addr.arpa

IN PTR

Response

90.8.184.185.in-addr.arpa

IN PTR

ip-185-184-8-90rtbhousenet
DNS

38.40.149.34.in-addr.arpa

Request

38.40.149.34.in-addr.arpa

IN PTR

Response

38.40.149.34.in-addr.arpa

IN PTR

384014934bcgoogleusercontentcom
DNS

rtb-csync-itx4.smartadserver.com

Request

rtb-csync-itx4.smartadserver.com

IN AAAA

Response
DNS

249.157.215.44.in-addr.arpa

Request

249.157.215.44.in-addr.arpa

IN PTR

Response

249.157.215.44.in-addr.arpa

IN PTR

ec2-44-215-157-249 compute-1 amazonawscom
DNS

210.96.55.23.in-addr.arpa

Request

210.96.55.23.in-addr.arpa

IN PTR

Response

210.96.55.23.in-addr.arpa

IN PTR

a23-55-96-210deploystaticakamaitechnologiescom
DNS

209.4.85.104.in-addr.arpa

Request

209.4.85.104.in-addr.arpa

IN PTR

Response

209.4.85.104.in-addr.arpa

IN PTR

a104-85-4-209deploystaticakamaitechnologiescom
DNS

102.42.235.15.in-addr.arpa

Request

102.42.235.15.in-addr.arpa

IN PTR

Response

102.42.235.15.in-addr.arpa

IN PTR

haproxy-ca-001roqadpl
DNS

97.72.43.8.in-addr.arpa

Request

97.72.43.8.in-addr.arpa

IN PTR

Response
DNS

173.127.87.54.in-addr.arpa

Request

173.127.87.54.in-addr.arpa

IN PTR

Response

173.127.87.54.in-addr.arpa

IN PTR

ec2-54-87-127-173 compute-1 amazonawscom
DNS

227.88.205.44.in-addr.arpa

Request

227.88.205.44.in-addr.arpa

IN PTR

Response

227.88.205.44.in-addr.arpa

IN PTR

ec2-44-205-88-227 compute-1 amazonawscom
DNS

80.139.222.52.in-addr.arpa

Request

80.139.222.52.in-addr.arpa

IN PTR

Response

80.139.222.52.in-addr.arpa

IN PTR

server-52-222-139-80ams50r cloudfrontnet
DNS

140.16.207.89.in-addr.arpa

Request

140.16.207.89.in-addr.arpa

IN PTR

Response

140.16.207.89.in-addr.arpa

IN PTR

ams03-nessy-float2dotomicom
DNS

83.121.18.2.in-addr.arpa

Request

83.121.18.2.in-addr.arpa

IN PTR

Response

83.121.18.2.in-addr.arpa

IN PTR

a2-18-121-83deploystaticakamaitechnologiescom
DNS

232.226.220.67.in-addr.arpa

Request

232.226.220.67.in-addr.arpa

IN PTR

Response
DNS

23.220.105.172.in-addr.arpa

Request

23.220.105.172.in-addr.arpa

IN PTR

Response

23.220.105.172.in-addr.arpa

IN PTR

li1874-23memberslinodecom
GET

https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D32128%26nid%3D2915%26put%3D[sas_uid]

Request

GET /getuid?gdpr=0&url=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D32128%26nid%3D2915%26put%3D[sas_uid] HTTP/2.0
host: sync.smartadserver.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://eus.rubiconproject.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

content-length: 0
date: Sun, 09 Jul 2023 17:54:15 GMT
cache-control: no-cache,no-store
location: https://sync.smartadserver.com:443/getuid?gdpr=0&url=https://pixel.rubiconproject.com/tap.php?v=32128&nid=2915&put=[sas_uid]&cklb=1
pragma: no-cache
set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/
set-cookie: TestIfCookieP=ok; expires=Tue, 09 Jul 2024 17:54:16 GMT; domain=.smartadserver.com; path=/
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Tue, 09 Jul 2024 17:54:16 GMT; domain=.smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://sync.smartadserver.com/getuid?gdpr=0&url=https://pixel.rubiconproject.com/tap.php?v=32128&nid=2915&put=[sas_uid]&cklb=1

Request

GET /getuid?gdpr=0&url=https://pixel.rubiconproject.com/tap.php?v=32128&nid=2915&put=[sas_uid]&cklb=1 HTTP/2.0
host: sync.smartadserver.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://eus.rubiconproject.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-length: 0
date: Sun, 09 Jul 2023 17:54:15 GMT
GET

https://s.company-target.com/s/rp

Request

GET /s/rp HTTP/2.0
host: s.company-target.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://eus.rubiconproject.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
DNS

tpsc-ew1.doubleverify.com

Request

tpsc-ew1.doubleverify.com

IN A

Response

tpsc-ew1.doubleverify.com

IN A

130.211.44.5
DNS

choices.trustarc.com

Request

choices.trustarc.com

IN A

Response

choices.trustarc.com

IN A

18.65.39.119

choices.trustarc.com

IN A

18.65.39.77

choices.trustarc.com

IN A

18.65.39.95

choices.trustarc.com

IN A

18.65.39.49
GET

https://tpsc-ew1.doubleverify.com/event.png?impid=160711c0e4a54ad08cf1473fb587c7f3&flavor=0&gdpr=&gdpr_consent=&dvpx_gfbc=1&tagsrv=1&cbust=1688925254132579&google_error=3

Request

GET /event.png?impid=160711c0e4a54ad08cf1473fb587c7f3&flavor=0&gdpr=&gdpr_consent=&dvpx_gfbc=1&tagsrv=1&cbust=1688925254132579&google_error=3 HTTP/1.1
Host: tpsc-ew1.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 204 No Content

Date: Sun, 09 Jul 2023 17:54:16 GMT
Connection: keep-alive
Cache-Control: max-age=0
Expires: 07/08/2023 17:54:16
Pragma: no-cache
POST

https://tpsc-ew1.doubleverify.com/event.png?impid=160711c0e4a54ad08cf1473fb587c7f3&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=314&eoid=15&ee_dp_teex=0&msrjs=4122&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=0&tetms=3&msltms=1305&vltms=314&sei=145&vetms=17&tuviims=1969&tuviems=2300&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=392&msrcannum=3&ee_dp_tmads=2523&ismms=126&isumms=125&nvr=6&isgmmims=126&isgmv4mims=126&elmtp=6&isbxdms=2450&b0=100&b11=2330&adhgt=250&adwdth=300&norwdth=300&norhgt=250&vsos=8&dvp_vsosnmr=16&lftb=2430&sftb=2430&msrdp=1&naral=128&vct=512&vphgt=696&vpwdth=1296&chgt=250&cwdth=300&scrhgt=720&scrwdth=1280&strp=0&advisonl=false&isiabvms=1244&isuiabvms=1244&isgmpims=430&isgmv4dpims=1244&ispmxpms=1244&engalms=120&dvp_dpr=1&vstsz=1153&ee_dp_cvcmeeid=1&metp=1&meeid=1&ttfurm=3423&cbust=1688925257139297

Request

POST /event.png?impid=160711c0e4a54ad08cf1473fb587c7f3&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=314&eoid=15&ee_dp_teex=0&msrjs=4122&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=0&tetms=3&msltms=1305&vltms=314&sei=145&vetms=17&tuviims=1969&tuviems=2300&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=392&msrcannum=3&ee_dp_tmads=2523&ismms=126&isumms=125&nvr=6&isgmmims=126&isgmv4mims=126&elmtp=6&isbxdms=2450&b0=100&b11=2330&adhgt=250&adwdth=300&norwdth=300&norhgt=250&vsos=8&dvp_vsosnmr=16&lftb=2430&sftb=2430&msrdp=1&naral=128&vct=512&vphgt=696&vpwdth=1296&chgt=250&cwdth=300&scrhgt=720&scrwdth=1280&strp=0&advisonl=false&isiabvms=1244&isuiabvms=1244&isgmpims=430&isgmv4dpims=1244&ispmxpms=1244&engalms=120&dvp_dpr=1&vstsz=1153&ee_dp_cvcmeeid=1&metp=1&meeid=1&ttfurm=3423&cbust=1688925257139297 HTTP/1.1
Host: tpsc-ew1.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

Response

HTTP/1.1 204 No Content

Date: Sun, 09 Jul 2023 17:54:19 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: max-age=0
Expires: 07/08/2023 17:54:19
Pragma: no-cache
DNS

choices.trustarc.com

Request

choices.trustarc.com

IN A

Response

choices.trustarc.com

IN A

18.65.39.77

choices.trustarc.com

IN A

18.65.39.95

choices.trustarc.com

IN A

18.65.39.119

choices.trustarc.com

IN A

18.65.39.49
GET

https://choices.trustarc.com/ca?aid=sojern02_d&pid=sojern01&cid=sojern&w=300&h=250&c=1688925246920311&js=pmw1&base=te-clr1-764d50d5-5b16-41fd-a673-fa89b0dd9116&admarker=dynamic

Request

GET /ca?aid=sojern02_d&pid=sojern01&cid=sojern&w=300&h=250&c=1688925246920311&js=pmw1&base=te-clr1-764d50d5-5b16-41fd-a673-fa89b0dd9116&admarker=dynamic HTTP/2.0
host: choices.trustarc.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript;charset=UTF-8
content-length: 2338
date: Sun, 09 Jul 2023 17:54:16 GMT
server: nginx
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: origin
permissions-policy: geolocation=(), microphone=(), payment=()
expect-ct: max-age=31536000
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: default-src 'self' 'unsafe-eval' *; font-src 'self' *; style-src 'self' 'unsafe-inline' *; img-src 'self' * data: https://cdn1.iconfinder.com https://js.userflow.com; frame-src 'self' *; frame-ancestors 'self' *; connect-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; object-src 'self' *; media-src 'self' *; child-src 'self' *; worker-src 'self' *; manifest-src 'self' *;
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: 7vGEWgrh3g5Npjv44FF6-TJhYhtruuN3z5ThlZ-mlQzFxUrdDlxEBw==
vary: Origin
GET

https://choices.trustarc.com/cap?aid=sojern02_d&pid=sojern01&cid=sojern&w=300&h=250&c=0777

Request

GET /cap?aid=sojern02_d&pid=sojern01&cid=sojern&w=300&h=250&c=0777 HTTP/2.0
host: choices.trustarc.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: text/javascript;charset=UTF-8
date: Sun, 09 Jul 2023 17:54:16 GMT
server: nginx
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: origin
permissions-policy: geolocation=(), microphone=(), payment=()
expect-ct: max-age=31536000
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: default-src 'self' 'unsafe-eval' *; font-src 'self' *; style-src 'self' 'unsafe-inline' *; img-src 'self' * data: https://cdn1.iconfinder.com https://js.userflow.com; frame-src 'self' *; frame-ancestors 'self' *; connect-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; object-src 'self' *; media-src 'self' *; child-src 'self' *; worker-src 'self' *; manifest-src 'self' *;
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: T5DCt7plQ1Xgmo879jiVbeX5mH5JX-sQvqbPtmJSP_vnQybikpBXyg==
vary: Origin
GET

https://choices.trustarc.com/ca?aid=sojern02_d&pid=sojern01&cid=sojern&w=300&h=250&c=1688925246920311&js=pmw2

Request

GET /ca?aid=sojern02_d&pid=sojern01&cid=sojern&w=300&h=250&c=1688925246920311&js=pmw2 HTTP/2.0
host: choices.trustarc.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: image/gif
content-length: 43
date: Sun, 09 Jul 2023 17:54:16 GMT
server: nginx
cache-control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: origin
permissions-policy: geolocation=(), microphone=(), payment=()
expect-ct: max-age=31536000
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: default-src 'self' 'unsafe-eval' *; font-src 'self' *; style-src 'self' 'unsafe-inline' *; img-src 'self' * data: https://cdn1.iconfinder.com https://js.userflow.com; frame-src 'self' *; frame-ancestors 'self' *; connect-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; object-src 'self' *; media-src 'self' *; child-src 'self' *; worker-src 'self' *; manifest-src 'self' *;
x-cache: Miss from cloudfront
via: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: 8Bw6xjeXfjLrJTrG-ZCNRW2S5Jb-zH2X90AW5Rigue9vY29QX3b0Bg==
vary: Origin
GET

https://choices.trustarc.com/get?name=admarker-icon-tr.png

Request

GET /get?name=admarker-icon-tr.png HTTP/2.0
host: choices.trustarc.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: image/png
content-length: 287
date: Sat, 24 Jun 2023 21:51:40 GMT
server: nginx
access-control-allow-origin: *
pragma: public
expires: Mon, 24 Jul 2023 21:51:40 GMT
cache-control: max-age=2592000
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: 25OpRS3sjEzQ3KinbO7J0LebsHpG9Md5mtRgmrUadbYmsUwiLHQ09w==
age: 1281756
GET

https://choices.trustarc.com/get?name=en-admarker-full-tr.png

Request

GET /get?name=en-admarker-full-tr.png HTTP/2.0
host: choices.trustarc.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

content-type: image/png
content-length: 739
date: Mon, 26 Jun 2023 14:56:53 GMT
server: nginx
access-control-allow-origin: *
pragma: public
expires: Wed, 26 Jul 2023 14:56:53 GMT
cache-control: max-age=2592000
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: JMdz5vWWOl5HX1PM_aS9_UIGgAkAsyXRHwOPI0SbgcCHq8f3tsWOuA==
age: 1133843
DNS

choices.trustarc.com

Request

choices.trustarc.com

IN AAAA

Response
DNS

168.81.95.34.in-addr.arpa

Request

168.81.95.34.in-addr.arpa

IN PTR

Response

168.81.95.34.in-addr.arpa

IN PTR

168819534bcgoogleusercontentcom
DNS

101.139.86.185.in-addr.arpa

Request

101.139.86.185.in-addr.arpa

IN PTR

Response
DNS

22.71.96.34.in-addr.arpa

Request

22.71.96.34.in-addr.arpa

IN PTR

Response

22.71.96.34.in-addr.arpa

IN PTR

22719634bcgoogleusercontentcom
DNS

119.39.65.18.in-addr.arpa

Request

119.39.65.18.in-addr.arpa

IN PTR

Response

119.39.65.18.in-addr.arpa

IN PTR

server-18-65-39-119ams1r cloudfrontnet
DNS

86.23.85.13.in-addr.arpa

Request

86.23.85.13.in-addr.arpa

IN PTR

Response
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:54:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

aus5.mozilla.org

Request

aus5.mozilla.org

IN A

Response

aus5.mozilla.org

IN CNAME

balrog-aus5.r53-2.services.mozilla.com

balrog-aus5.r53-2.services.mozilla.com

IN CNAME

prod.balrog.prod.cloudops.mozgcp.net

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

prod.balrog.prod.cloudops.mozgcp.net

Request

prod.balrog.prod.cloudops.mozgcp.net

IN A

Response

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

prod.balrog.prod.cloudops.mozgcp.net

Request

prod.balrog.prod.cloudops.mozgcp.net

IN AAAA

Response
DNS

ciscobinary.openh264.org

Request

ciscobinary.openh264.org

IN A

Response

ciscobinary.openh264.org

IN CNAME

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

IN CNAME

a17.rackcdn.com

a17.rackcdn.com

IN CNAME

a17.rackcdn.com.mdc.edgesuite.net

a17.rackcdn.com.mdc.edgesuite.net

IN CNAME

a19.dscg10.akamai.net

a19.dscg10.akamai.net

IN A

2.18.121.75

a19.dscg10.akamai.net

IN A

2.18.121.68
GET

http://ciscobinary.openh264.org/openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

Request

GET /openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

Response

HTTP/1.1 200 OK

Last-Modified: Wed, 07 Jun 2023 18:17:04 GMT
ETag: 85430baed3398695717b0263807cf97c
Content-Length: 453023
Accept-Ranges: bytes
X-Timestamp: 1686161823.28027
Content-Type: application/zip
X-Trans-Id: txdab2a6b77c3e4929affad-0064844c91dfw1
Cache-Control: public, max-age=235317
Expires: Wed, 12 Jul 2023 11:16:28 GMT
Date: Sun, 09 Jul 2023 17:54:31 GMT
Connection: keep-alive
DNS

a19.dscg10.akamai.net

Request

a19.dscg10.akamai.net

IN A

Response

a19.dscg10.akamai.net

IN A

2.18.121.75

a19.dscg10.akamai.net

IN A

2.18.121.68
DNS

redirector.gvt1.com

Request

redirector.gvt1.com

IN A

Response

redirector.gvt1.com

IN A

216.58.208.110
DNS

201.181.244.35.in-addr.arpa

Request

201.181.244.35.in-addr.arpa

IN PTR

Response

201.181.244.35.in-addr.arpa

IN PTR

20118124435bcgoogleusercontentcom
DNS

75.121.18.2.in-addr.arpa

Request

75.121.18.2.in-addr.arpa

IN PTR

Response

75.121.18.2.in-addr.arpa

IN PTR

a2-18-121-75deploystaticakamaitechnologiescom
DNS

redirector.gvt1.com

Request

redirector.gvt1.com

IN A

Response

redirector.gvt1.com

IN A

216.58.208.110
DNS

redirector.gvt1.com

Request

redirector.gvt1.com

IN AAAA

Response

redirector.gvt1.com

IN AAAA

2a00:1450:400e:80e::200e
DNS

r4---sn-5hneknee.gvt1.com

Request

r4---sn-5hneknee.gvt1.com

IN A

Response

r4---sn-5hneknee.gvt1.com

IN CNAME

r4.sn-5hneknee.gvt1.com

r4.sn-5hneknee.gvt1.com

IN A

74.125.8.73
DNS

r4.sn-5hneknee.gvt1.com

Request

r4.sn-5hneknee.gvt1.com

IN A

Response

r4.sn-5hneknee.gvt1.com

IN A

74.125.8.73
DNS

r4.sn-5hneknee.gvt1.com

Request

r4.sn-5hneknee.gvt1.com

IN AAAA

Response

r4.sn-5hneknee.gvt1.com

IN AAAA

2a00:1450:400e:8::9
DNS

110.208.58.216.in-addr.arpa

Request

110.208.58.216.in-addr.arpa

IN PTR

Response

110.208.58.216.in-addr.arpa

IN PTR

sof01s11-in-f1101e100net

110.208.58.216.in-addr.arpa

IN PTR

ams17s08-in-f14�J
DNS

73.8.125.74.in-addr.arpa

Request

73.8.125.74.in-addr.arpa

IN PTR

Response

73.8.125.74.in-addr.arpa

IN PTR

ams17s11-in-f91e100net
DNS

btlr-us-east-1.sharethrough.com

Request

btlr-us-east-1.sharethrough.com

IN AAAA

Response
DNS

rtb.openx.net

Request

rtb.openx.net

IN AAAA

Response
DNS

ads.servenobid.com

Request

ads.servenobid.com

IN AAAA

Response
DNS

ib.adnxs.com

Request

ib.adnxs.com

IN A

Response

ib.adnxs.com

IN CNAME

g.geogslb.com

g.geogslb.com

IN CNAME

ib.anycast.adnxs.com

ib.anycast.adnxs.com

IN A

37.252.171.52

ib.anycast.adnxs.com

IN A

37.252.171.22

ib.anycast.adnxs.com

IN A

37.252.171.85

ib.anycast.adnxs.com

IN A

37.252.171.149

ib.anycast.adnxs.com

IN A

37.252.171.84

ib.anycast.adnxs.com

IN A

37.252.171.53

ib.anycast.adnxs.com

IN A

37.252.172.123

ib.anycast.adnxs.com

IN A

37.252.173.215

ib.anycast.adnxs.com

IN A

37.252.171.21
DNS

htlb.casalemedia.com.cdn.cloudflare.net

Request

htlb.casalemedia.com.cdn.cloudflare.net

IN AAAA

Response
DNS

grid-udp-use.bidswitch.net

Request

grid-udp-use.bidswitch.net

IN AAAA

Response
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=1671a2f8-235d-4134-8c49-fa42dc36af03&l_pb_bid_id=81a73569b97385d8&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=1671a2f8-235d-4134-8c49-fa42dc36af03&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.8837297169424428

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=1671a2f8-235d-4134-8c49-fa42dc36af03&l_pb_bid_id=81a73569b97385d8&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=1671a2f8-235d-4134-8c49-fa42dc36af03&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.8837297169424428 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:34 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQI2EV-I-ET07; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|SDziDG3X/Ei1kQngdDUZ/jQ/3SF9Y/s1KJSne8I4xUnfv6gdR6VUQnajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 549
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=1671a2f8-235d-4134-8c49-fa42dc36af03&l_pb_bid_id=822271313ac7ecc8&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=1671a2f8-235d-4134-8c49-fa42dc36af03&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.7449017004473588

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=1671a2f8-235d-4134-8c49-fa42dc36af03&l_pb_bid_id=822271313ac7ecc8&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=1671a2f8-235d-4134-8c49-fa42dc36af03&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.7449017004473588 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:34 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQI2E2-C-A30K; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|SDziDG3X/EioYdm0Z8Y9+DQ/3SF9Y/s1W7ucW1s9S4Pfv6gdR6VUQnajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 549
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&l_pb_bid_id=9792f5e4d5dc78d&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.5179900459829242

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&l_pb_bid_id=9792f5e4d5dc78d&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.5179900459829242 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:35 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQI2JE-L-1CKW; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|naVuGyos1qr7GU/b8e98mTQ/3SF9Y/s1W7ucW1s9S4Pfv6gdR6VUQnajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 554
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&l_pb_bid_id=9858fa811de29c38&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.8773521729822791

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&l_pb_bid_id=9858fa811de29c38&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.8773521729822791 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:35 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQI2JC-6-3042; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|naVuGyos1qqiETGkzRCbkDQ/3SF9Y/s1KJSne8I4xUnfv6gdR6VUQnajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 554
GET

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&l_pb_bid_id=994e97ff640ff3f&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.17724919280916074

Request

GET /a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&l_pb_bid_id=994e97ff640ff3f&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=36c5b660-6efd-4e06-9522-f80b4194f4e0&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.17724919280916074 HTTP/2.0
host: fastlane.rubiconproject.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: nginx/1.21.4
date: Sun, 09 Jul 2023 17:54:35 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LJVQI2JJ-1B-2KZI; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: audit=1|naVuGyos1qoiChwRqnw3kjQ/3SF9Y/s1KJSne8I4xUnfv6gdR6VUQnajsEabvGdmJhsHlJbldDfEzdQN2gXvhSKPLRELhl3xGLmP30iNJH4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 08-Jul-2024 17:54:34 GMT; Max-Age=31536000; SameSite=None; Secure
content-length: 554
GET

https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22877cb9f274b32ba%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2288313c5e73102dc8%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Farras.io%2F%23wpa&s=12a7dd0e-ba98-413b-9ca3-18b2b9be8522&pv=71d92942-035e-4f2c-88b6-1643747f3f27&vp=desktop&lib_name=prebid&lib_v=7.48.0&us=8&iqid=%7B%22pcid%22%3A%2204c232c9-88b8-43e3-bd5d-d0afee26f0dc%22%2C%22pcidDate%22%3A1688925244182%7D&fpd=%7B%22site%22%3A%7B%22domain%22%3A%22arras.io%22%2C%22publisher%22%3A%7B%22domain%22%3A%22arras.io%22%7D%2C%22page%22%3A%22https%3A%2F%2Farras.io%2F%23wpa%22%2C%22cat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22sectioncat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22pagecat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A595%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22language%22%3A%22en%22%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22playwire.com%22%2C%22sid%22%3A%221024850%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%7D%7D%5D%7D%2C%7B%22source%22%3A%22crwdcntrl.net%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22c9afb21a-e0f7-44b2-9769-36a285835cd3%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0

Request

GET /trinity.json?key_maker=%7B%22877cb9f274b32ba%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2288313c5e73102dc8%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Farras.io%2F%23wpa&s=12a7dd0e-ba98-413b-9ca3-18b2b9be8522&pv=71d92942-035e-4f2c-88b6-1643747f3f27&vp=desktop&lib_name=prebid&lib_v=7.48.0&us=8&iqid=%7B%22pcid%22%3A%2204c232c9-88b8-43e3-bd5d-d0afee26f0dc%22%2C%22pcidDate%22%3A1688925244182%7D&fpd=%7B%22site%22%3A%7B%22domain%22%3A%22arras.io%22%2C%22publisher%22%3A%7B%22domain%22%3A%22arras.io%22%7D%2C%22page%22%3A%22https%3A%2F%2Farras.io%2F%23wpa%22%2C%22cat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22sectioncat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22pagecat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A595%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22language%22%3A%22en%22%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22playwire.com%22%2C%22sid%22%3A%221024850%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%7D%7D%5D%7D%2C%7B%22source%22%3A%22crwdcntrl.net%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22c9afb21a-e0f7-44b2-9769-36a285835cd3%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/2.0
host: apex.go.sonobi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:35 GMT
content-type: application/json
content-length: 30
expires: Sat, 26 Jul 1997 05:00:00 GMT
cache-control: no-cache, no-store, private
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
tcn: Choice
vary: negotiate,Accept-Encoding
x-go-server: go-iad-2-5-70
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
set-cookie: __uis=7f3e8a91-8976-47ed-acde-bb37a69d2208; expires=Tue, 08 Aug 2023 17:54:34 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
set-cookie: _usd_arras.io=71d92942-035e-4f2c-88b6-1643747f3f27; expires=Mon, 10 Jul 2023 17:54:34 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
set-cookie: HAPLB8G=s8570|ZKr0X; path=/; domain=.go.sonobi.com; SameSite=none; Secure
server: sonobi-go
GET

https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22101410399e7310168%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2210207cf36543912e%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%22103d2c81060db0898%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Farras.io%2F%23wpa&s=95cbf772-a82a-4b6a-a966-c8283cce726d&pv=71d92942-035e-4f2c-88b6-1643747f3f27&vp=desktop&lib_name=prebid&lib_v=7.48.0&us=8&iqid=%7B%22pcid%22%3A%2204c232c9-88b8-43e3-bd5d-d0afee26f0dc%22%2C%22pcidDate%22%3A1688925244182%7D&fpd=%7B%22site%22%3A%7B%22domain%22%3A%22arras.io%22%2C%22publisher%22%3A%7B%22domain%22%3A%22arras.io%22%7D%2C%22page%22%3A%22https%3A%2F%2Farras.io%2F%23wpa%22%2C%22cat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22sectioncat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22pagecat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A595%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22language%22%3A%22en%22%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22playwire.com%22%2C%22sid%22%3A%221024850%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%7D%7D%5D%7D%2C%7B%22source%22%3A%22crwdcntrl.net%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22c9afb21a-e0f7-44b2-9769-36a285835cd3%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0

Request

GET /trinity.json?key_maker=%7B%22101410399e7310168%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2210207cf36543912e%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%22103d2c81060db0898%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Farras.io%2F%23wpa&s=95cbf772-a82a-4b6a-a966-c8283cce726d&pv=71d92942-035e-4f2c-88b6-1643747f3f27&vp=desktop&lib_name=prebid&lib_v=7.48.0&us=8&iqid=%7B%22pcid%22%3A%2204c232c9-88b8-43e3-bd5d-d0afee26f0dc%22%2C%22pcidDate%22%3A1688925244182%7D&fpd=%7B%22site%22%3A%7B%22domain%22%3A%22arras.io%22%2C%22publisher%22%3A%7B%22domain%22%3A%22arras.io%22%7D%2C%22page%22%3A%22https%3A%2F%2Farras.io%2F%23wpa%22%2C%22cat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22sectioncat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22pagecat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A595%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22language%22%3A%22en%22%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22playwire.com%22%2C%22sid%22%3A%221024850%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%7D%7D%5D%7D%2C%7B%22source%22%3A%22crwdcntrl.net%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22c9afb21a-e0f7-44b2-9769-36a285835cd3%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/2.0
host: apex.go.sonobi.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: text/plain
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:54:35 GMT
content-type: application/json
content-length: 30
expires: Sat, 26 Jul 1997 05:00:00 GMT
cache-control: no-cache, no-store, private
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
tcn: Choice
vary: negotiate,Accept-Encoding
x-go-server: go-iad-2-5-124
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://arras.io
set-cookie: __uis=7f3e8a91-8976-47ed-acde-bb37a69d2208; expires=Tue, 08 Aug 2023 17:54:34 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
set-cookie: _usd_arras.io=71d92942-035e-4f2c-88b6-1643747f3f27; expires=Mon, 10 Jul 2023 17:54:34 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
set-cookie: HAPLB8G=s85124|ZKr0X; path=/; domain=.go.sonobi.com; SameSite=none; Secure
server: sonobi-go
DNS

eu-tlx.3lift.com

Request

eu-tlx.3lift.com

IN AAAA

Response
DNS

grid.bidswitch.net

Request

grid.bidswitch.net

IN A

Response

grid.bidswitch.net

IN CNAME

grid-udp-use.bidswitch.net

grid-udp-use.bidswitch.net

IN A

35.211.194.207

grid-udp-use.bidswitch.net

IN A

35.211.13.209

grid-udp-use.bidswitch.net

IN A

35.211.127.43

grid-udp-use.bidswitch.net

IN A

35.211.183.189

grid-udp-use.bidswitch.net

IN A

35.211.216.13

grid-udp-use.bidswitch.net

IN A

35.211.214.92

grid-udp-use.bidswitch.net

IN A

35.211.4.184

grid-udp-use.bidswitch.net

IN A

35.211.101.18

grid-udp-use.bidswitch.net

IN A

35.211.126.4

grid-udp-use.bidswitch.net

IN A

35.211.123.232
DNS

13.111.2.8.in-addr.arpa

Request

13.111.2.8.in-addr.arpa

IN PTR

Response
DNS

firefox-settings-attachments.cdn.mozilla.net

Request

firefox-settings-attachments.cdn.mozilla.net

IN A

Response

firefox-settings-attachments.cdn.mozilla.net

IN CNAME

attachments.prod.remote-settings.prod.webservices.mozgcp.net

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.117.121.53
DNS

attachments.prod.remote-settings.prod.webservices.mozgcp.net

Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

Response

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.117.121.53
DNS

attachments.prod.remote-settings.prod.webservices.mozgcp.net

Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

53.121.117.34.in-addr.arpa

Request

53.121.117.34.in-addr.arpa

IN PTR

Response

53.121.117.34.in-addr.arpa

IN PTR

5312111734bcgoogleusercontentcom
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:55:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://cs.iqzone.com/e9d4ff858b5e32317e843f5ed11b2659.gif?puid=u_3d213206-3d08-43fb-b538-25f0596abd43&redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diqz

Request

GET /e9d4ff858b5e32317e843f5ed11b2659.gif?puid=u_3d213206-3d08-43fb-b538-25f0596abd43&redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Diqz HTTP/1.1
Host: cs.iqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2.gumgum.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 204 No Content

Server: nginx
Date: Sun, 09 Jul 2023 17:55:08 GMT
Connection: keep-alive
DNS

216.183.117.104.in-addr.arpa

Request

216.183.117.104.in-addr.arpa

IN PTR

Response

216.183.117.104.in-addr.arpa

IN PTR

a104-117-183-216deploystaticakamaitechnologiescom
DNS

cloudflareinsights.com

Request

cloudflareinsights.com

IN A

Response

cloudflareinsights.com

IN A

104.16.56.101

cloudflareinsights.com

IN A

104.16.57.101
OPTIONS

https://cloudflareinsights.com/cdn-cgi/rum

Request

OPTIONS /cdn-cgi/rum HTTP/2.0
host: cloudflareinsights.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
access-control-request-method: POST
access-control-request-headers: content-type
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:55:08 GMT
content-type: text/plain
access-control-allow-origin: https://arras.io
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7e426fabec0ab8a8-AMS
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
POST

https://cloudflareinsights.com/cdn-cgi/rum

Request

POST /cdn-cgi/rum HTTP/2.0
host: cloudflareinsights.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: application/json
content-length: 62433
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

date: Sun, 09 Jul 2023 17:55:08 GMT
content-type: text/plain
access-control-allow-origin: https://arras.io
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7e426facdd1db8a8-AMS
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
OPTIONS

https://cloudflareinsights.com/cdn-cgi/rum

Request

OPTIONS /cdn-cgi/rum HTTP/2.0
host: cloudflareinsights.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
access-control-request-method: POST
access-control-request-headers: content-type
referer: https://arras.io/
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

date: Sun, 09 Jul 2023 17:55:08 GMT
access-control-allow-origin: https://arras.io
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7e426fac1c3ab8a8-AMS
x-frame-options: DENY
x-content-type-options: nosniff
POST

https://cloudflareinsights.com/cdn-cgi/rum

Request

POST /cdn-cgi/rum HTTP/2.0
host: cloudflareinsights.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://arras.io/
content-type: application/json
content-length: 9044
origin: https://arras.io
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 204

date: Sun, 09 Jul 2023 17:55:08 GMT
access-control-allow-origin: https://arras.io
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7e426fad0d54b8a8-AMS
x-frame-options: DENY
x-content-type-options: nosniff
DNS

cloudflareinsights.com

Request

cloudflareinsights.com

IN A

Response

cloudflareinsights.com

IN A

104.16.57.101

cloudflareinsights.com

IN A

104.16.56.101
DNS

cloudflareinsights.com

Request

cloudflareinsights.com

IN AAAA

Response

cloudflareinsights.com

IN AAAA

2606:4700::6810:3965

cloudflareinsights.com

IN AAAA

2606:4700::6810:3865
DNS

120.208.253.8.in-addr.arpa

Request

120.208.253.8.in-addr.arpa

IN PTR

Response
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:55:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:56:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

136.71.105.51.in-addr.arpa

Request

136.71.105.51.in-addr.arpa

IN PTR

Response
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:56:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:57:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

prod.remote-settings.prod.webservices.mozgcp.net

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN A

Response

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
DNS

prod.remote-settings.prod.webservices.mozgcp.net

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

content-signature-2.cdn.mozilla.net

Request

content-signature-2.cdn.mozilla.net

IN A

Response

content-signature-2.cdn.mozilla.net

IN CNAME

content-signature-chains.prod.autograph.services.mozaws.net

content-signature-chains.prod.autograph.services.mozaws.net

IN CNAME

prod.content-signature-chains.prod.webservices.mozgcp.net

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

2600:1901:0:92a9::
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:57:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:58:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:58:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

contile.services.mozilla.com

Request

contile.services.mozilla.com

IN A

Response

contile.services.mozilla.com

IN A

34.117.237.239
DNS

contile.services.mozilla.com

Request

contile.services.mozilla.com

IN AAAA

Response
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:59:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN A

Response

hq3p9viv64d0js08.uvwx.xyz

IN A

213.239.205.204
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 17:59:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

Response

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

2a01:4f8:222:1098::2
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:00:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:00:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:01:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:01:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:02:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

aus5.mozilla.org

Request

aus5.mozilla.org

IN A

Response

aus5.mozilla.org

IN CNAME

balrog-aus5.r53-2.services.mozilla.com

balrog-aus5.r53-2.services.mozilla.com

IN CNAME

prod.balrog.prod.cloudops.mozgcp.net

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

prod.balrog.prod.cloudops.mozgcp.net

Request

prod.balrog.prod.cloudops.mozgcp.net

IN A

Response

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

prod.balrog.prod.cloudops.mozgcp.net

Request

prod.balrog.prod.cloudops.mozgcp.net

IN AAAA

Response
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:02:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:03:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:03:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:04:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN A

Response

hq3p9viv64d0js08.uvwx.xyz

IN A

213.239.205.204
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:04:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

Response

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

2a01:4f8:222:1098::2
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:05:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:05:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:06:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:06:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:07:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:07:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:08:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

tpsc-ew1.doubleverify.com

Request

tpsc-ew1.doubleverify.com

IN A

Response

tpsc-ew1.doubleverify.com

IN A

130.211.44.5
DNS

tpsc-ew1.doubleverify.com

Request

tpsc-ew1.doubleverify.com

IN A

Response

tpsc-ew1.doubleverify.com

IN A

130.211.44.5
DNS

tpsc-ew1.doubleverify.com

Request

tpsc-ew1.doubleverify.com

IN AAAA

Response
POST

https://tpsc-ew1.doubleverify.com/event.png?impid=160711c0e4a54ad08cf1473fb587c7f3&flavor=0&gdpr=&gdpr_consent=&isbxdms=840021&b11=840018&lftb=840118&sftb=840118&dvp_unl=840101&tuums=840101&dvp_noEng=true&eoid=16&tmet=840105&cbust=1688926093821272

Request

POST /event.png?impid=160711c0e4a54ad08cf1473fb587c7f3&flavor=0&gdpr=&gdpr_consent=&isbxdms=840021&b11=840018&lftb=840118&sftb=840118&dvp_unl=840101&tuums=840101&dvp_noEng=true&eoid=16&tmet=840105&cbust=1688926093821272 HTTP/1.1
Host: tpsc-ew1.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

Response

HTTP/1.1 204 No Content

Date: Sun, 09 Jul 2023 18:08:15 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: max-age=0
Expires: 07/08/2023 18:08:15
Pragma: no-cache
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:08:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:09:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN A

Response

hq3p9viv64d0js08.uvwx.xyz

IN A

213.239.205.204
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:09:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

Response

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

2a01:4f8:222:1098::2
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:10:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:10:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:11:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:11:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:12:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:12:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:13:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:13:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

contile.services.mozilla.com

Request

contile.services.mozilla.com

IN A

Response

contile.services.mozilla.com

IN A

34.117.237.239
GET

https://contile.services.mozilla.com/v1/tiles

Request

GET /v1/tiles HTTP/2.0
host: contile.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
DNS

contile.services.mozilla.com

Request

contile.services.mozilla.com

IN AAAA

Response
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:14:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN A

Response

hq3p9viv64d0js08.uvwx.xyz

IN A

213.239.205.204
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

Response

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

2a01:4f8:222:1098::2
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:14:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:15:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:15:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:16:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:16:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:17:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:17:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:18:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN A

Response

hq3p9viv64d0js08.uvwx.xyz

IN A

213.239.205.204
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:18:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:19:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:19:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

Response

hq3p9viv64d0js08.uvwx.xyz

IN AAAA

2a01:4f8:222:1098::2
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:20:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:20:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:21:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:21:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:22:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:22:30 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:23:00 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
DNS

hq3p9viv64d0js08.uvwx.xyz

Request

hq3p9viv64d0js08.uvwx.xyz

IN A

Response

hq3p9viv64d0js08.uvwx.xyz

IN A

213.239.205.204
GET

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

Request

GET /clientCount HTTP/1.1
Host: hq3p9viv64d0js08.uvwx.xyz:2222
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arras.io/
Origin: https://arras.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 09 Jul 2023 18:23:31 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked

127.0.0.1:51221

firefox.exe
52.39.153.93:443

shavar.services.mozilla.com

tls

firefox.exe

2.2kB
4.2kB
10
11
34.160.144.191:443

content-signature-2.cdn.mozilla.net

tls

firefox.exe

3.0kB
18.2kB
31
37
188.114.97.0:80

http://arras.io/

http

firefox.exe

1.1kB
1.4kB
17
15

HTTP Request

GET http://arras.io/

HTTP Response

301
188.114.97.0:80

arras.io

firefox.exe

190 B
92 B
4
2
34.149.100.209:443

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/personality-provider-models/changeset?_expected=1581703205374

tls, http2

firefox.exe

20.4kB
1.2MB
300
1013

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?collection=partitioning-exempt-urls&bucket=main&_expected=0

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1688730865816

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221688914634637%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1683667257606

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-telemetry-v2/changeset?_expected=1684879440536&_since=%221661199890666%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1687526306160&_since=%221661199949574%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/addons-manager-settings/changeset?_expected=1688747728721

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1688601670625

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/devtools-compatibility-browsers/changeset?_expected=1687359575566&_since=%221662648201700%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/sites-classification?_expected=1544035467383

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/anti-tracking-url-decoration?_expected=1564511755134

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/public-suffix-list/changeset?_expected=1575468539758

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-default-override-allowlist?_expected=1595254618540

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/url-classifier-skip-urls?_expected=1606870304609

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/pioneer-study-addons-v1/changeset?_expected=1607042143590

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/top-sites?_expected=1647020600359

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/doh-providers/changeset?_expected=1647549722107&_since=%221621943542621%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/doh-config/changeset?_expected=1651753780606&_since=%221621943462970%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/devtools-devices?_expected=1653469171354

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/websites-with-shared-credential-backends?_expected=1659924446436

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/cert-revocations/changeset?_expected=1688914634637

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/onecrl/changeset?_expected=1687555476962&_since=%221658781354245%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/intermediates/changeset?_expected=1688741823367&_since=%221664891823141%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?collection=personality-provider-recipe&bucket=main&_expected=0

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/personality-provider-recipe/changeset?_expected=1603308987530

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?collection=personality-provider-models&bucket=main&_expected=0

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/personality-provider-models/changeset?_expected=1581703205374
34.117.237.239:443

https://contile.services.mozilla.com/v1/tiles

tls, http2

firefox.exe

2.0kB
8.0kB
19
20

HTTP Request

GET https://contile.services.mozilla.com/v1/tiles
34.120.5.221:443

https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=IE&count=30

tls, http2

firefox.exe

2.2kB
51.9kB
22
51

HTTP Request

GET https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=IE&count=30
188.114.97.0:443

https://arras.io/

tls, http2

firefox.exe

1.8kB
11.2kB
14
18

HTTP Request

GET https://arras.io/

HTTP Response

200
34.117.65.55:443

https://push.services.mozilla.com/

tls, http

firefox.exe

2.2kB
6.5kB
15
22

HTTP Request

GET https://push.services.mozilla.com/

HTTP Response

101
104.16.56.101:443

https://static.cloudflareinsights.com/beacon.min.js

tls, http2

firefox.exe

2.0kB
11.6kB
19
21

HTTP Request

GET https://static.cloudflareinsights.com/beacon.min.js

HTTP Response

200
34.149.100.209:443

firefox.settings.services.mozilla.com

tls

firefox.exe

1.1kB
5.3kB
12
11
18.244.114.94:443

https://cdn.intergient.com/pageos/1.10.5/123.33e3c958423cc2b09f2d.js

tls, http2

firefox.exe

4.5kB
274.7kB
54
216

HTTP Request

GET https://cdn.intergient.com/1024850/73985/ramp.js

HTTP Response

200

HTTP Request

GET https://cdn.intergient.com/ramp_core.js

HTTP Response

200

HTTP Request

GET https://cdn.intergient.com/pageos/1.10.5/videoCard.01fa78e7064a386f48fc.js

HTTP Request

GET https://cdn.intergient.com/pageos/1.10.5/batchHandler.77ab1dc43eac56199813.js

HTTP Request

GET https://cdn.intergient.com/pageos/1.10.5/iframe/iframe.html

HTTP Request

GET https://cdn.intergient.com/pageos/1.10.5/nielsen.b850d86715bcafaea630.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://cdn.intergient.com/pageos/js/libs/aws-sdk-kinesis.min.js.br

HTTP Response

200

HTTP Request

GET https://cdn.intergient.com/pageos/1.10.5/iframe/iframe.js

HTTP Response

200

HTTP Request

GET https://cdn.intergient.com/pageos/1.10.5/595.6fce560e7fa7815d2879.js

HTTP Request

GET https://cdn.intergient.com/pageos/1.10.5/123.33e3c958423cc2b09f2d.js

HTTP Response

200

HTTP Response

200
213.239.205.204:2222

https://hq3p9viv64d0js08.uvwx.xyz:2222/status

tls, http

firefox.exe

1.6kB
27.5kB
13
28

HTTP Request

GET https://hq3p9viv64d0js08.uvwx.xyz:2222/status

HTTP Response

200
213.239.205.204:2222

https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

tls, http

firefox.exe

1.5kB
6.8kB
11
13

HTTP Request

GET https://hq3p9viv64d0js08.uvwx.xyz:2222/clientCount

HTTP Response

200
216.239.34.181:443

https://analytics.google.com/g/collect?v=2&tid=G-W3P0GBKCSY&gtm=45je3750&_p=76235047&_gaz=1&cid=1670545225.1688925239&ul=en-us&sr=1280x720&_s=1&sid=1688925239&sct=1&seg=0&dl=https%3A%2F%2Farras.io%2F&dt=arras.io&en=page_view&_fv=1&_nsi=1&_ss=1

tls, http2

firefox.exe

2.0kB
8.4kB
16
16

HTTP Request

POST https://analytics.google.com/g/collect?v=2&tid=G-W3P0GBKCSY&gtm=45je3750&_p=76235047&_gaz=1&cid=1670545225.1688925239&ul=en-us&sr=1280x720&_s=1&sid=1688925239&sct=1&seg=0&dl=https%3A%2F%2Farras.io%2F&dt=arras.io&en=page_view&_fv=1&_nsi=1&_ss=1
172.217.23.194:443

https://securepubads.g.doubleclick.net/tag/js/gpt.js

tls, http2

firefox.exe

2.0kB
34.0kB
20
37

HTTP Request

GET https://securepubads.g.doubleclick.net/tag/js/gpt.js
52.222.139.99:443

https://cdn.intergi.com/hera/releases/4.6.29/adReport/close-button.svg

tls, http2

firefox.exe

5.5kB
192.4kB
72
154

HTTP Request

GET https://cdn.intergi.com/prebid/prebid.js.br

HTTP Response

200

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/tyche.js

HTTP Response

200

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/runtime.3883c5c32acc801e3ca2.js

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/vendor/npm.core-js.9ecd3933ce7c5b26ca2f.js

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/vendor/npm.lodash.39a04a8f1c96ade254ee.js

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/vendor/npm.babel.816b6b897780bce545f1.js

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/vendor/npm.intersection-observer.312f6562336e9769b3ec.js

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/635.c6832658487cc1354cf2.js

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/main.22a75cb4bb0217ed9b2f.js

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/lib/lib.37dee626aab965fa63d6.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/adReport/form.css

HTTP Response

200

HTTP Request

GET https://cdn.intergi.com/hera/releases/4.6.29/adReport/close-button.svg

HTTP Response

200
216.146.25.48:2002

analytics-server.arras.cx

tls

firefox.exe

1.1kB
6.4kB
11
10
216.146.25.48:2002

https://analytics-server.arras.cx:2002/data

tls, http

firefox.exe

2.3kB
7.2kB
12
13

HTTP Request

OPTIONS https://analytics-server.arras.cx:2002/data

HTTP Response

200

HTTP Request

POST https://analytics-server.arras.cx:2002/data

HTTP Response

200
142.250.102.156:443

https://stats.g.doubleclick.net/g/collect?v=2&tid=G-W3P0GBKCSY&cid=1670545225.1688925239&gtm=45je3750&aip=1

tls, http2

firefox.exe

1.9kB
6.1kB
15
15

HTTP Request

POST https://stats.g.doubleclick.net/g/collect?v=2&tid=G-W3P0GBKCSY&cid=1670545225.1688925239&gtm=45je3750&aip=1
104.26.6.139:443

https://btloader.com/tag?o=5150306120761344&upapi=true

tls, http2

firefox.exe

2.0kB
18.2kB
19
27

HTTP Request

GET https://btloader.com/tag?o=5150306120761344&upapi=true

HTTP Response

200
52.222.139.48:443

https://impression-inferences-edge-prod.playwire.com/websites/73985/v1/Sun/13/desktop/Firefox/USA

tls, http2

firefox.exe

2.0kB
8.1kB
18
22

HTTP Request

GET https://impression-inferences-edge-prod.playwire.com/websites/73985/v1/Sun/13/desktop/Firefox/USA

HTTP Response

200
52.222.139.35:443

https://tags.crwdcntrl.net/lt/c/16576/sync.min.js

tls, http2

firefox.exe

2.7kB
44.3kB
31
47

HTTP Request

GET https://tags.crwdcntrl.net/lt/c/17138/sync.min.js

HTTP Response

200

HTTP Request

GET https://tags.crwdcntrl.net/lt/c/16589/sync.min.js

HTTP Response

200

HTTP Request

GET https://tags.crwdcntrl.net/lt/c/16576/sync.min.js

HTTP Response

200
184.30.25.161:443

https://z.moatads.com/playwireprebidheader597261727146/moatheader.js

tls, http2

firefox.exe

2.4kB
50.7kB
27
55

HTTP Request

GET https://z.moatads.com/playwireprebidheader597261727146/moatheader.js

HTTP Response

200
104.26.2.70:443

https://ad-delivery.net/px.gif?ch=1&e=0.13321127797496923

tls, http2

firefox.exe

2.1kB
5.6kB
19
17

HTTP Request

GET https://ad-delivery.net/px.gif?ch=2

HTTP Request

GET https://ad-delivery.net/px.gif?ch=1&e=0.13321127797496923

HTTP Response

200

HTTP Response

200
104.26.2.70:443

ad-delivery.net

tls, http2

firefox.exe

1.2kB
3.8kB
10
8
130.211.23.194:443

https://api.btloader.com/pv?tid=vd3u5Byu&w=5204565961474048&o=5150306120761344&cv=2.1.13-15-g6498499&r=false&vr=1280x595&pageURL=https%3A%2F%2Farras.io%2F%23wpa&sid=CGFrRHHp6&upapi=true

tls, http2

firefox.exe

2.3kB
6.6kB
19
22

HTTP Request

GET https://api.btloader.com/mw/state?bt_env=prod

HTTP Request

GET https://api.btloader.com/country

HTTP Request

GET https://api.btloader.com/pv?tid=vd3u5Byu&w=5204565961474048&o=5150306120761344&cv=2.1.13-15-g6498499&r=false&vr=1280x595&pageURL=https%3A%2F%2Farras.io%2F%23wpa&sid=CGFrRHHp6&upapi=true
142.250.179.206:443

https://fundingchoicesmessages.google.com/i/154013155?ers=3

tls, http2

firefox.exe

2.3kB
61.7kB
25
52

HTTP Request

GET https://fundingchoicesmessages.google.com/i/154013155?ers=3
108.156.60.40:443

https://config.playwire.com/audience_segments/config.json

tls, http2

firefox.exe

2.1kB
46.4kB
21
45

HTTP Request

GET https://config.playwire.com/audience_segments/config.json

HTTP Response

200
54.88.198.127:443

bcp.crwdcntrl.net

tls

firefox.exe

2.9kB
9.1kB
24
27
3.231.46.127:443

mb.moatads.com

tls

firefox.exe

3.1kB
5.2kB
19
21
35.190.60.146:443

https://idsync.rlcdn.com/712453.gif?partner_uid=user_e7ba86a8-edbb-49b6-9980-e6e2ca177528_1688925241683

tls, http2

firefox.exe

1.8kB
8.0kB
15
17

HTTP Request

GET https://idsync.rlcdn.com/712453.gif?partner_uid=user_e7ba86a8-edbb-49b6-9980-e6e2ca177528_1688925241683
3.232.64.79:443

ps.eyeota.net

tls

firefox.exe

2.2kB
6.9kB
13
13
34.102.146.192:443

https://oa.openxcdn.net/esp.js

tls, http2

firefox.exe

1.8kB
14.7kB
16
19

HTTP Request

GET https://oa.openxcdn.net/esp.js
151.101.1.229:443

https://cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js

tls, http2

firefox.exe

1.7kB
6.7kB
13
17

HTTP Request

GET https://cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js

HTTP Response

200
54.159.116.102:443

fingerprinter-production.herokuapp.com

tls

firefox.exe

2.6kB
7.5kB
21
25
178.250.1.3:443

https://static.criteo.net/js/ld/publishertag.ids.js

tls, http2

firefox.exe

1.9kB
18.6kB
18
25

HTTP Request

GET https://static.criteo.net/js/ld/publishertag.ids.js

HTTP Response

200
34.96.70.87:443

https://invstatic101.creativecdn.com/encrypted-signals/encrypted-tag-g.js

tls, http2

firefox.exe

1.8kB
7.6kB
15
15

HTTP Request

GET https://invstatic101.creativecdn.com/encrypted-signals/encrypted-tag-g.js
104.22.53.86:443

https://cdn.id5-sync.com/api/1.0/id5-api.js

tls, http2

firefox.exe

2.4kB
57.7kB
26
57

HTTP Request

GET https://cdn.id5-sync.com/api/1.0/esp.js

HTTP Response

200

HTTP Request

GET https://cdn.id5-sync.com/api/1.0/id5-api.js

HTTP Response

200
172.64.152.222:443

https://cdn-ima.33across.com/ob.js

tls, http2

firefox.exe

2.1kB
11.7kB
21
22

HTTP Request

GET https://cdn-ima.33across.com/ob.js

HTTP Response

200
34.120.135.53:443

https://oajs.openx.net/esp?url=https%3A%2F%2Farras.io%2F%23wpa&rid=esp

tls, http2

firefox.exe

1.9kB
5.6kB
16
18

HTTP Request

GET https://oajs.openx.net/esp?url=https%3A%2F%2Farras.io%2F%23wpa&rid=esp
141.95.98.64:443

https://id5-sync.com/api/config/prebid

tls, http

firefox.exe

1.6kB
5.5kB
10
14

HTTP Request

POST https://id5-sync.com/api/config/prebid

HTTP Response

200
141.95.98.64:443

https://id5-sync.com/api/esp/increment?counter=no-config

tls, http

firefox.exe

1.6kB
5.2kB
12
13

HTTP Request

GET https://id5-sync.com/api/esp/increment?counter=no-config

HTTP Response

204
44.205.30.65:443

id.crwdcntrl.net

tls

firefox.exe

1.4kB
6.3kB
11
14
34.160.46.1:443

https://fid.agkn.com/f?apiKey=2104320612&r=https%3A%2F%2Farras.io%2F%23wpa&r=https%3A%2F%2Farras.io%2F

tls, http2

firefox.exe

1.8kB
5.4kB
14
13

HTTP Request

GET https://fid.agkn.com/f?apiKey=2104320612&r=https%3A%2F%2Farras.io%2F%23wpa&r=https%3A%2F%2Farras.io%2F
178.250.1.11:443

https://gum.criteo.com/sid/json?origin=publishertagids&domain=arras.io&sn=FirefoxSyncframe&so=0&topUrl=arras.io&info=MoOTUl9zTGl3akxkdkZrJTJCa0NRQkdCUnJvazBjdzlVZ2tabnJPaFRCdGMyZW14VFV3cmx0c2trTldIREdxVFA0WE9STGg3MEZQSnpjVjNUVCUyRkRhVzFGOW4wV2clM0QlM0Q&idsd=30163740,63718978&cw=1&lsw=1

tls, http2

firefox.exe

2.3kB
11.0kB
16
21

HTTP Request

GET https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=arras.io&gdpr=0&gdpr_consent=

HTTP Response

200

HTTP Request

GET https://gum.criteo.com/sid/json?origin=publishertagids&domain=arras.io&sn=FirefoxSyncframe&so=0&topUrl=arras.io&info=MoOTUl9zTGl3akxkdkZrJTJCa0NRQkdCUnJvazBjdzlVZ2tabnJPaFRCdGMyZW14VFV3cmx0c2trTldIREdxVFA0WE9STGg3MEZQSnpjVjNUVCUyRkRhVzFGOW4wV2clM0QlM0Q&idsd=30163740,63718978&cw=1&lsw=1

HTTP Response

200
35.190.39.111:443

esp.rtbhouse.com

tls, http2

firefox.exe

1.2kB
5.7kB
10
9
35.190.39.111:443

https://esp.rtbhouse.com/encrypt

tls, http2

firefox.exe

2.6kB
7.2kB
23
25

HTTP Request

OPTIONS https://esp.rtbhouse.com/encrypt

HTTP Request

POST https://esp.rtbhouse.com/encrypt
107.178.254.65:443

https://pippio.com/api/sync?pid=5324&_=2

tls, http2

firefox.exe

1.8kB
6.5kB
14
15

HTTP Request

GET https://pippio.com/api/sync?pid=5324&_=2
74.119.119.139:443

https://dnacdn.net/dna

tls, http2

firefox.exe

1.9kB
5.9kB
15
16

HTTP Request

GET https://dnacdn.net/dna

HTTP Response

200

HTTP Request

GET https://dnacdn.net/dna

HTTP Response

200
185.235.85.124:443

https://ag.gbc.criteo.com/newidsd

tls, http2

firefox.exe

1.7kB
5.0kB
14
15

HTTP Request

GET https://ag.gbc.criteo.com/newidsd

HTTP Response

200
185.235.85.126:443

https://gem.gbc.criteo.com/newidsd

tls, http2

firefox.exe

1.7kB
4.9kB
14
14

HTTP Request

GET https://gem.gbc.criteo.com/newidsd

HTTP Response

200
34.98.64.218:443

https://google-bidout-d.openx.net/w/1.0/pd?cc=1&plm=5

tls, http2

firefox.exe

2.0kB
5.5kB
16
18

HTTP Request

GET https://google-bidout-d.openx.net/w/1.0/pd?plm=5

HTTP Request

GET https://google-bidout-d.openx.net/w/1.0/pd?cc=1&plm=5
162.19.138.82:443

https://lb.eu-1-id5-sync.com/lb/v1

tls, http

firefox.exe

2.0kB
6.2kB
13
16

HTTP Request

GET https://lb.eu-1-id5-sync.com/lb/v1

HTTP Response

200

HTTP Request

GET https://lb.eu-1-id5-sync.com/lb/v1

HTTP Response

200
52.222.136.109:443

https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Farras.io&pubid=bd056b42-51db-43ce-9a8e-3b11319b5d1f

tls, http2

firefox.exe

2.5kB
71.1kB
26
67

HTTP Request

GET https://c.amazon-adsystem.com/aax2/apstag.js

HTTP Response

200

HTTP Request

GET https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Farras.io&pubid=bd056b42-51db-43ce-9a8e-3b11319b5d1f

HTTP Response

200
141.95.98.64:443

https://id5-sync.com/c/483/0/8/1.gif?gdpr=0&gdpr_consent=&us_privacy=

tls, http

firefox.exe

4.0kB
10.3kB
16
19

HTTP Request

POST https://id5-sync.com/g/v2/483.json

HTTP Response

200

HTTP Request

POST https://id5-sync.com/g/v2/483.json

HTTP Response

200

HTTP Request

GET https://id5-sync.com/i/483/8.gif?id5id=ID5*q1S87KjFBWCLsnrKzws5-8ZReN5_eESJNbCDtenJFE1UXWGFAT7Zo3ktD5vpfKXvVF7OM02ax-i4oA3xmxJg6w&o=api&gdpr_consent=undefined&gdpr=false

HTTP Response

302

HTTP Request

GET https://id5-sync.com/c/483/0/8/1.gif?gdpr=0&gdpr_consent=&us_privacy=

HTTP Response

200
172.217.168.226:443

https://cm.g.doubleclick.net/pixel?google_nid=pippio_dmp&google_cm&google_no_sc&m=CMwpGgwIvOirpQYSBAgCEABCAEoA

tls, http2

firefox.exe

1.8kB
6.5kB
14
16

HTTP Request

GET https://cm.g.doubleclick.net/pixel?google_nid=pippio_dmp&google_cm&google_no_sc&m=CMwpGgwIvOirpQYSBAgCEABCAEoA
52.222.136.109:443

https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js

tls, http2

firefox.exe

2.0kB
10.5kB
18
24

HTTP Request

GET https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js

HTTP Response

200
52.29.80.116:443

tlx.3lift.com

tls

firefox.exe

17.5kB
8.3kB
37
33
104.26.8.169:443

https://script.4dex.io/localstore.js

tls, http

firefox.exe

1.9kB
5.4kB
21
22

HTTP Request

GET https://script.4dex.io/localstore.js

HTTP Response

200
69.166.1.8:443

https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22759973c5e5542a%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2280bfb6fd6d9ea78%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2298586b12452d1c%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2210952a45915fe74%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2211a1d6056924a698%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Farras.io%2F%23wpa&s=8c9871a0-370a-4047-b34e-b09f88a1c440&pv=71d92942-035e-4f2c-88b6-1643747f3f27&vp=desktop&lib_name=prebid&lib_v=7.48.0&us=8&iqid=%7B%22pcid%22%3A%2204c232c9-88b8-43e3-bd5d-d0afee26f0dc%22%2C%22pcidDate%22%3A1688925244182%7D&fpd=%7B%22site%22%3A%7B%22domain%22%3A%22arras.io%22%2C%22publisher%22%3A%7B%22domain%22%3A%22arras.io%22%7D%2C%22page%22%3A%22https%3A%2F%2Farras.io%2F%23wpa%22%2C%22cat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22sectioncat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22pagecat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A595%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22language%22%3A%22en%22%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22playwire.com%22%2C%22sid%22%3A%221024850%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%7D%7D%5D%7D%2C%7B%22source%22%3A%22crwdcntrl.net%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22c9afb21a-e0f7-44b2-9769-36a285835cd3%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0

tls, http2

firefox.exe

6.0kB
7.6kB
18
20

HTTP Request

GET https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22759973c5e5542a%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2280bfb6fd6d9ea78%22%3A%2265e3bee9061a36df3297%7C300x250%2C320x50%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle%2Cc%3Dd%2C%22%2C%2298586b12452d1c%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2210952a45915fe74%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%2C%2211a1d6056924a698%22%3A%2265e3bee9061a36df3297%7C728x90%2C970x250%2C970x90%7Cgpid%3D%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Farras.io%2F%23wpa&s=8c9871a0-370a-4047-b34e-b09f88a1c440&pv=71d92942-035e-4f2c-88b6-1643747f3f27&vp=desktop&lib_name=prebid&lib_v=7.48.0&us=8&iqid=%7B%22pcid%22%3A%2204c232c9-88b8-43e3-bd5d-d0afee26f0dc%22%2C%22pcidDate%22%3A1688925244182%7D&fpd=%7B%22site%22%3A%7B%22domain%22%3A%22arras.io%22%2C%22publisher%22%3A%7B%22domain%22%3A%22arras.io%22%7D%2C%22page%22%3A%22https%3A%2F%2Farras.io%2F%23wpa%22%2C%22cat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22sectioncat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%2C%22pagecat%22%3A%5B%22IAB9-5%22%2C%22IAB693%22%2C%22IAB9-30%22%2C%22IAB680%22%5D%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A595%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22language%22%3A%22en%22%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22playwire.com%22%2C%22sid%22%3A%221024850%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%7D%7D%5D%7D%2C%7B%22source%22%3A%22crwdcntrl.net%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22c9afb21a-e0f7-44b2-9769-36a285835cd3%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0

HTTP Response

200
213.19.162.31:443

https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=175fcc2bcec54288&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.7636574116217834

tls, http2

firefox.exe

6.5kB
10.6kB
24
39

HTTP Request

GET https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&l_pb_bid_id=135e4e9a3d906de8&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.26431674626004475

HTTP Request

GET https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=15&alt_size_ids=43&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&tk_flint=pbjs_lite_v7.48.0&x_source.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&l_pb_bid_id=14049f33d100c34&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=9cf024b2-cf8f-4340-8859-4945b53fac64&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-medium_rectangle&slots=1&rand=0.5916555394002331

HTTP Request

GET https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=16999f29023a7c1&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.4521558224669091

HTTP Request

GET https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=1586f0ca8d60b548&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.6471078634618103

HTTP Request

GET https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=12556&site_id=365336&zone_id=2122004&size_id=2&alt_size_ids=55%2C57&rp_schain=1.0,1!playwire.com,1024850,1,,,&eid_id5-sync.com=ID5*cuSHKOWGGvvk0gftNhU50J941tpflSFwXxm-thXn47lUXfKc4RQHeoIP6qimjEy5VF7sujEzqXBBDcqCUMWLXw%5E1%5E&eid_crwdcntrl.net=649f4bd96abb806408d33a5ca2bd16d53938ab32eec189ea4fed2aa0ffce9cf9%5E1&eid_pubcid.org=c9afb21a-e0f7-44b2-9769-36a285835cd3%5E1&rf=https%3A%2F%2Farras.io%2F%23wpa&tg_i.domain=arras.io&tg_i.page=https%3A%2F%2Farras.io%2F%23wpa&tg_i.cat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.sectioncat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pagecat=IAB9-5%2CIAB693%2CIAB9-30%2CIAB680&tg_i.pbadslot=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&tk_flint=pbjs_lite_v7.48.0&x_source.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&l_pb_bid_id=175fcc2bcec54288&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=13f3d6f3-a7a8-48e4-92a4-62d135a6f2d7&rp_maxbids=1&p_gpid=%2F154013155%2C22871228036%2F1024850%2F73985%2Fpublisher%3A1024850-website%3A73985-desktop_leaderboard&slots=1&rand=0.7636574116217834

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200
213.19.162.31:443

fastlane.rubiconproject.com

tls, http2

firefox.exe

1.3kB
5.0kB
12
18
213.19.162.31:443

fastlane.rubiconproject.com

tls, http2

firefox.exe

1.3kB
5.0kB
12
18
213.19.162.31:443

fastlane.rubiconproject.com

tls, http2

firefox.exe

1.5kB
5.0kB
16
18
213.19.162.31:443

fastlane.rubiconproject.com

tls, http2

firefox.exe

1.3kB
5.0kB
12
19
104.18.2.114:443

https://mp.4dex.io/prebid

tls, http2

firefox.exe

30.3kB
6.1kB
37
24

HTTP Request

POST https://mp.4dex.io/prebid

HTTP Response

200
104.18.25.185:443

https://htlb.casalemedia.com/openrtb/pbjs?s=633335

tls, http2

firefox.exe

6.9kB
4.7kB
16
15

HTTP Request

POST https://htlb.casalemedia.com/openrtb/pbjs?s=633335

HTTP Response

200
34.235.214.237:443

https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

tls, http2

firefox.exe

16.9kB
6.1kB
41
31

HTTP Request

POST https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

HTTP Request

POST https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

HTTP Request

POST https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

HTTP Request

POST https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

HTTP Response

204

HTTP Response

204

HTTP Response

204

HTTP Response

204

HTTP Request

POST https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

HTTP Request

POST https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

HTTP Response

204

HTTP Response

204

HTTP Request

POST https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

HTTP Request

POST https://btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1

HTTP Response

204

HTTP Response

204
34.235.214.237:443

btlr.sharethrough.com

tls, http2

firefox.exe

1.2kB
4.6kB
10
10
34.235.214.237:443

btlr.sharethrough.com

tls, http2

firefox.exe

1.3kB
4.6kB
11
10
34.235.214.237:443

btlr.sharethrough.com

tls, http2

firefox.exe

1.2kB
4.6kB
10
9
37.252.171.52:443

ib.adnxs.com

tls

firefox.exe

9.9kB
15.5kB
42
39
35.227.252.103:443

https://rtb.openx.net/openrtbb/prebidjs

tls, http2

firefox.exe

9.6kB
5.5kB
20
22

HTTP Request

POST https://rtb.openx.net/openrtbb/prebidjs
3.139.163.229:443

ads.servenobid.com

tls

firefox.exe

10.3kB
16.4kB
54
46
35.211.82.127:443

grid.bidswitch.net

tls

firefox.exe

14.2kB
7.7kB
29
28
104.26.8.169:443

https://script.4dex.io/adagio.js

tls, http

firefox.exe

2.1kB
29.6kB
24
43

HTTP Request

GET https://script.4dex.io/adagio.js

HTTP Response

200
184.30.24.198:443

ads.pubmatic.com

tls

firefox.exe

2.8kB
23.8kB
23
38
95.100.135.152:443

https://assets.msn.com/serviceak/v1/news/Feed/Windows?apikey=qrUeHGGYvVowZJuHA3XaH0uUvg1ZJ0GUZnXk3mxxPF&activityId=8751f7f8-9fb4-465a-aec7-abae11a15ae6&ocid=windows-windowsShell-feeds&user=m-0929d3a238cc47ce8673f69c6eefd7d2&Treatment=T6&MaximumDimensions=660x640&experience=Taskbar&AppVersion=1&osLocale=en-US&caller=bgtask

tls, http2

2.3kB
10.7kB
14
19

HTTP Request

GET https://assets.msn.com/serviceak/v1/news/Feed/Windows?apikey=qrUeHGGYvVowZJuHA3XaH0uUvg1ZJ0GUZnXk3mxxPF&activityId=8751f7f8-9fb4-465a-aec7-abae11a15ae6&ocid=windows-windowsShell-feeds&user=m-0929d3a238cc47ce8673f69c6eefd7d2&Treatment=T6&MaximumDimensions=660x640&experience=Taskbar&AppVersion=1&osLocale=en-US&caller=bgtask

HTTP Response

200
185.64.190.78:443

https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB

tls, http2

firefox.exe

2.1kB
5.9kB
20
22

HTTP Request

GET https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB

HTTP Response

200
23.39.253.208:443

secure.cdn.fastclick.net

tls, http2

firefox.exe

1.4kB
5.0kB
14
14
23.39.253.208:443

https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js

tls, http2

firefox.exe

3.3kB
108.8kB
40
99

HTTP Request

GET https://secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js

HTTP Request

GET https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher-stub.min.js

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher.min.js

HTTP Response

200

HTTP Request

GET https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js

HTTP Response

200
185.64.190.81:443

https://simage4.pubmatic.com/AdServer/SPug?o=1&p=162412&sc=1&pr=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D316%26uid%3DPM_UID&umc=PM_UID&u=A49D0C01-3DA4-4D4C-B1CE-35CE73D785CF&rs=3&gdpr=0&gdpr_consent=&us_privacy=1YN-

tls, http2

firefox.exe

2.6kB
6.0kB
23
25

HTTP Request

GET https://simage4.pubmatic.com/AdServer/SPug?o=1&p=159110&sc=1&pr=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dpubmatic%26uid%3D(PM_UID)&u=A49D0C01-3DA4-4D4C-B1CE-35CE73D785CF&rs=3&gdpr=0&gdpr_consent=&us_privacy=

HTTP Response

200

HTTP Request

GET https://simage4.pubmatic.com/AdServer/SPug?o=1&p=162412&sc=1&pr=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D316%26uid%3DPM_UID&umc=PM_UID&u=A49D0C01-3DA4-4D4C-B1CE-35CE73D785CF&rs=3&gdpr=0&gdpr_consent=&us_privacy=1YN-

HTTP Response

200
127.0.0.1:51227

firefox.exe
142.250.179.161:443

https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

tls, http2

firefox.exe

1.9kB
9.1kB
15
16

HTTP Request

GET https://fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
89.207.16.146:443

https://proc.ad.cpe.dotomi.com/cvx/client/direct/launcher?version=1.1.1&lid=681

tls, http2

firefox.exe

1.8kB
5.4kB
14
18

HTTP Request

GET https://proc.ad.cpe.dotomi.com/cvx/client/direct/launcher?version=1.1.1&lid=681

HTTP Response

200
23.42.205.214:443

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum

tls, http2

firefox.exe

2.7kB
6.0kB
23
31

HTTP Request

GET https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=onfocus&endpoint=eu

HTTP Response

301

HTTP Request

GET https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=duration_media&endpoint=us-east

HTTP Response

301

HTTP Request

GET https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=rise_engage&endpoint=us-east

HTTP Response

301

HTTP Request

GET https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum

HTTP Response

301
104.85.6.138:443

https://eus.rubiconproject.com/usync.html?p=gumgum

tls, http

firefox.exe

5.1kB
18.9kB
31
38

HTTP Request

GET https://eus.rubiconproject.com/usync.html?p=onfocus&endpoint=eu

HTTP Response

200

HTTP Request

GET https://eus.rubiconproject.com/usync.js

HTTP Response

200

HTTP Request

GET https://eus.rubiconproject.com/usync.html

HTTP Response

200

HTTP Request

GET https://eus.rubiconproject.com/usync.html?p=duration_media&endpoint=us-east

HTTP Response

200

HTTP Request

GET https://eus.rubiconproject.com/usync.html?p=rise_engage&endpoint=us-east

HTTP Response

200

HTTP Request

GET https://eus.rubiconproject.com/usync.html?p=gumgum

HTTP Response

200
13.227.219.24:443

https://ats.rlcdn.com/ats.js

tls, http2

firefox.exe

2.5kB
91.3kB
30
81

HTTP Request

GET https://ats.rlcdn.com/ats.js

HTTP Response

200
76.223.111.18:443

eb2.3lift.com

tls

firefox.exe

2.5kB
7.2kB
24
21
34.98.64.218:443

playwire-d.openx.net

tls

firefox.exe

885 B
3.6kB
8
6
184.30.24.185:443

acdn.adnxs.com

tls

firefox.exe

2.2kB
23.5kB
23
37
18.65.39.15:443

https://public.servenobid.com/sync.html

tls, http2

firefox.exe

2.0kB
11.4kB
18
21

HTTP Request

GET https://public.servenobid.com/sync.html

HTTP Response

200
35.211.178.172:443

x.bidswitch.net

tls

firefox.exe

6.5kB
10.2kB
31
28
104.110.240.210:443

https://cdn.doubleverify.com/dvbs_src.js?ctx=1000798&cmp=28691177&plc=347747402&sid=1083781&aufilter1=597658&prr=1&ppid=103&autt=1&auevent=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&c1=597658&auorder=1009233618&aucmp=18527764493&aucrtv=449406734&auxch=1&pltfrm=1&ausite=620110108258&turl=https://arras.io/&aubndl=&dvregion=0&unit=300x250

tls, http

firefox.exe

2.3kB
6.8kB
22
25

HTTP Request

GET https://cdn.doubleverify.com/dvbs_src.js?ctx=1000798&cmp=28691177&plc=347747402&sid=1083781&aufilter1=597658&prr=1&ppid=103&autt=1&auevent=ABAjH0jZ6q0-7kRPZNGwn-RLMR5j&c1=597658&auorder=1009233618&aucmp=18527764493&aucrtv=449406734&auxch=1&pltfrm=1&ausite=620110108258&turl=https://arras.io/&aubndl=&dvregion=0&unit=300x250

HTTP Response

200
104.110.240.210:443

https://cdn.doubleverify.com/dv-measurements4122.js

tls, http

firefox.exe

3.6kB
139.4kB
37
123

HTTP Request

GET https://cdn.doubleverify.com/dvtp_src.js

HTTP Response

200

HTTP Request

GET https://cdn.doubleverify.com/dvbs_src_internal118.js

HTTP Response

200

HTTP Request

GET https://cdn.doubleverify.com/dv-measurements4122.js

HTTP Response

200
65.9.86.18:443

https://choices.truste.com/ca?pid=sojern01&aid=sojern02_d&c=1688925246920311&js=pmw0&w=300&h=250&admarker=dynamic&cid=sojern

tls, http2

firefox.exe

2.4kB
17.8kB
25
30

HTTP Request

GET https://choices.truste.com/ca?pid=sojern01&aid=sojern02_d&c=1688925246920311&js=pmw0&w=300&h=250&admarker=dynamic&cid=sojern

HTTP Response

200
142.251.36.1:443

https://tpc.googlesyndication.com/pagead/js/r20230705/r20110914/client/qs_click_protection_fy2021.js

tls, http2

firefox.exe

1.8kB
14.8kB
14
23

HTTP Request

GET https://tpc.googlesyndication.com/pagead/js/r20230705/r20110914/client/qs_click_protection_fy2021.js
142.250.179.162:443

https://www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914

tls, http2

firefox.exe

2.3kB
67.0kB
24
60

HTTP Request

GET https://www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
51.38.120.206:443

https://onetag-sys.com/match/?int_id=98&gdpr=1&gdpr_consent=&uid=0

tls, http2

firefox.exe

5.1kB
14.6kB
40
34

HTTP Request

GET https://onetag-sys.com/usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1YN-&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1

HTTP Response

302

HTTP Request

GET https://onetag-sys.com/match/?int_id=113&gdpr=0&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

HTTP Response

302

HTTP Request

GET https://onetag-sys.com/usync/?pubId=5adb88524e24e50

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=107&uid=2928433158154113650

HTTP Request

GET https://onetag-sys.com/match/?int_id=1&uid=30cd64aa-f444-4500-bad9-7cc523f78d5d&gdpr=0&gdpr_consent=

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

HTTP Response

302

HTTP Request

GET https://onetag-sys.com/match/?int_id=98&gdpr=0&gdpr_consent=&uid=0

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&google_error=3

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=113&gdpr=0&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

HTTP Response

302

HTTP Request

GET https://onetag-sys.com/match/?int_id=110&uid=

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=19&google_error=3

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=1&uid=45c264aa-f446-4900-8cd4-05aa35843a26&gdpr=1&gdpr_consent=

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=107&uid=4659596722685629180

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=98&gdpr=1&gdpr_consent=&uid=0

HTTP Response

200
3.220.23.148:443

g2.gumgum.com

tls

firefox.exe

2.2kB
8.4kB
18
24
185.80.39.216:443

https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D&s=195491&C=1

tls, http

firefox.exe

2.9kB
9.1kB
15
16

HTTP Request

GET https://ssum-sec.casalemedia.com/usermatch?s=195491&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D

HTTP Response

302

HTTP Request

GET https://ssum-sec.casalemedia.com/usermatchredir?s=194558&cb=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dindexexchange%26uid%3D

HTTP Response

302

HTTP Request

GET https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D&s=195491&C=1

HTTP Response

200
52.222.139.18:443

https://cs-rtb.minutemedia-prebid.com/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D348%26uid%3D%7BpartnerId%7D

tls, http2

firefox.exe

2.1kB
8.2kB
18
21

HTTP Request

GET https://cs-rtb.minutemedia-prebid.com/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D348%26uid%3D%7BpartnerId%7D

HTTP Response

200
185.86.138.150:443

https://ssbsync.smartadserver.com/api/sync?callerId=77&gdpr=0&gdpr_consent=

tls, http

firefox.exe

2.9kB
6.6kB
14
14

HTTP Request

GET https://ssbsync.smartadserver.com/api/sync?callerId=9&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D317%26uid%3D%24UID

HTTP Response

200

HTTP Request

GET https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent=

HTTP Response

302

HTTP Request

GET https://ssbsync.smartadserver.com/api/sync?callerId=77&gdpr=0&gdpr_consent=

HTTP Response

302
3.225.218.10:443

https://ups.analytics.yahoo.com/ups/58760/sync?redir=true&gdpr=0&gdpr_consent=&verify=true

tls, http2

firefox.exe

3.7kB
8.7kB
36
30

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58675/occ?gdpr=0&gdpr_consent=

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58559/occ

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58632/occ

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=0&gdpr_consent=

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58675/occ?gdpr=0&gdpr_consent=&verify=true

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58559/occ?verify=true

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58632/occ?verify=true

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=0&gdpr_consent=&verify=true

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58760/sync?redir=true&gdpr=0&gdpr_consent=

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=1&gdpr_consent=

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58760/sync?redir=true&gdpr=0&gdpr_consent=&verify=true
3.226.99.159:443

cs-server-s2s.yellowblue.io

tls

firefox.exe

4.9kB
14.9kB
42
39
216.52.2.39:443

https://ce.lijit.com/merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D&dnr=1

tls, http

firefox.exe

2.4kB
8.2kB
15
16

HTTP Request

GET https://ce.lijit.com/merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D

HTTP Response

302

HTTP Request

GET https://ce.lijit.com/merge?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&location=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%5BSOVRNID%5D&dnr=1

HTTP Response

204
216.52.2.48:443

https://ap.lijit.com/pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID&sovrn_retry=true

tls, http

firefox.exe

2.3kB
8.1kB
14
16

HTTP Request

GET https://ap.lijit.com/pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID

HTTP Response

307

HTTP Request

GET https://ap.lijit.com/pixel?pid=273657&3pid=273657&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redir=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D310%26uid%3D%24UID&sovrn_retry=true

HTTP Response

307
199.127.204.171:443

sync.1rx.io

tls

firefox.exe

4.9kB
9.6kB
26
25
193.0.160.131:443

p.rfihub.com

tls

firefox.exe

2.0kB
8.0kB
21
26
69.166.1.10:443

sync.go.sonobi.com

tls

firefox.exe

1.6kB
6.9kB
10
12
3.225.218.10:443

ups.analytics.yahoo.com

tls, http2

firefox.exe

1.2kB
5.2kB
9
12
3.225.218.10:443

ups.analytics.yahoo.com

tls, http2

firefox.exe

1.3kB
5.1kB
12
10
95.100.244.20:443

https://hbx.media.net/cksync.php?cs=1&type=pbs&ovsid=setstatuscode&bidder=medianet&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D353%26uid%3D%3Cvsid%3E

tls, http2

firefox.exe

2.2kB
6.3kB
19
23

HTTP Request

GET https://hbx.media.net/cksync.php?cs=1&type=pbs&ovsid=setstatuscode&bidder=medianet&gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D353%26uid%3D%3Cvsid%3E

HTTP Response

302
152.199.5.184:443

https://ad-cdn.technoratimedia.com/html/usersync.html?gdpr=0&gdpr_consent=&us_privacy=1YN-&srv=cs&source=duration&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D362%26uid%3D%5BUSER_ID%5D

tls, http2

firefox.exe

2.3kB
12.3kB
21
21

HTTP Request

GET https://ad-cdn.technoratimedia.com/html/usersync.html?gdpr=0&gdpr_consent=&us_privacy=1YN-&srv=cs&source=duration&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D362%26uid%3D%5BUSER_ID%5D

HTTP Response

200
147.28.146.89:443

https://prebid.a-mo.net/cchain/0?gdpr=0&gdpr_consent=&us_privacy=1YN-&&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D327%26uid%3D

tls, http2

firefox.exe

2.0kB
6.0kB
18
18

HTTP Request

GET https://prebid.a-mo.net/cchain/0?gdpr=0&gdpr_consent=&us_privacy=1YN-&&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D327%26uid%3D

HTTP Response

302
77.245.57.72:443

sync.adkernel.com

tls

firefox.exe

1.7kB
6.1kB
9
11
34.199.223.174:443

match.sharethrough.com

tls

firefox.exe

2.4kB
7.8kB
21
20
34.235.214.126:443

ssp.disqus.com

tls

firefox.exe

3.0kB
7.7kB
23
21
185.80.39.216:443

ssum-sec.casalemedia.com

tls

firefox.exe

1.2kB
6.9kB
9
13

8.8.8.8:53

arras.io

dns

firefox.exe

54 B
86 B
1
1

DNS Request

arras.io

DNS Response

188.114.97.0

188.114.96.0
8.8.8.8:53

contile.services.mozilla.com

dns

firefox.exe

146 B
222 B
2
2

DNS Request

contile.services.mozilla.com

DNS Response

34.117.237.239

DNS Request

229.1.101.151.in-addr.arpa
8.8.8.8:53

getpocket.cdn.mozilla.net

dns

firefox.exe

71 B
174 B
1
1

DNS Request

getpocket.cdn.mozilla.net

DNS Response

34.120.5.221
8.8.8.8:53

content-signature-2.cdn.mozilla.net

dns

firefox.exe

81 B
235 B
1
1

DNS Request

content-signature-2.cdn.mozilla.net

DNS Response

34.160.144.191
8.8.8.8:53

shavar.services.mozilla.com

dns

firefox.exe

73 B
157 B
1
1

DNS Request

shavar.services.mozilla.com

DNS Response

52.39.153.93

52.11.233.163

54.185.202.81
8.8.8.8:53

push.services.mozilla.com

dns

firefox.exe

71 B
125 B
1
1

DNS Request

push.services.mozilla.com

DNS Response

34.117.65.55
8.8.8.8:53

firefox.settings.services.mozilla.com

dns

firefox.exe

83 B
161 B
1
1

DNS Request

firefox.settings.services.mozilla.com

DNS Response

34.149.100.209
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
116 B
1
1

DNS Request

shavar.prod.mozaws.net

DNS Response

52.39.153.93

52.11.233.163

54.185.202.81
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
119 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

34.160.144.191
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
153 B
1
1

DNS Request

shavar.prod.mozaws.net
8.8.8.8:53

autopush.prod.mozaws.net

dns

firefox.exe

70 B
86 B
1
1

DNS Request

autopush.prod.mozaws.net

DNS Response

34.117.65.55
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
131 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

2600:1901:0:92a9::
8.8.8.8:53

arras.io

dns

firefox.exe

54 B
86 B
1
1

DNS Request

arras.io

DNS Response

188.114.96.0

188.114.97.0
8.8.8.8:53

autopush.prod.mozaws.net

dns

firefox.exe

70 B
155 B
1
1

DNS Request

autopush.prod.mozaws.net
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
110 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net

DNS Response

34.149.100.209
8.8.8.8:53

contile.services.mozilla.com

dns

firefox.exe

74 B
90 B
1
1

DNS Request

contile.services.mozilla.com

DNS Response

34.117.237.239
8.8.8.8:53

arras.io

dns

firefox.exe

127 B
261 B
2
2

DNS Request

arras.io

DNS Response

2a06:98c1:3121::

2a06:98c1:3120::

DNS Request

visitor-fra02.omnitagjs.com
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
187 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

contile.services.mozilla.com

dns

firefox.exe

74 B
155 B
1
1

DNS Request

contile.services.mozilla.com
8.8.8.8:53

prod.pocket.prod.cloudops.mozgcp.net

dns

firefox.exe

82 B
98 B
1
1

DNS Request

prod.pocket.prod.cloudops.mozgcp.net

DNS Response

34.120.5.221
8.8.8.8:53

prod.pocket.prod.cloudops.mozgcp.net

dns

firefox.exe

82 B
110 B
1
1

DNS Request

prod.pocket.prod.cloudops.mozgcp.net

DNS Response

2600:1901:0:524c::
8.8.8.8:53

0.97.114.188.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

0.97.114.188.in-addr.arpa
8.8.8.8:53

93.153.39.52.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

93.153.39.52.in-addr.arpa
8.8.8.8:53

55.65.117.34.in-addr.arpa

dns

71 B
122 B
1
1

DNS Request

55.65.117.34.in-addr.arpa
188.114.97.0:443

arras.io

https

firefox.exe

11.3kB
1.1MB
88
908
8.8.8.8:53

static.cloudflareinsights.com

dns

firefox.exe

75 B
107 B
1
1

DNS Request

static.cloudflareinsights.com

DNS Response

104.16.56.101

104.16.57.101
8.8.8.8:53

cdn.intergient.com

dns

firefox.exe

64 B
171 B
1
1

DNS Request

cdn.intergient.com

DNS Response

18.244.114.94

18.244.114.63

18.244.114.16

18.244.114.51
8.8.8.8:53

static.cloudflareinsights.com

dns

firefox.exe

75 B
107 B
1
1

DNS Request

static.cloudflareinsights.com

DNS Response

104.16.56.101

104.16.57.101
8.8.8.8:53

d2n8ih7naru1ql.cloudfront.net

dns

firefox.exe

75 B
139 B
1
1

DNS Request

d2n8ih7naru1ql.cloudfront.net

DNS Response

18.239.94.27

18.239.94.123

18.239.94.32

18.239.94.129
8.8.8.8:53

static.cloudflareinsights.com

dns

firefox.exe

75 B
131 B
1
1

DNS Request

static.cloudflareinsights.com

DNS Response

2606:4700::6810:3865

2606:4700::6810:3965
8.8.8.8:53

d2n8ih7naru1ql.cloudfront.net

dns

firefox.exe

75 B
299 B
1
1

DNS Request

d2n8ih7naru1ql.cloudfront.net

DNS Response

2600:9000:25e8:d800:12:4abd:d340:93a1

2600:9000:25e8:8200:12:4abd:d340:93a1

2600:9000:25e8:3600:12:4abd:d340:93a1

2600:9000:25e8:2a00:12:4abd:d340:93a1

2600:9000:25e8:6a00:12:4abd:d340:93a1

2600:9000:25e8:5800:12:4abd:d340:93a1

2600:9000:25e8:fe00:12:4abd:d340:93a1

2600:9000:25e8:6c00:12:4abd:d340:93a1
8.8.8.8:53

200.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

200.179.250.142.in-addr.arpa
8.8.8.8:53

196.168.217.172.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

196.168.217.172.in-addr.arpa
8.8.8.8:53

106.208.58.216.in-addr.arpa

dns

73 B
143 B
1
1

DNS Request

106.208.58.216.in-addr.arpa
8.8.8.8:53

101.56.16.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

101.56.16.104.in-addr.arpa
8.8.8.8:53

hq3p9viv64d0js08.uvwx.xyz

dns

firefox.exe

71 B
87 B
1
1

DNS Request

hq3p9viv64d0js08.uvwx.xyz

DNS Response

213.239.205.204
8.8.8.8:53

hq3p9viv64d0js08.uvwx.xyz

dns

firefox.exe

71 B
87 B
1
1

DNS Request

hq3p9viv64d0js08.uvwx.xyz

DNS Response

213.239.205.204
8.8.8.8:53

securepubads.g.doubleclick.net

dns

firefox.exe

76 B
121 B
1
1

DNS Request

securepubads.g.doubleclick.net

DNS Response

172.217.23.194
8.8.8.8:53

cdn.intergi.com

dns

firefox.exe

61 B
168 B
1
1

DNS Request

cdn.intergi.com

DNS Response

52.222.139.99

52.222.139.85

52.222.139.59

52.222.139.121
8.8.8.8:53

94.114.244.18.in-addr.arpa

dns

72 B
129 B
1
1

DNS Request

94.114.244.18.in-addr.arpa
8.8.8.8:53

195.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

195.179.250.142.in-addr.arpa
8.8.8.8:53

131.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

131.179.250.142.in-addr.arpa
8.8.8.8:53

securepubads46.g.doubleclick.net

dns

firefox.exe

78 B
94 B
1
1

DNS Request

securepubads46.g.doubleclick.net

DNS Response

172.217.23.194
8.8.8.8:53

hq3p9viv64d0js08.uvwx.xyz

dns

firefox.exe

71 B
99 B
1
1

DNS Request

hq3p9viv64d0js08.uvwx.xyz

DNS Response

2a01:4f8:222:1098::2
8.8.8.8:53

analytics.google.com

dns

firefox.exe

66 B
158 B
1
1

DNS Request

analytics.google.com

DNS Response

216.239.34.181

216.239.36.181

216.239.38.181

216.239.32.181
8.8.8.8:53

stats.g.doubleclick.net

dns

firefox.exe

69 B
133 B
1
1

DNS Request

stats.g.doubleclick.net

DNS Response

142.250.102.156

142.250.102.155

142.250.102.154

142.250.102.157
8.8.8.8:53

d11iqv7gybc2be.cloudfront.net

dns

firefox.exe

75 B
139 B
1
1

DNS Request

d11iqv7gybc2be.cloudfront.net

DNS Response

52.222.139.59

52.222.139.99

52.222.139.121

52.222.139.85
8.8.8.8:53

securepubads46.g.doubleclick.net

dns

firefox.exe

78 B
106 B
1
1

DNS Request

securepubads46.g.doubleclick.net

DNS Response

2a00:1450:400e:805::2002
8.8.8.8:53

analytics-alv.google.com

dns

firefox.exe

70 B
134 B
1
1

DNS Request

analytics-alv.google.com

DNS Response

216.239.38.181

216.239.36.181

216.239.34.181

216.239.32.181
8.8.8.8:53

stats.g.doubleclick.net

dns

firefox.exe

69 B
133 B
1
1

DNS Request

stats.g.doubleclick.net

DNS Response

142.250.102.154

142.250.102.157

142.250.102.156

142.250.102.155
8.8.8.8:53

d11iqv7gybc2be.cloudfront.net

dns

firefox.exe

75 B
299 B
1
1

DNS Request

d11iqv7gybc2be.cloudfront.net

DNS Response

2600:9000:2204:4000:14:2602:6e80:93a1

2600:9000:2204:e600:14:2602:6e80:93a1

2600:9000:2204:3600:14:2602:6e80:93a1

2600:9000:2204:b000:14:2602:6e80:93a1

2600:9000:2204:2600:14:2602:6e80:93a1

2600:9000:2204:6200:14:2602:6e80:93a1

2600:9000:2204:8200:14:2602:6e80:93a1

2600:9000:2204:de00:14:2602:6e80:93a1
8.8.8.8:53

stats.g.doubleclick.net

dns

firefox.exe

69 B
181 B
1
1

DNS Request

stats.g.doubleclick.net

DNS Response

2a00:1450:4025:402::9b

2a00:1450:4025:402::9a

2a00:1450:4025:402::9c

2a00:1450:4025:402::9d
8.8.8.8:53

analytics-alv.google.com

dns

firefox.exe

70 B
182 B
1
1

DNS Request

analytics-alv.google.com

DNS Response

2001:4860:4802:36::181

2001:4860:4802:38::181

2001:4860:4802:32::181

2001:4860:4802:34::181
216.239.34.181:443

analytics-alv.google.com

https

firefox.exe

3.8kB
11.3kB
10
15
8.8.8.8:53

analytics-server.arras.cx

dns

firefox.exe

138 B
228 B
2
2

DNS Request

analytics-server.arras.cx

DNS Response

216.146.25.48

DNS Request

a19.dscg10.akamai.net

DNS Response

2a02:26f0:1180:4::212:794b

2a02:26f0:1180:4::212:7944
8.8.8.8:53

ext.arras.cx

dns

firefox.exe

58 B
74 B
1
1

DNS Request

ext.arras.cx

DNS Response

216.146.25.48
8.8.8.8:53

ext.arras.cx

dns

firefox.exe

58 B
86 B
1
1

DNS Request

ext.arras.cx

DNS Response

2602:fafd:f0e:8::a
172.217.23.194:443

securepubads46.g.doubleclick.net

https

firefox.exe

6.6kB
154.6kB
25
119
142.250.102.156:443

stats.g.doubleclick.net

https

firefox.exe

2.3kB
7.6kB
8
11
8.8.8.8:53

181.34.239.216.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

181.34.239.216.in-addr.arpa
8.8.8.8:53

206.23.217.172.in-addr.arpa

dns

73 B
173 B
1
1

DNS Request

206.23.217.172.in-addr.arpa
8.8.8.8:53

204.205.239.213.in-addr.arpa

dns

74 B
133 B
1
1

DNS Request

204.205.239.213.in-addr.arpa
8.8.8.8:53

194.23.217.172.in-addr.arpa

dns

73 B
171 B
1
1

DNS Request

194.23.217.172.in-addr.arpa
8.8.8.8:53

99.139.222.52.in-addr.arpa

dns

72 B
129 B
1
1

DNS Request

99.139.222.52.in-addr.arpa
8.8.8.8:53

156.102.250.142.in-addr.arpa

dns

74 B
108 B
1
1

DNS Request

156.102.250.142.in-addr.arpa
8.8.8.8:53

48.25.146.216.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

48.25.146.216.in-addr.arpa
8.8.8.8:53

impression-inferences-edge-prod.playwire.com

dns

firefox.exe

90 B
154 B
1
1

DNS Request

impression-inferences-edge-prod.playwire.com

DNS Response

52.222.139.48

52.222.139.53

52.222.139.72

52.222.139.44
8.8.8.8:53

btloader.com

dns

firefox.exe

58 B
106 B
1
1

DNS Request

btloader.com

DNS Response

104.26.6.139

104.26.7.139

172.67.70.134
8.8.8.8:53

z.moatads.com

dns

firefox.exe

59 B
155 B
1
1

DNS Request

z.moatads.com

DNS Response

184.30.25.161
8.8.8.8:53

tags.crwdcntrl.net

dns

firefox.exe

64 B
128 B
1
1

DNS Request

tags.crwdcntrl.net

DNS Response

52.222.139.35

52.222.139.100

52.222.139.7

52.222.139.112
8.8.8.8:53

btloader.com

dns

firefox.exe

58 B
106 B
1
1

DNS Request

btloader.com

DNS Response

172.67.70.134

104.26.7.139

104.26.6.139
8.8.8.8:53

impression-inferences-edge-prod.playwire.com

dns

firefox.exe

90 B
154 B
1
1

DNS Request

impression-inferences-edge-prod.playwire.com

DNS Response

52.222.139.48

52.222.139.53

52.222.139.44

52.222.139.72
8.8.8.8:53

impression-inferences-edge-prod.playwire.com

dns

firefox.exe

90 B
172 B
1
1

DNS Request

impression-inferences-edge-prod.playwire.com
8.8.8.8:53

btloader.com

dns

firefox.exe

58 B
142 B
1
1

DNS Request

btloader.com

DNS Response

2606:4700:20::681a:78b

2606:4700:20::681a:68b

2606:4700:20::ac43:4686
8.8.8.8:53

tags.crwdcntrl.net

dns

firefox.exe

64 B
128 B
1
1

DNS Request

tags.crwdcntrl.net

DNS Response

52.222.139.112

52.222.139.100

52.222.139.7

52.222.139.35
8.8.8.8:53

ad-delivery.net

dns

firefox.exe

61 B
109 B
1
1

DNS Request

ad-delivery.net

DNS Response

104.26.2.70

104.26.3.70

172.67.69.19
8.8.8.8:53

e13136.g.akamaiedge.net

dns

firefox.exe

69 B
85 B
1
1

DNS Request

e13136.g.akamaiedge.net

DNS Response

184.30.25.161
8.8.8.8:53

ad-delivery.net

dns

firefox.exe

61 B
109 B
1
1

DNS Request

ad-delivery.net

DNS Response

104.26.2.70

172.67.69.19

104.26.3.70
8.8.8.8:53

tags.crwdcntrl.net

dns

firefox.exe

64 B
145 B
1
1

DNS Request

tags.crwdcntrl.net
8.8.8.8:53

ad-delivery.net

dns

firefox.exe

61 B
145 B
1
1

DNS Request

ad-delivery.net

DNS Response

2606:4700:20::681a:246

2606:4700:20::ac43:4513

2606:4700:20::681a:346
8.8.8.8:53

e13136.g.akamaiedge.net

dns

firefox.exe

69 B
130 B
1
1

DNS Request

e13136.g.akamaiedge.net
8.8.8.8:53

139.6.26.104.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

139.6.26.104.in-addr.arpa
8.8.8.8:53

48.139.222.52.in-addr.arpa

dns

72 B
129 B
1
1

DNS Request

48.139.222.52.in-addr.arpa
8.8.8.8:53

35.139.222.52.in-addr.arpa

dns

72 B
129 B
1
1

DNS Request

35.139.222.52.in-addr.arpa
8.8.8.8:53

161.25.30.184.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

161.25.30.184.in-addr.arpa
8.8.8.8:53

api.btloader.com

dns

firefox.exe

62 B
78 B
1
1

DNS Request

api.btloader.com

DNS Response

130.211.23.194
8.8.8.8:53

fundingchoicesmessages.google.com

dns

firefox.exe

79 B
116 B
1
1

DNS Request

fundingchoicesmessages.google.com

DNS Response

142.250.179.206
8.8.8.8:53

api.btloader.com

dns

firefox.exe

129 B
190 B
2
2

DNS Request

api.btloader.com

DNS Response

130.211.23.194

DNS Request

btlr.sharethrough.com

DNS Response

34.235.214.237
8.8.8.8:53

www3.l.google.com

dns

firefox.exe

63 B
79 B
1
1

DNS Request

www3.l.google.com

DNS Response

142.250.179.206
8.8.8.8:53

mb.moatads.com

dns

firefox.exe

60 B
301 B
1
1

DNS Request

mb.moatads.com

DNS Response

3.231.46.127

34.196.251.104

18.214.51.56

23.21.46.190

34.196.181.150

52.20.33.206

52.204.143.235

34.194.148.229
8.8.8.8:53

www3.l.google.com

dns

firefox.exe

63 B
91 B
1
1

DNS Request

www3.l.google.com

DNS Response

2a00:1450:400e:803::200e
8.8.8.8:53

api.btloader.com

dns

firefox.exe

62 B
121 B
1
1

DNS Request

api.btloader.com
8.8.8.8:53

config.playwire.com

dns

firefox.exe

65 B
171 B
1
1

DNS Request

config.playwire.com

DNS Response

108.156.60.40

108.156.60.79

108.156.60.70

108.156.60.5
8.8.8.8:53

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

dns

firefox.exe

106 B
234 B
1
1

DNS Request

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

DNS Response

18.213.25.0

23.21.46.190

34.194.148.229

35.173.3.147

52.20.33.206

34.196.181.150

18.211.216.125

3.231.46.127
8.8.8.8:53

detrlmfafe7oz.cloudfront.net

dns

firefox.exe

74 B
138 B
1
1

DNS Request

detrlmfafe7oz.cloudfront.net

DNS Response

108.156.60.40

108.156.60.79

108.156.60.5

108.156.60.70
8.8.8.8:53

idsync.rlcdn.com

dns

firefox.exe

62 B
78 B
1
1

DNS Request

idsync.rlcdn.com

DNS Response

35.190.60.146
8.8.8.8:53

ps.eyeota.net

dns

firefox.exe

59 B
75 B
1
1

DNS Request

ps.eyeota.net

DNS Response

3.232.64.79
8.8.8.8:53

bcp.crwdcntrl.net

dns

firefox.exe

63 B
191 B
1
1

DNS Request

bcp.crwdcntrl.net

DNS Response

54.88.198.127

52.44.20.252

3.228.206.213

52.45.247.155

54.236.176.175

23.20.148.40

44.205.30.65

3.210.139.249
8.8.8.8:53

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com

dns

firefox.exe

106 B
188 B
1
1

DNS Request

nado-ecs-lb-us-east-1-1502216065.us-east-1.elb.amazonaws.com
8.8.8.8:53

detrlmfafe7oz.cloudfront.net

dns

firefox.exe

74 B
298 B
1
1

DNS Request

detrlmfafe7oz.cloudfront.net

DNS Response

2600:9000:2394:7400:1a:1459:5cc0:93a1

2600:9000:2394:b600:1a:1459:5cc0:93a1

2600:9000:2394:3800:1a:1459:5cc0:93a1

2600:9000:2394:9a00:1a:1459:5cc0:93a1

2600:9000:2394:fa00:1a:1459:5cc0:93a1

2600:9000:2394:e00:1a:1459:5cc0:93a1

2600:9000:2394:1c00:1a:1459:5cc0:93a1

2600:9000:2394:5a00:1a:1459:5cc0:93a1
8.8.8.8:53

idsync.rlcdn.com

dns

firefox.exe

62 B
78 B
1
1

DNS Request

idsync.rlcdn.com

DNS Response

35.190.60.146
142.250.179.206:443

www3.l.google.com

https

firefox.exe

9.5kB
25.5kB
38
65
8.8.8.8:53

ps.eyeota.net

dns

firefox.exe

59 B
75 B
1
1

DNS Request

ps.eyeota.net

DNS Response

34.197.192.192
8.8.8.8:53

bcp.crwdcntrl.net

dns

firefox.exe

63 B
191 B
1
1

DNS Request

bcp.crwdcntrl.net

DNS Response

44.194.133.102

52.44.20.252

44.205.30.65

3.210.139.249

54.88.198.127

52.202.150.89

54.236.176.175

23.20.148.40
8.8.8.8:53

idsync.rlcdn.com

dns

firefox.exe

62 B
139 B
1
1

DNS Request

idsync.rlcdn.com
8.8.8.8:53

ps.eyeota.net

dns

firefox.exe

59 B
140 B
1
1

DNS Request

ps.eyeota.net
130.211.23.194:443

api.btloader.com

https

firefox.exe

1.9kB
5.9kB
6
7
8.8.8.8:53

bcp.crwdcntrl.net

dns

firefox.exe

130 B
255 B
2
2

DNS Request

bcp.crwdcntrl.net

DNS Request

gbc4.va.us.criteo.com
8.8.8.8:53

static.criteo.net

dns

firefox.exe

63 B
113 B
1
1

DNS Request

static.criteo.net

DNS Response

178.250.1.3
8.8.8.8:53

invstatic101.creativecdn.com

dns

firefox.exe

74 B
90 B
1
1

DNS Request

invstatic101.creativecdn.com

DNS Response

34.96.70.87
8.8.8.8:53

cdn.jsdelivr.net

dns

firefox.exe

62 B
160 B
1
1

DNS Request

cdn.jsdelivr.net

DNS Response

151.101.1.229

151.101.65.229

151.101.129.229

151.101.193.229
8.8.8.8:53

cdn.id5-sync.com

dns

firefox.exe

62 B
110 B
1
1

DNS Request

cdn.id5-sync.com

DNS Response

104.22.53.86

172.67.38.106

104.22.52.86
8.8.8.8:53

oa.openxcdn.net

dns

firefox.exe

61 B
77 B
1
1

DNS Request

oa.openxcdn.net

DNS Response

34.102.146.192
8.8.8.8:53

cdn-ima.33across.com

dns

firefox.exe

66 B
151 B
1
1

DNS Request

cdn-ima.33across.com

DNS Response

172.64.152.222

104.18.35.34
8.8.8.8:53

invstatic101.creativecdn.com

dns

firefox.exe

74 B
90 B
1
1

DNS Request

invstatic101.creativecdn.com

DNS Response

34.96.70.87
8.8.8.8:53

oa.openxcdn.net

dns

firefox.exe

61 B
77 B
1
1

DNS Request

oa.openxcdn.net

DNS Response

34.102.146.192
8.8.8.8:53

cdn-ima.33across.com.cdn.cloudflare.net

dns

firefox.exe

85 B
117 B
1
1

DNS Request

cdn-ima.33across.com.cdn.cloudflare.net

DNS Response

104.18.35.34

172.64.152.222
8.8.8.8:53

invstatic101.creativecdn.com

dns

firefox.exe

74 B
145 B
1
1

DNS Request

invstatic101.creativecdn.com
35.190.60.146:443

idsync.rlcdn.com

https

firefox.exe

3.7kB
9.1kB
22
20
8.8.8.8:53

cdn-ima.33across.com.cdn.cloudflare.net

dns

firefox.exe

85 B
143 B
1
1

DNS Request

cdn-ima.33across.com.cdn.cloudflare.net
8.8.8.8:53

oa.openxcdn.net

dns

firefox.exe

61 B
154 B
1
1

DNS Request

oa.openxcdn.net
8.8.8.8:53

cdn.id5-sync.com

dns

firefox.exe

62 B
110 B
1
1

DNS Request

cdn.id5-sync.com

DNS Response

104.22.52.86

172.67.38.106

104.22.53.86
8.8.8.8:53

jsdelivr.map.fastly.net

dns

firefox.exe

69 B
133 B
1
1

DNS Request

jsdelivr.map.fastly.net

DNS Response

151.101.1.229

151.101.65.229

151.101.129.229

151.101.193.229
8.8.8.8:53

cdn.id5-sync.com

dns

firefox.exe

62 B
146 B
1
1

DNS Request

cdn.id5-sync.com

DNS Response

2606:4700:10::ac43:266a

2606:4700:10::6816:3456

2606:4700:10::6816:3556
8.8.8.8:53

static.nl3.vip.prod.criteo.net

dns

firefox.exe

76 B
92 B
1
1

DNS Request

static.nl3.vip.prod.criteo.net

DNS Response

178.250.1.3
8.8.8.8:53

jsdelivr.map.fastly.net

dns

firefox.exe

69 B
181 B
1
1

DNS Request

jsdelivr.map.fastly.net

DNS Response

2a04:4e42::485

2a04:4e42:200::485

2a04:4e42:400::485

2a04:4e42:600::485
8.8.8.8:53

static.nl3.vip.prod.criteo.net

dns

firefox.exe

76 B
104 B
1
1

DNS Request

static.nl3.vip.prod.criteo.net

DNS Response

2a02:2638:3::3
8.8.8.8:53

oajs.openx.net

dns

firefox.exe

60 B
92 B
1
1

DNS Request

oajs.openx.net

DNS Response

34.120.135.53

34.120.107.143
8.8.8.8:53

oajs.openx.net

dns

firefox.exe

60 B
92 B
1
1

DNS Request

oajs.openx.net

DNS Response

34.120.135.53

34.120.107.143
34.102.146.192:443

oa.openxcdn.net

https

firefox.exe

1.9kB
5.9kB
6
7
8.8.8.8:53

oajs.openx.net

dns

firefox.exe

60 B
153 B
1
1

DNS Request

oajs.openx.net
8.8.8.8:53

70.2.26.104.in-addr.arpa

dns

70 B
132 B
1
1

DNS Request

70.2.26.104.in-addr.arpa
8.8.8.8:53

194.23.211.130.in-addr.arpa

dns

73 B
126 B
1
1

DNS Request

194.23.211.130.in-addr.arpa
8.8.8.8:53

206.179.250.142.in-addr.arpa

dns

147 B
202 B
2
2

DNS Request

206.179.250.142.in-addr.arpa

DNS Request

googleads.g.doubleclick.net

DNS Response

142.251.39.98
8.8.8.8:53

40.60.156.108.in-addr.arpa

dns

141 B
278 B
2
2

DNS Request

40.60.156.108.in-addr.arpa

DNS Request

sync.srv.stackadapt.com
8.8.8.8:53

127.198.88.54.in-addr.arpa

dns

72 B
127 B
1
1

DNS Request

127.198.88.54.in-addr.arpa
8.8.8.8:53

198.23.217.172.in-addr.arpa

dns

73 B
171 B
1
1

DNS Request

198.23.217.172.in-addr.arpa
8.8.8.8:53

146.60.190.35.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

146.60.190.35.in-addr.arpa
8.8.8.8:53

127.46.231.3.in-addr.arpa

dns

71 B
125 B
1
1

DNS Request

127.46.231.3.in-addr.arpa
8.8.8.8:53

79.64.232.3.in-addr.arpa

dns

70 B
123 B
1
1

DNS Request

79.64.232.3.in-addr.arpa
8.8.8.8:53

192.146.102.34.in-addr.arpa

dns

73 B
126 B
1
1

DNS Request

192.146.102.34.in-addr.arpa
151.101.1.229:443

jsdelivr.map.fastly.net

https

firefox.exe

1.8kB
4.1kB
5
4
8.8.8.8:53

fingerprinter-production.herokuapp.com

dns

firefox.exe

84 B
148 B
1
1

DNS Request

fingerprinter-production.herokuapp.com

DNS Response

54.159.116.102

54.165.58.209

18.208.60.216

52.5.82.174
130.211.23.194:443

api.btloader.com

https

firefox.exe

1.9kB
5.9kB
6
7
8.8.8.8:53

fingerprinter-production.herokuapp.com

dns

firefox.exe

84 B
148 B
1
1

DNS Request

fingerprinter-production.herokuapp.com

DNS Response

52.5.82.174

54.165.58.209

54.159.116.102

18.208.60.216
8.8.8.8:53

fingerprinter-production.herokuapp.com

dns

firefox.exe

84 B
149 B
1
1

DNS Request

fingerprinter-production.herokuapp.com
8.8.8.8:53

id5-sync.com

dns

firefox.exe

58 B
218 B
1
1

DNS Request

id5-sync.com

DNS Response

141.95.98.64

162.19.138.83

141.95.33.111

162.19.138.119

162.19.138.118

141.95.98.65

162.19.138.120

162.19.138.82

162.19.138.117

162.19.138.116
8.8.8.8:53

id.crwdcntrl.net

dns

firefox.exe

62 B
190 B
1
1

DNS Request

id.crwdcntrl.net

DNS Response

44.205.30.65

52.44.20.252

54.88.198.127

52.202.150.89

3.228.206.213

52.45.247.155

3.210.139.249

54.236.176.175
8.8.8.8:53

fid.agkn.com

dns

firefox.exe

58 B
96 B
1
1

DNS Request

fid.agkn.com

DNS Response

34.160.46.1
8.8.8.8:53

id5-sync.com

dns

firefox.exe

58 B
218 B
1
1

DNS Request

id5-sync.com

DNS Response

162.19.138.82

162.19.138.119

141.95.98.65

162.19.138.118

162.19.138.83

162.19.138.120

141.95.98.64

162.19.138.117

162.19.138.116

141.95.33.111
8.8.8.8:53

id5-sync.com

dns

firefox.exe

58 B
117 B
1
1

DNS Request

id5-sync.com
34.96.70.87:443

invstatic101.creativecdn.com

https

firefox.exe

1.9kB
5.9kB
6
7
34.120.135.53:443

oajs.openx.net

https

firefox.exe

1.8kB
4.5kB
5
6
8.8.8.8:53

id.crwdcntrl.net

dns

firefox.exe

62 B
190 B
1
1

DNS Request

id.crwdcntrl.net

DNS Response

44.194.133.102

52.44.20.252

3.210.139.249

3.228.206.213

54.88.198.127

54.236.176.175

52.45.247.155

52.202.150.89
8.8.8.8:53

fabrick.agkn.com

dns

firefox.exe

62 B
78 B
1
1

DNS Request

fabrick.agkn.com

DNS Response

34.160.46.1
8.8.8.8:53

gum.criteo.com

dns

firefox.exe

60 B
107 B
1
1

DNS Request

gum.criteo.com

DNS Response

178.250.1.11
8.8.8.8:53

fabrick.agkn.com

dns

firefox.exe

62 B
138 B
1
1

DNS Request

fabrick.agkn.com
8.8.8.8:53

id.crwdcntrl.net

dns

firefox.exe

62 B
143 B
1
1

DNS Request

id.crwdcntrl.net
8.8.8.8:53

gum.nl3.vip.prod.criteo.com

dns

firefox.exe

73 B
89 B
1
1

DNS Request

gum.nl3.vip.prod.criteo.com

DNS Response

178.250.1.11
34.160.46.1:443

fabrick.agkn.com

https

firefox.exe

1.7kB
5.1kB
4
7
8.8.8.8:53

gum.nl3.vip.prod.criteo.com

dns

firefox.exe

73 B
101 B
1
1

DNS Request

gum.nl3.vip.prod.criteo.com

DNS Response

2a02:2638:3::c
8.8.8.8:53

esp.rtbhouse.com

dns

firefox.exe

62 B
78 B
1
1

DNS Request

esp.rtbhouse.com

DNS Response

35.190.39.111
8.8.8.8:53

pippio.com

dns

firefox.exe

56 B
72 B
1
1

DNS Request

pippio.com

DNS Response

107.178.254.65
35.190.39.111:443

esp.rtbhouse.com

https

firefox.exe

1.9kB
5.9kB
6
7
8.8.8.8:53

esp.rtbhouse.com

dns

firefox.exe

62 B
78 B
1
1

DNS Request

esp.rtbhouse.com

DNS Response

35.190.39.111
8.8.8.8:53

pippio.com

dns

firefox.exe

56 B
72 B
1
1

DNS Request

pippio.com

DNS Response

107.178.254.65
8.8.8.8:53

dnacdn.net

dns

firefox.exe

56 B
72 B
1
1

DNS Request

dnacdn.net

DNS Response

74.119.119.139
8.8.8.8:53

pippio.com

dns

firefox.exe

56 B
137 B
1
1

DNS Request

pippio.com
8.8.8.8:53

ag.gbc.criteo.com

dns

firefox.exe

63 B
536 B
1
1

DNS Request

ag.gbc.criteo.com

DNS Response

185.235.85.124

185.235.85.130

185.235.85.137

185.235.85.127

185.235.85.112

185.235.85.122

185.235.85.116

185.235.85.117

185.235.85.115

185.235.85.129

185.235.85.134

185.235.85.128

185.235.85.136

185.235.85.138

185.235.85.132

185.235.85.119

185.235.85.121

185.235.85.126

185.235.85.125

185.235.85.118

185.235.85.133

185.235.85.113

185.235.85.131

185.235.85.139

185.235.85.135

185.235.85.114

185.235.85.123

185.235.85.120
8.8.8.8:53

gem.gbc.criteo.com

dns

firefox.exe

64 B
537 B
1
1

DNS Request

gem.gbc.criteo.com

DNS Response

185.235.85.126

185.235.85.123

185.235.85.128

185.235.85.125

185.235.85.133

185.235.85.137

185.235.85.124

185.235.85.135

185.235.85.118

185.235.85.114

185.235.85.116

185.235.85.134

185.235.85.129

185.235.85.122

185.235.85.130

185.235.85.139

185.235.85.127

185.235.85.132

185.235.85.112

185.235.85.136

185.235.85.117

185.235.85.131

185.235.85.113

185.235.85.121

185.235.85.120

185.235.85.119

185.235.85.138

185.235.85.115
8.8.8.8:53

esp.rtbhouse.com

dns

firefox.exe

62 B
127 B
1
1

DNS Request

esp.rtbhouse.com
8.8.8.8:53

102.116.159.54.in-addr.arpa

dns

73 B
129 B
1
1

DNS Request

102.116.159.54.in-addr.arpa
8.8.8.8:53

87.70.96.34.in-addr.arpa

dns

70 B
120 B
1
1

DNS Request

87.70.96.34.in-addr.arpa
8.8.8.8:53

86.53.22.104.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

86.53.22.104.in-addr.arpa
8.8.8.8:53

3.1.250.178.in-addr.arpa

dns

70 B
124 B
1
1

DNS Request

3.1.250.178.in-addr.arpa
8.8.8.8:53

222.152.64.172.in-addr.arpa

dns

73 B
135 B
1
1

DNS Request

222.152.64.172.in-addr.arpa
8.8.8.8:53

53.135.120.34.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

53.135.120.34.in-addr.arpa
8.8.8.8:53

68.159.190.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

68.159.190.20.in-addr.arpa
8.8.8.8:53

64.98.95.141.in-addr.arpa

dns

71 B
110 B
1
1

DNS Request

64.98.95.141.in-addr.arpa
8.8.8.8:53

1.46.160.34.in-addr.arpa

dns

70 B
120 B
1
1

DNS Request

1.46.160.34.in-addr.arpa
8.8.8.8:53

65.30.205.44.in-addr.arpa

dns

71 B
125 B
1
1

DNS Request

65.30.205.44.in-addr.arpa
8.8.8.8:53

11.1.250.178.in-addr.arpa

dns

71 B
125 B
1
1

DNS Request

11.1.250.178.in-addr.arpa
8.8.8.8:53

gbc4.va.us.criteo.com

dns

firefox.exe

67 B
515 B
1
1

DNS Request

gbc4.va.us.criteo.com

DNS Response

185.235.85.129

185.235.85.132

185.235.85.121

185.235.85.136

185.235.85.113

185.235.85.130

185.235.85.134

185.235.85.125

185.235.85.114

185.235.85.119

185.235.85.112

185.235.85.139

185.235.85.126

185.235.85.127

185.235.85.115

185.235.85.120

185.235.85.138

185.235.85.128

185.235.85.135

185.235.85.117

185.235.85.118

185.235.85.131

185.235.85.116

185.235.85.122

185.235.85.133

185.235.85.123

185.235.85.124

185.235.85.137
8.8.8.8:53

dnacdn.net

dns

firefox.exe

56 B
72 B
1
1

DNS Request

dnacdn.net

DNS Response

74.119.119.139
8.8.8.8:53

dnacdn.net

dns

firefox.exe

56 B
110 B
1
1

DNS Request

dnacdn.net
107.178.254.65:443

pippio.com

https

firefox.exe

2.8kB
6.8kB
14
13
8.8.8.8:53

google-bidout-d.openx.net

dns

firefox.exe

71 B
103 B
1
1

DNS Request

google-bidout-d.openx.net

DNS Response

34.98.64.218

35.244.159.8
8.8.8.8:53

lb.eu-1-id5-sync.com

dns

firefox.exe

66 B
226 B
1
1

DNS Request

lb.eu-1-id5-sync.com

DNS Response

162.19.138.82

162.19.138.116

141.95.33.111

162.19.138.83

141.95.98.65

162.19.138.119

162.19.138.120

162.19.138.118

141.95.98.64

162.19.138.117
8.8.8.8:53

google-bidout-d.openx.net

dns

firefox.exe

71 B
103 B
1
1

DNS Request

google-bidout-d.openx.net

DNS Response

34.98.64.218

35.244.159.8
8.8.8.8:53

c.amazon-adsystem.com

dns

firefox.exe

67 B
126 B
1
1

DNS Request

c.amazon-adsystem.com

DNS Response

52.222.136.109
8.8.8.8:53

google-bidout-d.openx.net

dns

firefox.exe

71 B
164 B
1
1

DNS Request

google-bidout-d.openx.net
8.8.8.8:53

lb.eu-1-id5-sync.com

dns

firefox.exe

66 B
226 B
1
1

DNS Request

lb.eu-1-id5-sync.com

DNS Response

162.19.138.120

162.19.138.118

141.95.98.65

141.95.33.111

162.19.138.116

162.19.138.119

162.19.138.83

162.19.138.117

141.95.98.64

162.19.138.82
8.8.8.8:53

lb.eu-1-id5-sync.com

dns

firefox.exe

66 B
125 B
1
1

DNS Request

lb.eu-1-id5-sync.com
8.8.8.8:53

d1ykf07e75w7ss.cloudfront.net

dns

firefox.exe

75 B
91 B
1
1

DNS Request

d1ykf07e75w7ss.cloudfront.net

DNS Response

52.222.136.109
8.8.8.8:53

d1ykf07e75w7ss.cloudfront.net

dns

firefox.exe

75 B
156 B
1
1

DNS Request

d1ykf07e75w7ss.cloudfront.net
34.98.64.218:443

google-bidout-d.openx.net

https

firefox.exe

4.2kB
7.2kB
17
24
8.8.8.8:53

cm.g.doubleclick.net

dns

firefox.exe

66 B
82 B
1
1

DNS Request

cm.g.doubleclick.net

DNS Response

172.217.168.226
8.8.8.8:53

cm.g.doubleclick.net

dns

firefox.exe

66 B
82 B
1
1

DNS Request

cm.g.doubleclick.net

DNS Response

142.250.179.162
8.8.8.8:53

cm.g.doubleclick.net

dns

firefox.exe

66 B
126 B
1
1

DNS Request

cm.g.doubleclick.net
172.217.168.226:443

cm.g.doubleclick.net

https

firefox.exe

8.0kB
18.1kB
38
64
8.8.8.8:53

script.4dex.io

dns

firefox.exe

60 B
108 B
1
1

DNS Request

script.4dex.io

DNS Response

104.26.8.169

104.26.9.169

172.67.75.241
8.8.8.8:53

tlx.3lift.com

dns

firefox.exe

59 B
208 B
1
1

DNS Request

tlx.3lift.com

DNS Response

52.29.80.116

18.198.108.92

18.185.163.149

3.64.88.101

3.67.62.218

18.158.190.100

18.196.86.133

52.28.167.177
8.8.8.8:53

apex.go.sonobi.com

dns

firefox.exe

64 B
153 B
1
1

DNS Request

apex.go.sonobi.com

DNS Response

69.166.1.8

69.166.1.9

69.166.1.14

69.166.1.15
8.8.8.8:53

fastlane.rubiconproject.com

dns

firefox.exe

73 B
206 B
1
1

DNS Request

fastlane.rubiconproject.com

DNS Response

213.19.162.31

213.19.162.51

213.19.162.41

213.19.162.21

69.173.144.140
8.8.8.8:53

eu-tlx.3lift.com

dns

firefox.exe

62 B
190 B
1
1

DNS Request

eu-tlx.3lift.com

DNS Response

18.196.86.133

18.184.146.88

52.29.64.82

52.29.80.116

3.73.254.28

3.65.80.210

18.158.90.52

35.156.33.238
8.8.8.8:53

mp.4dex.io

dns

firefox.exe

56 B
88 B
1
1

DNS Request

mp.4dex.io

DNS Response

104.18.2.114

104.18.3.114
8.8.8.8:53

htlb.casalemedia.com

dns

firefox.exe

136 B
284 B
2
2

DNS Request

htlb.casalemedia.com

DNS Response

104.18.25.185

104.18.24.185

DNS Request

23.4.85.104.in-addr.arpa
8.8.8.8:53

script.4dex.io

dns

firefox.exe

60 B
108 B
1
1

DNS Request

script.4dex.io

DNS Response

104.26.8.169

104.26.9.169

172.67.75.241
8.8.8.8:53

iad-2-apex.go.sonobi.com

dns

firefox.exe

70 B
134 B
1
1

DNS Request

iad-2-apex.go.sonobi.com

DNS Response

69.166.1.8

69.166.1.9

69.166.1.14

69.166.1.15
8.8.8.8:53

script.4dex.io

dns

firefox.exe

60 B
144 B
1
1

DNS Request

script.4dex.io

DNS Response

2606:4700:20::681a:9a9

2606:4700:20::681a:8a9

2606:4700:20::ac43:4bf1
8.8.8.8:53

iad-2-apex.go.sonobi.com

dns

firefox.exe

70 B
135 B
1
1

DNS Request

iad-2-apex.go.sonobi.com
8.8.8.8:53

eu-tlx.3lift.com

dns

firefox.exe

62 B
146 B
1
1

DNS Request

eu-tlx.3lift.com
8.8.8.8:53

grid.bidswitch.net

dns

firefox.exe

64 B
251 B
1
1

DNS Request

grid.bidswitch.net

DNS Response

35.211.82.127

35.211.11.46

35.211.105.191

35.211.130.113

35.211.19.95

35.211.180.124

35.211.159.70

35.211.49.20

35.211.136.186

35.211.159.137
8.8.8.8:53

tagged-by.rubiconproject.net.akadns.net

dns

firefox.exe

85 B
165 B
1
1

DNS Request

tagged-by.rubiconproject.net.akadns.net

DNS Response

69.173.144.140

213.19.162.21

213.19.162.41

213.19.162.31

213.19.162.51
8.8.8.8:53

mp.4dex.io

dns

firefox.exe

56 B
88 B
1
1

DNS Request

mp.4dex.io

DNS Response

104.18.3.114

104.18.2.114
8.8.8.8:53

ib.adnxs.com

dns

firefox.exe

58 B
251 B
1
1

DNS Request

ib.adnxs.com

DNS Response

37.252.171.52

37.252.171.22

37.252.171.85

37.252.171.149

37.252.171.84

37.252.171.53

37.252.172.123

37.252.173.215

37.252.171.21
8.8.8.8:53

htlb.casalemedia.com.cdn.cloudflare.net

dns

firefox.exe

85 B
117 B
1
1

DNS Request

htlb.casalemedia.com.cdn.cloudflare.net

DNS Response

104.18.24.185

104.18.25.185
8.8.8.8:53

rtb.openx.net

dns

firefox.exe

59 B
91 B
1
1

DNS Request

rtb.openx.net

DNS Response

35.227.252.103

35.186.253.211
8.8.8.8:53

ads.servenobid.com

dns

firefox.exe

135 B
243 B
2
2

DNS Request

ads.servenobid.com

DNS Response

3.139.163.229

18.190.112.82

18.217.231.85

DNS Request

166.87.77.80.in-addr.arpa
8.8.8.8:53

secure.cdn.fastclick.net

dns

firefox.exe

70 B
167 B
1
1

DNS Request

secure.cdn.fastclick.net

DNS Response

23.39.253.208
8.8.8.8:53

mp.4dex.io

dns

firefox.exe

56 B
112 B
1
1

DNS Request

mp.4dex.io

DNS Response

2606:4700::6812:372

2606:4700::6812:272
8.8.8.8:53

tagged-by.rubiconproject.net.akadns.net

dns

firefox.exe

85 B
225 B
1
1

DNS Request

tagged-by.rubiconproject.net.akadns.net

DNS Response

2602:803:c004:200::140

2602:803:c003:200::31

2602:803:c003:200::51

2602:803:c003:200::41

2602:803:c003:200::21
8.8.8.8:53

btlr-us-east-1.sharethrough.com

dns

firefox.exe

77 B
93 B
1
1

DNS Request

btlr-us-east-1.sharethrough.com

DNS Response

52.55.204.172
8.8.8.8:53

htlb.casalemedia.com.cdn.cloudflare.net

dns

firefox.exe

85 B
143 B
1
1

DNS Request

htlb.casalemedia.com.cdn.cloudflare.net
8.8.8.8:53

btlr-us-east-1.sharethrough.com

dns

firefox.exe

77 B
155 B
1
1

DNS Request

btlr-us-east-1.sharethrough.com
8.8.8.8:53

ib.anycast.adnxs.com

dns

firefox.exe

66 B
210 B
1
1

DNS Request

ib.anycast.adnxs.com

DNS Response

37.252.171.53

37.252.171.85

37.252.172.123

37.252.171.52

37.252.171.22

37.252.173.215

37.252.171.21

37.252.171.84

37.252.171.149
8.8.8.8:53

rtb.openx.net

dns

firefox.exe

59 B
91 B
1
1

DNS Request

rtb.openx.net

DNS Response

35.186.253.211

35.227.252.103
8.8.8.8:53

e4536.g.akamaiedge.net

dns

firefox.exe

128 B
176 B
2
2

DNS Request

e4536.g.akamaiedge.net

DNS Response

23.39.253.208

DNS Request

us-u.openx.net

DNS Response

34.98.64.218

35.244.159.8
8.8.8.8:53

ib.anycast.adnxs.com

dns

firefox.exe

66 B
131 B
1
1

DNS Request

ib.anycast.adnxs.com
8.8.8.8:53

111.39.190.35.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

111.39.190.35.in-addr.arpa
8.8.8.8:53

65.254.178.107.in-addr.arpa

dns

73 B
126 B
1
1

DNS Request

65.254.178.107.in-addr.arpa
8.8.8.8:53

139.119.119.74.in-addr.arpa

dns

73 B
127 B
1
1

DNS Request

139.119.119.74.in-addr.arpa
8.8.8.8:53

126.85.235.185.in-addr.arpa

dns

73 B
127 B
1
1

DNS Request

126.85.235.185.in-addr.arpa
8.8.8.8:53

124.85.235.185.in-addr.arpa

dns

73 B
127 B
1
1

DNS Request

124.85.235.185.in-addr.arpa
8.8.8.8:53

218.64.98.34.in-addr.arpa

dns

71 B
122 B
1
1

DNS Request

218.64.98.34.in-addr.arpa
8.8.8.8:53

82.138.19.162.in-addr.arpa

dns

72 B
113 B
1
1

DNS Request

82.138.19.162.in-addr.arpa
8.8.8.8:53

109.136.222.52.in-addr.arpa

dns

73 B
131 B
1
1

DNS Request

109.136.222.52.in-addr.arpa
8.8.8.8:53

116.80.29.52.in-addr.arpa

dns

71 B
136 B
1
1

DNS Request

116.80.29.52.in-addr.arpa
8.8.8.8:53

226.168.217.172.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

226.168.217.172.in-addr.arpa
8.8.8.8:53

169.8.26.104.in-addr.arpa

dns

142 B
268 B
2
2

DNS Request

169.8.26.104.in-addr.arpa

DNS Request

138.6.85.104.in-addr.arpa
8.8.8.8:53

31.162.19.213.in-addr.arpa

dns

72 B
72 B
1
1

DNS Request

31.162.19.213.in-addr.arpa
8.8.8.8:53

114.2.18.104.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

114.2.18.104.in-addr.arpa
8.8.8.8:53

8.1.166.69.in-addr.arpa

dns

69 B
131 B
1
1

DNS Request

8.1.166.69.in-addr.arpa
8.8.8.8:53

185.25.18.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

185.25.18.104.in-addr.arpa
8.8.8.8:53

52.171.252.37.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

52.171.252.37.in-addr.arpa
8.8.8.8:53

103.252.227.35.in-addr.arpa

dns

139 B
263 B
2
2

DNS Request

103.252.227.35.in-addr.arpa

DNS Request

contextual.media.net
8.8.8.8:53

237.214.235.34.in-addr.arpa

dns

73 B
129 B
1
1

DNS Request

237.214.235.34.in-addr.arpa
8.8.8.8:53

rtb.openx.net

dns

firefox.exe

59 B
152 B
1
1

DNS Request

rtb.openx.net
8.8.8.8:53

e4536.g.akamaiedge.net

dns

firefox.exe

68 B
129 B
1
1

DNS Request

e4536.g.akamaiedge.net
8.8.8.8:53

grid-udp-use.bidswitch.net

dns

firefox.exe

72 B
232 B
1
1

DNS Request

grid-udp-use.bidswitch.net

DNS Response

35.211.165.203

35.211.54.207

35.211.203.15

35.211.199.18

35.211.102.174

35.207.56.110

35.211.88.168

35.207.26.130

35.211.162.6

35.211.34.176
8.8.8.8:53

ads.servenobid.com

dns

firefox.exe

64 B
112 B
1
1

DNS Request

ads.servenobid.com

DNS Response

3.139.163.229

18.190.112.82

18.217.231.85
8.8.8.8:53

grid-udp-use.bidswitch.net

dns

firefox.exe

72 B
124 B
1
1

DNS Request

grid-udp-use.bidswitch.net
8.8.8.8:53

ads.servenobid.com

dns

firefox.exe

64 B
142 B
1
1

DNS Request

ads.servenobid.com
35.227.252.103:443

rtb.openx.net

https

firefox.exe

7.7kB
5.5kB
16
14
104.18.25.185:443

htlb.casalemedia.com.cdn.cloudflare.net

https

firefox.exe

6.4kB
6.4kB
11
14
8.8.8.8:53

ads.pubmatic.com

dns

firefox.exe

62 B
145 B
1
1

DNS Request

ads.pubmatic.com

DNS Response

184.30.24.198
8.8.8.8:53

e6603.g.akamaiedge.net

dns

firefox.exe

68 B
84 B
1
1

DNS Request

e6603.g.akamaiedge.net

DNS Response

184.30.24.198
8.8.8.8:53

e6603.g.akamaiedge.net

dns

firefox.exe

68 B
129 B
1
1

DNS Request

e6603.g.akamaiedge.net
8.8.8.8:53

assets.msn.com

dns

60 B
278 B
1
1

DNS Request

assets.msn.com

DNS Response

95.100.135.152

95.100.135.137

2.19.198.187

95.100.135.226

95.100.135.138

95.100.135.155

95.100.135.224

95.100.135.249

95.100.135.234
8.8.8.8:53

image6.pubmatic.com

dns

firefox.exe

65 B
136 B
1
1

DNS Request

image6.pubmatic.com

DNS Response

185.64.190.78
8.8.8.8:53

pugm-lhrc.pubmnet.com

dns

firefox.exe

67 B
83 B
1
1

DNS Request

pugm-lhrc.pubmnet.com

DNS Response

185.64.190.78
8.8.8.8:53

pugm-lhrc.pubmnet.com

dns

firefox.exe

67 B
132 B
1
1

DNS Request

pugm-lhrc.pubmnet.com
8.8.8.8:53

simage4.pubmatic.com

dns

firefox.exe

66 B
138 B
1
1

DNS Request

simage4.pubmatic.com

DNS Response

185.64.190.81
8.8.8.8:53

spug-lhrc.pubmnet.com

dns

firefox.exe

67 B
83 B
1
1

DNS Request

spug-lhrc.pubmnet.com

DNS Response

185.64.190.81
8.8.8.8:53

spug-lhrc.pubmnet.com

dns

firefox.exe

67 B
132 B
1
1

DNS Request

spug-lhrc.pubmnet.com
8.8.8.8:53

229.163.139.3.in-addr.arpa

dns

72 B
135 B
1
1

DNS Request

229.163.139.3.in-addr.arpa
8.8.8.8:53

127.82.211.35.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

127.82.211.35.in-addr.arpa
8.8.8.8:53

198.24.30.184.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

198.24.30.184.in-addr.arpa
8.8.8.8:53

152.135.100.95.in-addr.arpa

dns

130 B
244 B
2
2

DNS Request

152.135.100.95.in-addr.arpa

DNS Request

wt.rqtrk.eu

DNS Response

15.235.42.102

15.235.42.104

15.235.42.103
8.8.8.8:53

78.190.64.185.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

78.190.64.185.in-addr.arpa
8.8.8.8:53

2.36.251.142.in-addr.arpa

dns

71 B
109 B
1
1

DNS Request

2.36.251.142.in-addr.arpa
8.8.8.8:53

208.253.39.23.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

208.253.39.23.in-addr.arpa
8.8.8.8:53

81.190.64.185.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

81.190.64.185.in-addr.arpa
8.8.8.8:53

98.39.251.142.in-addr.arpa

dns

143 B
235 B
2
2

DNS Request

98.39.251.142.in-addr.arpa

DNS Request

127.70.226.3.in-addr.arpa
8.8.8.8:53

fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com

dns

firefox.exe

183 B
295 B
2
2

DNS Request

fd6c12ed5d5b8fc24a93c4905dcd5ca1.safeframe.googlesyndication.com

DNS Response

142.250.179.161

DNS Request

207.194.211.35.in-addr.arpa
8.8.8.8:53

proc.ad.cpe.dotomi.com

dns

firefox.exe

68 B
147 B
1
1

DNS Request

proc.ad.cpe.dotomi.com

DNS Response

89.207.16.146
8.8.8.8:53

pagead-googlehosted.l.google.com

dns

firefox.exe

148 B
218 B
2
2

DNS Request

pagead-googlehosted.l.google.com

DNS Response

142.250.179.161

DNS Request

15.39.65.18.in-addr.arpa
8.8.8.8:53

convex.global.dual.dotomi.weighted.com.akadns.net

dns

firefox.exe

95 B
111 B
1
1

DNS Request

convex.global.dual.dotomi.weighted.com.akadns.net

DNS Response

89.207.16.146
8.8.8.8:53

pagead-googlehosted.l.google.com

dns

firefox.exe

78 B
106 B
1
1

DNS Request

pagead-googlehosted.l.google.com

DNS Response

2a00:1450:400e:802::2001
8.8.8.8:53

convex.global.dual.dotomi.weighted.com.akadns.net

dns

firefox.exe

95 B
123 B
1
1

DNS Request

convex.global.dual.dotomi.weighted.com.akadns.net

DNS Response

2a02:fa8:8806:20::2100
142.250.179.161:443

pagead-googlehosted.l.google.com

https

firefox.exe

1.9kB
7.1kB
6
8
8.8.8.8:53

secure-assets.rubiconproject.com

dns

firefox.exe

78 B
183 B
1
1

DNS Request

secure-assets.rubiconproject.com

DNS Response

23.42.205.214
8.8.8.8:53

e8960.e2.akamaiedge.net

dns

firefox.exe

69 B
85 B
1
1

DNS Request

e8960.e2.akamaiedge.net

DNS Response

23.42.205.214
8.8.8.8:53

e8960.e2.akamaiedge.net

dns

firefox.exe

69 B
131 B
1
1

DNS Request

e8960.e2.akamaiedge.net
8.8.8.8:53

eus.rubiconproject.com

dns

firefox.exe

68 B
165 B
1
1

DNS Request

eus.rubiconproject.com

DNS Response

104.85.6.138
8.8.8.8:53

e8960.b.akamaiedge.net

dns

firefox.exe

68 B
84 B
1
1

DNS Request

e8960.b.akamaiedge.net

DNS Response

104.85.6.138
8.8.8.8:53

e8960.b.akamaiedge.net

dns

firefox.exe

68 B
129 B
1
1

DNS Request

e8960.b.akamaiedge.net
8.8.8.8:53

ats.rlcdn.com

dns

firefox.exe

59 B
123 B
1
1

DNS Request

ats.rlcdn.com

DNS Response

13.227.219.24

13.227.219.121

13.227.219.37

13.227.219.68
8.8.8.8:53

ats.rlcdn.com

dns

firefox.exe

59 B
123 B
1
1

DNS Request

ats.rlcdn.com

DNS Response

52.84.90.12

52.84.90.66

52.84.90.122

52.84.90.107
8.8.8.8:53

ats.rlcdn.com

dns

firefox.exe

59 B
140 B
1
1

DNS Request

ats.rlcdn.com
8.8.8.8:53

acdn.adnxs.com

dns

firefox.exe

60 B
147 B
1
1

DNS Request

acdn.adnxs.com

DNS Response

184.30.24.185
8.8.8.8:53

public.servenobid.com

dns

firefox.exe

67 B
131 B
1
1

DNS Request

public.servenobid.com

DNS Response

18.65.39.15

18.65.39.129

18.65.39.39

18.65.39.91
8.8.8.8:53

eb2.3lift.com

dns

firefox.exe

59 B
112 B
1
1

DNS Request

eb2.3lift.com

DNS Response

76.223.111.18

13.248.245.213
8.8.8.8:53

playwire-d.openx.net

dns

firefox.exe

66 B
98 B
1
1

DNS Request

playwire-d.openx.net

DNS Response

34.98.64.218

35.244.159.8
8.8.8.8:53

x.bidswitch.net

dns

firefox.exe

61 B
109 B
1
1

DNS Request

x.bidswitch.net

DNS Response

35.211.178.172
8.8.8.8:53

eu-eb2.3lift.com

dns

firefox.exe

62 B
94 B
1
1

DNS Request

eu-eb2.3lift.com

DNS Response

76.223.111.18

13.248.245.213
8.8.8.8:53

playwire-d.openx.net

dns

firefox.exe

66 B
98 B
1
1

DNS Request

playwire-d.openx.net

DNS Response

35.244.159.8

34.98.64.218
34.98.64.218:443

playwire-d.openx.net

https

firefox.exe

2.3kB
4.6kB
10
8
8.8.8.8:53

e6115.g.akamaiedge.net

dns

firefox.exe

68 B
84 B
1
1

DNS Request

e6115.g.akamaiedge.net

DNS Response

184.30.24.185
8.8.8.8:53

eu-eb2.3lift.com

dns

firefox.exe

62 B
146 B
1
1

DNS Request

eu-eb2.3lift.com
8.8.8.8:53

playwire-d.openx.net

dns

firefox.exe

66 B
159 B
1
1

DNS Request

playwire-d.openx.net
8.8.8.8:53

googleads.g.doubleclick.net

dns

firefox.exe

73 B
89 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

142.250.179.130
8.8.8.8:53

e6115.g.akamaiedge.net

dns

firefox.exe

68 B
129 B
1
1

DNS Request

e6115.g.akamaiedge.net
8.8.8.8:53

public.servenobid.com

dns

firefox.exe

67 B
131 B
1
1

DNS Request

public.servenobid.com

DNS Response

18.65.39.15

18.65.39.129

18.65.39.39

18.65.39.91
8.8.8.8:53

googleads.g.doubleclick.net

dns

firefox.exe

73 B
101 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

2a00:1450:400e:803::2002
8.8.8.8:53

user-data-us-east.bidswitch.net

dns

firefox.exe

77 B
93 B
1
1

DNS Request

user-data-us-east.bidswitch.net

DNS Response

35.211.178.172
8.8.8.8:53

public.servenobid.com

dns

firefox.exe

67 B
145 B
1
1

DNS Request

public.servenobid.com
8.8.8.8:53

cdn.doubleverify.com

dns

firefox.exe

66 B
178 B
1
1

DNS Request

cdn.doubleverify.com

DNS Response

104.110.240.210

104.110.240.194
8.8.8.8:53

a1241.dsct.akamai.net

dns

firefox.exe

67 B
99 B
1
1

DNS Request

a1241.dsct.akamai.net

DNS Response

104.110.240.194

104.110.240.210
8.8.8.8:53

a1241.dsct.akamai.net

dns

firefox.exe

67 B
123 B
1
1

DNS Request

a1241.dsct.akamai.net

DNS Response

2a02:26f0:fe00::686e:f0d2

2a02:26f0:fe00::686e:f0c2
8.8.8.8:53

user-data-us-east.bidswitch.net

dns

firefox.exe

77 B
129 B
1
1

DNS Request

user-data-us-east.bidswitch.net
8.8.8.8:53

beacon.sojern.com

dns

firefox.exe

63 B
105 B
1
1

DNS Request

beacon.sojern.com

DNS Response

107.178.244.119
8.8.8.8:53

pixelglobal.sojern.com

dns

firefox.exe

68 B
84 B
1
1

DNS Request

pixelglobal.sojern.com

DNS Response

107.178.244.119
8.8.8.8:53

pixelglobal.sojern.com

dns

firefox.exe

68 B
158 B
1
1

DNS Request

pixelglobal.sojern.com
8.8.8.8:53

choices.truste.com

dns

firefox.exe

64 B
128 B
1
1

DNS Request

choices.truste.com

DNS Response

65.9.86.18

65.9.86.97

65.9.86.32

65.9.86.23
8.8.8.8:53

tpc.googlesyndication.com

dns

firefox.exe

71 B
87 B
1
1

DNS Request

tpc.googlesyndication.com

DNS Response

142.251.36.1
8.8.8.8:53

choices.truste.com

dns

firefox.exe

64 B
128 B
1
1

DNS Request

choices.truste.com

DNS Response

65.9.86.32

65.9.86.18

65.9.86.23

65.9.86.97
8.8.8.8:53

tpc.googlesyndication.com

dns

firefox.exe

71 B
87 B
1
1

DNS Request

tpc.googlesyndication.com

DNS Response

142.251.36.1
8.8.8.8:53

www.googletagservices.com

dns

firefox.exe

71 B
87 B
1
1

DNS Request

www.googletagservices.com

DNS Response

142.250.179.162
8.8.8.8:53

tpc.googlesyndication.com

dns

firefox.exe

71 B
99 B
1
1

DNS Request

tpc.googlesyndication.com

DNS Response

2a00:1450:400e:80f::2001
8.8.8.8:53

www.googletagservices.com

dns

firefox.exe

71 B
87 B
1
1

DNS Request

www.googletagservices.com

DNS Response

142.251.39.98
8.8.8.8:53

choices.truste.com

dns

firefox.exe

64 B
148 B
1
1

DNS Request

choices.truste.com
142.251.36.1:443

tpc.googlesyndication.com

https

firefox.exe

3.1kB
32.9kB
14
34
142.250.179.162:443

www.googletagservices.com

https

firefox.exe

1.9kB
7.1kB
7
8
8.8.8.8:53

www.googletagservices.com

dns

firefox.exe

71 B
99 B
1
1

DNS Request

www.googletagservices.com

DNS Response

2a00:1450:400e:802::2002
8.8.8.8:53

ups.analytics.yahoo.com

dns

firefox.exe

69 B
248 B
1
1

DNS Request

ups.analytics.yahoo.com

DNS Response

3.225.218.10

34.200.65.202
8.8.8.8:53

g2.gumgum.com

dns

firefox.exe

59 B
187 B
1
1

DNS Request

g2.gumgum.com

DNS Response

3.220.23.148

18.215.36.247

3.224.253.54

3.213.218.94

34.197.248.27

3.94.68.124

35.168.216.217

52.71.209.114
8.8.8.8:53

onetag-sys.com

dns

firefox.exe

60 B
156 B
1
1

DNS Request

onetag-sys.com

DNS Response

51.38.120.206

51.75.86.98

51.89.9.251

51.89.9.254

51.89.9.253

51.89.9.252
8.8.8.8:53

ce.lijit.com

dns

firefox.exe

58 B
177 B
1
1

DNS Request

ce.lijit.com

DNS Response

216.52.2.39

216.52.2.48

216.52.2.91

216.52.2.16

216.52.2.6

216.52.2.30
8.8.8.8:53

ap.lijit.com

dns

firefox.exe

58 B
210 B
1
1

DNS Request

ap.lijit.com

DNS Response

216.52.2.48

216.52.2.30

216.52.2.6

216.52.2.91

216.52.2.39

216.52.2.16
8.8.8.8:53

ssbsync.smartadserver.com

dns

firefox.exe

71 B
282 B
1
1

DNS Request

ssbsync.smartadserver.com

DNS Response

185.86.138.150

185.86.138.155

185.86.138.154

185.86.138.152

185.86.138.151

185.86.138.153
8.8.8.8:53

ssum-sec.casalemedia.com

dns

firefox.exe

70 B
174 B
1
1

DNS Request

ssum-sec.casalemedia.com

DNS Response

185.80.39.216
8.8.8.8:53

cs-rtb.minutemedia-prebid.com

dns

firefox.exe

75 B
181 B
1
1

DNS Request

cs-rtb.minutemedia-prebid.com

DNS Response

52.222.139.18

52.222.139.76

52.222.139.47

52.222.139.106
8.8.8.8:53

sync.1rx.io

dns

firefox.exe

57 B
73 B
1
1

DNS Request

sync.1rx.io

DNS Response

199.127.204.171
8.8.8.8:53

p.rfihub.com

dns

firefox.exe

58 B
148 B
1
1

DNS Request

p.rfihub.com

DNS Response

193.0.160.131
8.8.8.8:53

sync.go.sonobi.com

dns

firefox.exe

64 B
121 B
1
1

DNS Request

sync.go.sonobi.com

DNS Response

69.166.1.10

69.166.1.12
8.8.8.8:53

prebid.a-mo.net

dns

firefox.exe

61 B
77 B
1
1

DNS Request

prebid.a-mo.net

DNS Response

147.28.146.89
8.8.8.8:53

ssp.disqus.com

dns

firefox.exe

60 B
245 B
1
1

DNS Request

ssp.disqus.com

DNS Response

34.235.214.126

3.225.85.119

50.19.34.26

184.72.144.54

23.22.136.75

54.86.102.114

3.219.119.70

44.213.191.194
8.8.8.8:53

sync.adkernel.com

dns

firefox.exe

63 B
109 B
1
1

DNS Request

sync.adkernel.com

DNS Response

77.245.57.72
8.8.8.8:53

cs-server-s2s.yellowblue.io

dns

firefox.exe

73 B
137 B
1
1

DNS Request

cs-server-s2s.yellowblue.io

DNS Response

3.226.99.159

44.215.157.249

34.225.236.157

54.174.190.28
8.8.8.8:53

ad-cdn.technoratimedia.com

dns

firefox.exe

72 B
128 B
1
1

DNS Request

ad-cdn.technoratimedia.com

DNS Response

152.199.5.184
8.8.8.8:53

match.sharethrough.com

dns

firefox.exe

68 B
230 B
1
1

DNS Request

match.sharethrough.com

DNS Response

34.199.223.174

52.20.26.116

3.216.226.119

3.223.214.240

3.217.98.147

44.209.72.229

23.23.229.19

54.162.239.167
8.8.8.8:53

hbx.media.net

dns

firefox.exe

59 B
75 B
1
1

DNS Request

hbx.media.net

DNS Response

95.100.244.20
8.8.8.8:53

onetag-sys.com

dns

firefox.exe

60 B
156 B
1
1

DNS Request

onetag-sys.com

DNS Response

51.89.9.254

51.89.9.253

51.75.86.98

51.89.9.252

51.38.120.206

51.89.9.251
8.8.8.8:53

onetag-sys.com

dns

firefox.exe

60 B
116 B
1
1

DNS Request

onetag-sys.com
8.8.8.8:53

emea.vap.lijit.com

dns

firefox.exe

64 B
160 B
1
1

DNS Request

emea.vap.lijit.com

DNS Response

216.52.2.91

216.52.2.6

216.52.2.39

216.52.2.30

216.52.2.48

216.52.2.16
8.8.8.8:53

g2.gumgum.com

dns

firefox.exe

59 B
187 B
1
1

DNS Request

g2.gumgum.com

DNS Response

34.197.68.66

3.220.23.148

35.169.77.225

52.2.186.127

54.173.35.109

3.226.160.148

3.225.218.40

18.214.132.150
8.8.8.8:53

sync.1rx.io

dns

firefox.exe

57 B
73 B
1
1

DNS Request

sync.1rx.io

DNS Response

199.127.204.171
8.8.8.8:53

g2.gumgum.com

dns

firefox.exe

59 B
141 B
1
1

DNS Request

g2.gumgum.com
8.8.8.8:53

emea.vap.lijit.com

dns

firefox.exe

64 B
129 B
1
1

DNS Request

emea.vap.lijit.com
8.8.8.8:53

sync.1rx.io

dns

firefox.exe

57 B
122 B
1
1

DNS Request

sync.1rx.io
8.8.8.8:53

iad-2-sync.go.sonobi.com

dns

firefox.exe

70 B
102 B
1
1

DNS Request

iad-2-sync.go.sonobi.com

DNS Response

69.166.1.10

69.166.1.12
8.8.8.8:53

a-emea.rfihub.com.akadns.net

dns

firefox.exe

74 B
90 B
1
1

DNS Request

a-emea.rfihub.com.akadns.net

DNS Response

193.0.160.130
8.8.8.8:53

iad-2-sync.go.sonobi.com

dns

firefox.exe

70 B
135 B
1
1

DNS Request

iad-2-sync.go.sonobi.com
8.8.8.8:53

a-emea.rfihub.com.akadns.net

dns

firefox.exe

74 B
140 B
1
1

DNS Request

a-emea.rfihub.com.akadns.net
8.8.8.8:53

fr-xn.lb.indexww.com

dns

firefox.exe

66 B
82 B
1
1

DNS Request

fr-xn.lb.indexww.com

DNS Response

185.80.39.216
8.8.8.8:53

fr-xn.lb.indexww.com

dns

firefox.exe

66 B
131 B
1
1

DNS Request

fr-xn.lb.indexww.com
8.8.8.8:53

dheoaz9svaqd1.cloudfront.net

dns

firefox.exe

74 B
138 B
1
1

DNS Request

dheoaz9svaqd1.cloudfront.net

DNS Response

52.222.139.47

52.222.139.76

52.222.139.106

52.222.139.18
8.8.8.8:53

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

dns

firefox.exe

103 B
135 B
1
1

DNS Request

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

DNS Response

3.225.218.10

34.200.65.202
8.8.8.8:53

oeu.vap.lijit.com

dns

firefox.exe

63 B
159 B
1
1

DNS Request

oeu.vap.lijit.com

DNS Response

216.52.2.91

216.52.2.30

216.52.2.39

216.52.2.6

216.52.2.48

216.52.2.16
8.8.8.8:53

oeu.vap.lijit.com

dns

firefox.exe

63 B
128 B
1
1

DNS Request

oeu.vap.lijit.com
8.8.8.8:53

dheoaz9svaqd1.cloudfront.net

dns

firefox.exe

74 B
298 B
1
1

DNS Request

dheoaz9svaqd1.cloudfront.net

DNS Response

2600:9000:239f:b600:1f:4c18:bd40:93a1

2600:9000:239f:9200:1f:4c18:bd40:93a1

2600:9000:239f:c600:1f:4c18:bd40:93a1

2600:9000:239f:b200:1f:4c18:bd40:93a1

2600:9000:239f:1800:1f:4c18:bd40:93a1

2600:9000:239f:9800:1f:4c18:bd40:93a1

2600:9000:239f:f600:1f:4c18:bd40:93a1

2600:9000:239f:6400:1f:4c18:bd40:93a1
8.8.8.8:53

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud

dns

firefox.exe

103 B
184 B
1
1

DNS Request

ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud
8.8.8.8:53

sync.mathtag.com

dns

firefox.exe

62 B
153 B
1
1

DNS Request

sync.mathtag.com

DNS Response

185.29.132.241

185.29.132.245

185.29.134.248

185.29.134.244
8.8.8.8:53

pixel-eu.rubiconproject.com

dns

firefox.exe

73 B
157 B
1
1

DNS Request

pixel-eu.rubiconproject.com

DNS Response

213.19.162.80

213.19.162.90
8.8.8.8:53

pixel.rubiconproject.com

dns

firefox.exe

70 B
151 B
1
1

DNS Request

pixel.rubiconproject.com

DNS Response

213.19.162.90

213.19.162.80
8.8.8.8:53

ssbsync-global.smartadserver.com

dns

firefox.exe

78 B
263 B
1
1

DNS Request

ssbsync-global.smartadserver.com

DNS Response

185.86.138.150

185.86.138.151

185.86.138.154

185.86.138.155

185.86.138.153

185.86.138.152
8.8.8.8:53

id.rlcdn.com

dns

firefox.exe

58 B
74 B
1
1

DNS Request

id.rlcdn.com

DNS Response

35.190.60.146
8.8.8.8:53

ssbsync-itx5.smartadserver.com

dns

firefox.exe

76 B
172 B
1
1

DNS Request

ssbsync-itx5.smartadserver.com

DNS Response

185.86.138.152

185.86.138.154

185.86.138.151

185.86.138.150

185.86.138.153

185.86.138.155
8.8.8.8:53

hbx.media.net

dns

firefox.exe

59 B
75 B
1
1

DNS Request

hbx.media.net

DNS Response

95.100.244.20
8.8.8.8:53

cs-server-s2s.yellowblue.io

dns

firefox.exe

73 B
137 B
1
1

DNS Request

cs-server-s2s.yellowblue.io

DNS Response

54.174.190.28

44.215.157.249

3.226.99.159

34.225.236.157
8.8.8.8:53

ssbsync-itx5.smartadserver.com

dns

firefox.exe

76 B
145 B
1
1

DNS Request

ssbsync-itx5.smartadserver.com
8.8.8.8:53

image8.pubmatic.com

dns

firefox.exe

65 B
142 B
1
1

DNS Request

image8.pubmatic.com

DNS Response

185.64.190.79
8.8.8.8:53

cs1561.wpc.edgecastcdn.net

dns

firefox.exe

72 B
88 B
1
1

DNS Request

cs1561.wpc.edgecastcdn.net

DNS Response

152.199.5.184
8.8.8.8:53

cs1561.wpc.edgecastcdn.net

dns

firefox.exe

72 B
100 B
1
1

DNS Request

cs1561.wpc.edgecastcdn.net

DNS Response

2606:2800:21f:2cf1:7be6:911:71d9:25f7
8.8.8.8:53

cs-server-s2s.yellowblue.io

dns

firefox.exe

73 B
157 B
1
1

DNS Request

cs-server-s2s.yellowblue.io
8.8.8.8:53

hbx.media.net

dns

firefox.exe

59 B
130 B
1
1

DNS Request

hbx.media.net
8.8.8.8:53

prebid.a-mo.net

dns

firefox.exe

61 B
77 B
1
1

DNS Request

prebid.a-mo.net

DNS Response

147.28.129.37
8.8.8.8:53

1.cpm.ak-is2.net

dns

firefox.exe

62 B
78 B
1
1

DNS Request

1.cpm.ak-is2.net

DNS Response

77.245.57.72

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\activity-stream.discovery_stream.json.tmp

Filesize
158KB

MD5
6b1a670c1dfcc04a49fcc799dbccdf28

SHA1
c0ac6f9a7baf4f22c1910788877da94501d4d0b1

SHA256
cdcd3b317a89c7a26e7fd04748969f2bf5e278a923205d2989f52a10641a5067

SHA512
f981b67e4abd87843134d48cd63d05898d3713a0a7ae88d54732495fe66aa0805bf567c999508d64f686eaa86b75739743db552ddc12b8dd8cb0f44d317a0510

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\10019

Filesize
9KB

MD5
8b1fa109a4ad84a1ef5d60816306cf78

SHA1
dbf2e95f71bcd4a83aa9cda27ed706551e3d0bce

SHA256
48535b1154f9917dfeb92afebc231a2d6d8b9503ae70edf9d0622f1ab11cdb3f

SHA512
809a2bd4ee42dd8674cb8b687033b392361df0ebf6940e1303dbb4c477c85e54f438453c246bcc98ca5803cb0c8ca355c84b0445cb699bf2d670d193dea13916

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\10047

Filesize
9KB

MD5
b0c96ec020f09ae0675849679d8de277

SHA1
94bfe17e1bec512448fc6c1969f2c45c6de4cad7

SHA256
09c4251b7f373b502d88aa828709628e784ef4822b51bf4110a1ca823ad1f6b8

SHA512
d3feae7899c4a2f9c7f6e4d7e507b2f81dda0a4f65f76c5d318b8bdc1b6b08954339db113e1ba3974ad394f5aa4f5f9f604a1f8e1f4ae084aecd8b7a01cfa80e

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\11273

Filesize
9KB

MD5
4daadba123b7d691c4eb5f222917b1db

SHA1
8782f20171b21d5db72ab38af95b259d5a57fb42

SHA256
6d6ad04f1554dbaf617f6d4d7fbb6b2b8411a71e48711f2c499ce11f6cf4f058

SHA512
4f4d2ed7e636630cbf40d7f7b24a9068f1fbfdf1a59235e498eff1c5fba321e39bd90421df1701e5c55c7f05f98668cfb96bb3c3065b4445ca7fc98e652c3d32

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\11614

Filesize
9KB

MD5
a09bc71a3d4d27eb1e38eff36544737f

SHA1
3938f510ddb890343cee99efbe146a1d934ce9f4

SHA256
1d8d3beb8755f3fd40a65c1a0c8fff7ab10b4c5d28923826db67146d3f678b39

SHA512
909f85b8c06bcf48b49d49be2d59aa4c06aa0a52aaaf83593a562afe2a6fa5598faa43ddc90cad76a957061851d0134c4be172fb7287f5af78eac08639fcaaa4

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\11822

Filesize
9KB

MD5
a8f5afc9d5ab232775b0faa91e22af88

SHA1
2a29b9dc87e6bfb90b9a9ae3a03d040ab2a60873

SHA256
d3582427a6e1796567f2a6e7fe02b2bdd68ad27bdb0c5f2a5ff25cf5f1ccc780

SHA512
7c4a0ae608fff7534297c73ab7d0cffa6e26659f3657404b45c51d2577af125bea5e34133b96c00b735a066f90b3e79db4c231e41014d916dfca834f422f6a6a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\12247

Filesize
9KB

MD5
b9030c07993ae855fc85c322f6cf00ed

SHA1
686dd269954b21ff4345e2bf1a74a3fa767a776f

SHA256
adf9c87c0412fedcee11500476759aa111be7495b78f22f66bd57005a312849e

SHA512
011bed014c44c5600b6ed62b96f5e266183e4022b35c813cb6a951a2ac8c3b9ee7ea7a8d4a4044f5b69c5123f171e5772dde28f2693d3a23138f45c23942ea74

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\12527

Filesize
9KB

MD5
cc945120ab015239d281e56328968f14

SHA1
ecb497fb0702728af7ad5cdea8ea743f90a27dc4

SHA256
33b00359aa8eb55fd230d0d9b70de67fe933585c7ef93785a8c76e91d290d0bf

SHA512
fdbe95d5bce680dd0b5f2bcfa675a2f2dd5cf21fe86f33c478c5b44ee547ee4c47e27e149a4683e2c44412c8d622258a3b943feafc9b818e742a220945d985a0

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\12725

Filesize
9KB

MD5
39a34c8c6caa187e96f2702387cb636a

SHA1
6463bddd1dc20e3c6956c01af2c1b70a7113729a

SHA256
1562e950508a9fd09fa35c162d5fb1521f404f0305622a3b0e108fae9dfd7a12

SHA512
1f11927145c34c445fba8656c70de837d847111404a1c25a5323ff2fd6900d7242055b56cc8dc1d908b446cf0c68e8d2697f3279343872810baa177e308a1cc0

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\12984

Filesize
9KB

MD5
1f1c9e1770b472eaad44a7957c1b2264

SHA1
4fa2852578149de412e536f643c9aafcc2b7cc90

SHA256
158bb519fb995a669e2689899ae341494813fbb63a816d18b84acf7f92ee57de

SHA512
da92dc42577223a96404f651a6f53b1895a3970a169a518b72333de8950a10ebd492e71acb8e2f88421bcfe4c6fed2ec551042a65a907630232ddc0b17073478

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\13213

Filesize
9KB

MD5
e48dffe5558b8a7d5297a4f7bd0efb59

SHA1
9fcd55b80494a14c282715354e68833667eff48f

SHA256
a2b24442c50444281c9f8ba42442b4d25f070fc0ae3446c08940b6096910c936

SHA512
5e58fa77ecbdb8442eda8cf22d9e6c40213c3cd1745b36e2facc47631b45289448b5d8b3f690113e14996707af86945dc934d4de93b9ea71d42c18cb86621c61

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\13420

Filesize
8KB

MD5
baa7063c5991aaaf21dafe9448881d26

SHA1
1b722615f0fbd34fcd83e21072a3964a47a34d5c

SHA256
0874a93c16412a659182f8724b3b410266c92330b666950004685b86de4efb5a

SHA512
d40c3e69565957bdf9becc43a6e58695fadd3b8102fb3d38ad47b3047dd59a619f170badbf7c7456d8c2324ab51048c93a1e80148d9841aaf68f236601cdad5b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\13685

Filesize
9KB

MD5
4d56178d5e7a191d23a1a047cf092979

SHA1
c29e5785826b2f05a6b8be6c83b4663623a7561a

SHA256
9fa44e1bb0099597c40a14800b81e151484af116ab47e749c135b295429ade76

SHA512
e94af0cf10da5834963b7d9a3bf195141461d0a5511ec43a1054ea71c0779ac7cdd3e3f7fc4c41e7f9afd648af29b2c44cdcee2ebbad49be849b2489804ca497

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\14109

Filesize
9KB

MD5
56a3b90a7a701be16c4ff33432632037

SHA1
57908f653b22d0974c67ba706d719258495d02e0

SHA256
72dbd0562877bb262d249adebbacac72d9e90497cb06ce6beac330311db0afb9

SHA512
a8759a7502813eed3a9a2b3953ee7cd3dfb8c46716597ea44551b5efee8d0f5cd4411bfd699eefdd97f3e85d90ef47bb36f4c33ad162f8195a9da555b72e4d50

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\14238

Filesize
9KB

MD5
61824e19381327cc449ab88f66a8c0d2

SHA1
40a2e12ac3baf2d2733f361f582318c3eac7bad1

SHA256
2c527f13ede0d75ef259fd5f50c0b039653d3b57da479ae0ce5d63730c5a86c7

SHA512
3b21b89189f58e17c6a5bd3fe6a22b121c08c64ef0156d11c4002d9b744e2fbafa83cdb83855c217b4bb1fa239a707f826ccdc2229fc404e415d367c113f7eaf

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\14755

Filesize
9KB

MD5
f050a1647afa4e1e6cb7b721b37c2229

SHA1
48b54deb963b862af8cb6cfd6d16407b86d5f36c

SHA256
6a4fb03b047f46c2154dc4c3e3e9c4004e2c973551fc90eb01e306cfd7be1cf6

SHA512
fd27546ca5cc8fc64540a204eee38e3c27dce648d17d230557dc6f9e09fa2cab46303fcad3a81abe27ca57d325bfbc19e3ac5e16e0befccce558ef933887022c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\15128

Filesize
9KB

MD5
2dd543053567cfc9f889d87f25de1d0c

SHA1
aca0d277fb3e991750ee0f1cd1f975e9a5612187

SHA256
190c7f3b5985896d955befcc5d1a580b98c27aa1223d30ba8e166d586d9888d8

SHA512
051ed1e0ac4eca07276d7b10369e16954c32eaf27fb85cdc8d386186609b6bb59a6ea457fb379d8911bda7fd78104b891be958df01ce1af364abc51f7a541055

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\15376

Filesize
9KB

MD5
50cf591cad8ff506406c146ce3a17ed0

SHA1
c6026655afe7d4edf3d704371a2ec76b5183918f

SHA256
1613e6cd363976dd61b3abbcbf43f7b1347f4b0c3ae24a0aa7bbba391f0a66db

SHA512
0f6034567adf576d63ff68a105bf20684df95657e5da9de9861a2fbb234cf2c571f7c7cf84a42e22b501287fc85301732f83083653406f5b2b5cff0d9f5593c7

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\15392

Filesize
7KB

MD5
08e002b9ab83674e651673dca6f22c07

SHA1
9171fc427e503ab831b087934d74f1eb5278f8aa

SHA256
804e469d6dc8f0faa61c697de584f9797c8f86a135dfd3e9d20ddfb4bcd15f50

SHA512
2fe6a418b2535438054cc8a866bca7b3a4b2c6f425b043812d234452bb4dbf0bf170793c7c93f4b20556cf4442259ca4bbcfaa588e76a0d77df7e9682bc902b8

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\15640

Filesize
9KB

MD5
130065d5c4e54af88dbdff4569ddb1eb

SHA1
ff7db0dd1402b879cb69975bb480cba94cd12745

SHA256
56c3ccf37abc6ef28aa2cc1e0c447c46930ca25292b5be46de851dd6a760ee72

SHA512
37e3af6bf874fb0b7531dc62d815487edc86b3346c495830f2f71d16a0cba812fdc3d97278c27b846cc13139f521ff70429ef4cfe6b7b14f0a7e1e9303a56884

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\16021

Filesize
9KB

MD5
fe061653f64115730b2f1ce330c5657c

SHA1
563e28ab850dbcab7cc9daaec276bffc47347562

SHA256
7da0bcbb013e31b78c27417c7d02a97973147b8d10d3ae9de02693904b837b74

SHA512
69103296bfc8c5078dcde96916487a1b8135492b91db46cefd55a0ea72074740491f988f366a71e5e850d63831c35ccbbf0dc769bcac7ae37389daa691732d8a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\16174

Filesize
9KB

MD5
169aef73df6aeae495d085240c91c27b

SHA1
244ec874c670983befd29ccfb4cd11dffad9a57b

SHA256
7fcaaa9e2999f6f767c2eb8fc7dfda16c2e34d457bca20a9ce6b982fb5e52e38

SHA512
0b5995ec4d04faf449d8769b0b454d03b4899c632660b08d25ffe731f9b26e5bb8b08b81330a621f342226b403182723a2df8fe6406a6fd0176d71c3593f7044

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\16322

Filesize
9KB

MD5
be7887e9320604b9fb6d304cbc3e1402

SHA1
a9cd600677d44273829dce8adc21b7797611f985

SHA256
ed6d63fa6ee7e898ced50a2af22fe8a866f5650d09de84a894ccf31fbb3932e9

SHA512
c76607be08bf866fbfa2d3add464a5446fb903dc5f1068d377ce5ad777c773b6fa0cbbeebc53863dd93fd5801a066f438d365ebac4b180b184a70befd1128f5f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\1669

Filesize
9KB

MD5
246afdde7360d8fb765767b51f61688a

SHA1
ebd6d77d5a8b3c67d610878a929f3b797ab34aa7

SHA256
757132940d07ba27a58b5a86c898060fd28d9a34aa0304ebee401a59c99e1db8

SHA512
a912c37b8a2b414c000d9d828234dee53117032aad7578adac6478b6d5febe4ee78956a880fb192aec2a06338c10dbe1cfb216838fc400fbd8fcd141a484076a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\17047

Filesize
9KB

MD5
7d79b138689696ccf68ddf0ac54e3fbf

SHA1
6524654a723f0fb549708dc5d807da76a37e8189

SHA256
637d50011b53d2a43ab2bfc116dd964c96576917c5352b56508765a91391a23f

SHA512
519a022dbd8bb65f7f7b9b9a5fe77a5a0a59047695caf5eb86a7413811aabfac26fa8d439c0879fc13945f2e8c62199cea551b1de5498ebcb7997d9795471468

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\17103

Filesize
9KB

MD5
7b1b0effa8db2b4d276313190ba18839

SHA1
b6a99259af016828a32b2fb31ace2073620761c9

SHA256
d3b13702d765a6d6d80c69a9b01b267a9515f1f6c8c061e7156a53b6a20c99ec

SHA512
11d1bc1e129ec9d26c0414f0b4207f7d4d6ae5a3f27c65c31fefcd1719de6503169b95dcad605ab1bae7432c097f7af41bdd73dd1c2f2bd4683bfa6733c4189e

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\17292

Filesize
9KB

MD5
6b4d876f8b9ed4a52c1dc732ab0de798

SHA1
6d216dd2164f27d341e7fab6d13ee448c622941e

SHA256
45a18652fbbb4d9a51a5c30ea19271b9fecbf516e569b9d54f7eef6f2117a231

SHA512
0ce47515964ef01e38ed339ba53a81721386a5ed87b02b8e64057dc08be1b6eda931a44448052b4298d2dfe34ce22a4ccb3102d1ff39d130a847c19fb3cd5f54

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\17332

Filesize
9KB

MD5
74f2383e343eaa21853e3dcf117d8030

SHA1
5bc1086ecadbfb95151a93dd9bac74930c0e9633

SHA256
a165af821a15c450ec21b01f1b4c21e392865cd2ee81422094938866c52f0f16

SHA512
b3ceaeb5809669a4adcb481a6a25eae14e5a33569ff9f6fba0a6d5ee2dcdc867834a022da51e84aabf65027f8d0f7696e9df3d479cff7de195f097d803d319c0

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\17423

Filesize
9KB

MD5
e09ce4916ea761c349baa4fb3c5ceeee

SHA1
5a772c4a924449559926404ff60e895272e7bf23

SHA256
efd27b2021e81f07f2c5ac20d1c294601ba152e2fa991a94f98a31ef4605c30e

SHA512
02641797f7f7133ca90c622d5807d0863536e1111ec7712f17d44c8f072c39e84260d0aa727f3086dbb73bb22a209fc2706d196f174046608a11ff1abfd9bf56

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\1745

Filesize
9KB

MD5
fdba64e52c18a0d859599a8047ff48a4

SHA1
995f7241fad0cd8b17865e4a21293e8e2d9f6f61

SHA256
ca00392beafc36b9cd1ff9240e6153afbaae0e3f7dc772c61474c649c986e49a

SHA512
44e586e23ecb43e2e3a9c2930b77cd5d6a8ec5ab5869daf753028772697e352e3a6f996b8379710650a4e32d958ec1c66e25565724bab086f8fba7d10e371763

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\17768

Filesize
9KB

MD5
ceb587bddc5824d3fa8a95532bacffff

SHA1
0282f1753441b3ae5208dbf336bcd2f467cfbd1a

SHA256
7fe13f0d68b24be2537cc8114649b33736f2f19bbd256ee158d6af26b9189596

SHA512
e066a5cd43383b56b512b4024dc07832d4ca5bd4019408aa1020a487871f10bdfa9833e37ffba39ebfaa680f1f390d23253056690106fe63aec7cf5607fa1117

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\18029

Filesize
9KB

MD5
d601f019a0c27447906817faadce036e

SHA1
066733c8232a006dbb415cc29684b64032c5cdfa

SHA256
67dc3d21b02441aa55ca0bd5450cd242f722aeb0959637eead0bb52adbe3a466

SHA512
c6018fe6d5c1fe07bd36223b39fd475e7960be8bc71057f80ea82035814a910fe5fd8fd8cd7d132de3febdf91864ed5891e469e256ee54fcbadc9867d4814d5a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\19094

Filesize
9KB

MD5
bac7e987248d8d5a347bfb79e735f3fb

SHA1
4974fc58cfa29b7fb694d3ae7bcbc9b0a0f7e636

SHA256
111aa42ec1dcb1418c1c9a694a1fbedb5522b59175b36889daaa01863bd3af71

SHA512
be6d4bd738af85a7dbde410dad41364954946f48026bff52f48722360fe4f10395140d0639d5a11dd26b6b379ed0245306f6fb142c9fd87a3c3eccf75d6096fe

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\20028

Filesize
9KB

MD5
35fbb2f911f0bf4d2411699921193f6f

SHA1
c385bcf28848861b57ea342620f7d0dc13a299c4

SHA256
7c76568f7bf246bfcafa1921cd94334533b05ad46450adaf04b6c8aec29b037a

SHA512
4c500722db30eb2c9be593a7a892392d2c923958ccb83cb86e4548a80bd484884cd317c20701a2b82243783c4eeff7a47e4a6e30a862d3cef02d6f7372874d15

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\20729

Filesize
9KB

MD5
c67f8868f9157388a7e28a98a56d4747

SHA1
5133321e0827b0c4f8a9291162dab1da0d149c23

SHA256
925dffa725886252a0e2b84c9b01c18b971464cca91b1a899bfd2db8776eafaf

SHA512
45f297fa9d3590d8dab250bcda9ea8d30bf5766d3038a7e596671a8e4bf24a0487627571eab7ce7e70b50bddf8a2a7f0c768f125f70a1a47ddc1c77e45dc9599

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\21191

Filesize
9KB

MD5
d1e99e9ba300872672681fd007fbace5

SHA1
475187e1809a6cb8aefaa90648beb2f413ff5518

SHA256
d894aba8ee38da86aa98fa7b064be199907cd573e0754c0bfe957b5252158131

SHA512
f01ad81b2b22025be22071a48162100ab52aa1238e1ee2fe9f02d7406a4c74f4691b570a80ea2f71f12ff4c3cd6bf3d2f7a4902fa07a1e287a5d116c2ea11174

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\22203

Filesize
9KB

MD5
ae3ef8f07f1a9a7143d8626458c409df

SHA1
9ada302870cba6732daa50d592b967cae3cfd327

SHA256
c0e0d55a12d657dd9323de02876e02beee73d48034362467e2be1d032a90beea

SHA512
cbcac7c69a8f29ee08013d4e200385b97b5a00cc1b3b2cb450426e630a7f80e1a187d500630fc1d71f0cc5c0e3cb3b75314971853ee0217e0109dc4291a81a6f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\23141

Filesize
9KB

MD5
86e6f113a8898ff83861136cab232ba0

SHA1
9cb0bbcee6337471059aa8d7abb050d41a53abf9

SHA256
00c5331225dc51d31aaf15466eca8eb5ee29c9ca4ebe389eefc5a5507aa44822

SHA512
e61ac216b2ac9bb6921a96c70551fcada6bf74b1164afbc98ba502b5c9783bd772d2b003c2a7c2737261ee0abd9c412e8a3492a1da15f25a1c171cdddf3fd08f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\23614

Filesize
9KB

MD5
c11d38828762f470751234c48ad4a05b

SHA1
e6da23210d08151e314fccf70f69d6594fe63870

SHA256
8fe7d3b9cccfec81a5188c16511ce2bca9c254d64834b2f2278a496a34fe5b03

SHA512
0f548ad7e77704c4c1cf4485145085697cf383d5ff9e3cdd7c3f6ccaae398dcaff826c81497a3772db3bb4607b7cbb66fa754c71313180a13fb0db51fa3a6d96

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\24732

Filesize
9KB

MD5
325526e81ad9e9b51a73dffa0304493a

SHA1
906dc4c7de6497d5042514fb5b472cfa945c804b

SHA256
8edfb12f8b86610c8f233bef0f3567345c6c98c9fc53a1677b40bab198831cf6

SHA512
6dbd30559d0635683bdecba4e16f13b0453aa643440f42fb64269616e1efb9eb59208887757464e9fa300ae5a5f3cf0383f5270163f6eb298e475be5bbd5e697

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\25361

Filesize
9KB

MD5
86b66664dd6a04c87d3bd5991b6c0c7c

SHA1
3a41b0aa67357dfdc25a3908f2c1b6c7348928c6

SHA256
f1fdd645e17218ea7eb1756be17950722bf8922a0a1eacf73460e215d199a799

SHA512
745091603ac879b8e2efa0dcdb5e13c2690f18d89d10daacffa3927e0ff45a2aa97f55251f3b7d83b84d5224ae270d3e16a4ebbcc68b65324b416985e3e768d4

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\26102

Filesize
9KB

MD5
04a0c92773eae239ac30c4f9774bf6f6

SHA1
62d3af6df285be906ced7a9253c6df5fbb6d278d

SHA256
4bf79704a28cd0d3f089e3efa1abb291f728f84964ee3f7136f917896953a0c6

SHA512
11b004ebd4f9cb7bc5f3ab99bce61137dedfc323cf2dbc7b35d1fd3ab679990f343e02b8f0921f3e3978f85f4d2c9e6bdff7d78c47cf0d7075aeda9e68b71913

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\26250

Filesize
9KB

MD5
66c3b365eae100fc44cbf9f40e0125b8

SHA1
cac5e4160768afc2519c3c8750d1e00a1f1da148

SHA256
da1c2054d6d88f3e52f2901ee74b93156e73f635619578f6cf27f2fd7835ff4c

SHA512
157498cefbd9e0bf5f41e60196436ea472e9f0b5d537d10ff7d79cf775c0d82c9ec07ffd0186d5d0f839f1e5b6eaf4b6ee3d44649ab04bb9e354447065eff751

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\28074

Filesize
9KB

MD5
a3c4789d49809d3e8555e22ad861afe7

SHA1
471ef404a4f102f8b0459bee9ae072561bcdd268

SHA256
780c66749d35909b12336811efb9c19e5833ec5cdb08e4fe2d94172cd63fa107

SHA512
cc6cf6d549fda72bd2b88dc8199ecf1be947ddc1b7798649f9a8b6b249b0589ed8ea9810a1b521a741a2b7057c0915c47963a66f5036ec26e9280dc34103832f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\28353

Filesize
8KB

MD5
83e92f73821e0d9c648e5da5fb65a4a8

SHA1
5c0194a9f7077eb1863a12abbca6754c8b4206d3

SHA256
dcb944f352b697dbc49f249c43b581b6445e7e6fac0548d88510098b0358279a

SHA512
6aa10d946490c2a557d6a49ba7f127a9223c67abb2badd80e65633515444052cbb237d44f8f8e78afca0ae9bc850ace251a41fe8ffd5aa73ea6c61c05c5e3c89

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\28931

Filesize
9KB

MD5
e412a0b8244c77d68887f8dbae52ab29

SHA1
445ef9e0d35ebd7bbea84c9dc2fb589fddf9c9fe

SHA256
4c70e6d6eb1efe1ce2b9615ca2363ce16c7f3fa3ec47d6af004aecfd80d68477

SHA512
9efbb14a39bcc3dc2562feec54c8f0f3268a685f4a36088fa4e2f6f8d6747b29e208634bb1961d49abf8aa41bc5a305ea3b75c9e3451dfe4a72e03bf02b2674d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\30786

Filesize
9KB

MD5
181990f1914eca1c2f4c642090bb6d3b

SHA1
5e5f90a21ec11ab05ee388bbc0f3529ce6081ff9

SHA256
c2000ada945e5152fa03486dd0916045e4ff36b0de4768912353b39198f4a5cc

SHA512
2e34ad47c0ea40c8d33a717b90b646063f63f744bdce50505ca9a7390f0c42e0f272f3b7525f1d31ab3f3f45453ebba76cde7e68f9ddeb1503e8bb9f2104543d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\30962

Filesize
9KB

MD5
304734a67f9a82657a719a07ea638839

SHA1
d82f08c7d786f0670787584dde8948343029507a

SHA256
c711f7805473b76f8963f5cfe0b841e86eb0a7057144e2933a94911ad9a90c3a

SHA512
e92e6be6f53fc34b57f8a96e362682cce512ecc281e10b0abf96e68c99df2f1dae24e689093d01aac38f4e78d8a2c2e09a3937d01b1564853b56d46e96ec186e

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\31492

Filesize
9KB

MD5
9d6ebf81a7c16ec77239fc25e20b65db

SHA1
5cfa019a34761cbd08c24aff3521265aa03d152b

SHA256
706d1154ca0018564e9f5270a5095fb8d15e6c55a76d303b84a5006ecf365034

SHA512
5e054fa8a4d96b47b9d380204d035aaa11980f3e0bd6415e8ebd9dafb2531c269b52142864a622e42758eb97710d8e5c8878bb72c50af183c69dd1691e344531

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\31760

Filesize
9KB

MD5
af9b41136047bc22e976b1d209aa7b24

SHA1
837c226a89e9632d3901429982f5bb25565f26dd

SHA256
8771e449c917b63788986a2fd056d0ffd67ef0b79c9c2afa2da279d27e2fce83

SHA512
b1275b6f1c6be112a77bdef1c1d8b3b5eb0cf72e89f372fba0f1e1ea1fe596373af5b6c6e24b3b0e5ce31fea0ca94fcc61eef93abff83262585a0bd2334922be

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\32273

Filesize
9KB

MD5
593b5b7533aff96e194d19109e659fe3

SHA1
8dfc7c8822ad4fcfe873763a6f76251c9767429c

SHA256
e1d4a2ad4d85415534f0daa653b84b8d69cff0e381860e940a092c5b31e36826

SHA512
30ac4ab828b199a55dcc7e1b131da5a1c2a4ccf3c6ee35e0da84367df13e7501051434dba5213f6cb33f9c481a6403bc482552caeb897d8f5833059a62b08d3d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\32597

Filesize
9KB

MD5
ff6cd12ce3dce79230dac11412860b48

SHA1
71cbc6c50702c5c4cac5ccea62a54b7a2f04bdd1

SHA256
7b9776c78b641cd02d505851a7c6130118d49a503c87148ca4ecc820f5c6f7f2

SHA512
b8b5062e0d6dde10c4fe5c7089a3ce6430b18d9a07848eb1a6f3788ffc1fd9ebc698fe1073bdfb7ea2f7b32648aa0560259f271b9445cb492a9d1a66456aef04

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\4122

Filesize
9KB

MD5
fa8197a066d46d57c7744cdce5c61427

SHA1
aa783032dda08ff2b671504dc16b9cb05885ce47

SHA256
e6d5bcc2d88d11da89793755d9fd202f2ad447891755a72c2d859ce1c4fb14f4

SHA512
050620b2dd12df8e1f54cf069ad49bd0e81e963cc78d9e257ec9ee2a4dd2312a368906b4773b3843242ba53dceccf2e8e5c7c26f4fa2d9566a1dc33d247897e5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\5371

Filesize
9KB

MD5
3c32a71f0248a1469708adeb038eb098

SHA1
9c868682d21a235420f69364952dfcc203ec1a34

SHA256
35b6cabb52183f8e4bf73a879a9f021dda7355d47175c95958920cf0d1bc3da7

SHA512
eda484b678ec5bff53fd9d345bc3b221aa72d2f97e7dd8643fdfcfd5a26c3893ed77fe25bb640c01f9c3281a5951a9de116352da8fd05348c6de0e2412c9a846

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\6890

Filesize
9KB

MD5
f4a340687f27962f5c0a32148b341961

SHA1
7390eb90c6ed35936ce69107447640151f4d675f

SHA256
2853fc5b855fc9f0ab8c98228046bb9d2db4723ffdeb42b4cc1dfbfaaa9c6e0c

SHA512
037853ee5332f8cd9a2dc679db664b56b20883fa7304cd4cd1a4f1b9d82d588335aee2ef7f50690c8aed4fb472987a50ef4dca2cbc4a8474dbb33433db9f9d16

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\7326

Filesize
9KB

MD5
7e75558e18738e27d308169c8a78a56d

SHA1
ec45426807e3dbba4c5b685fcf7d064789f7924d

SHA256
7ed68fe29d28cb8405725701afafd8c634a94f1e93ed5f3aa7edc75614c20538

SHA512
6a0cb650e3d838571b023fb08d917958d3b279948eb99bb60d396884152a97ca87e933ff3bf87440ba749a383c9be2f7c8d600455d127db949c5254144ceaf93

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\7571

Filesize
9KB

MD5
11edba6ad51b8b4cd37f765c4cfbd9aa

SHA1
16e50fe52025a1c29591baaf89f20e789f1f5586

SHA256
0c33b80fb9819fca5c2b7180834c51e2a928d86332b42ee8afbd3ede4442148c

SHA512
f2064bf9abe3a4e46db1a81f96de928741e387f7eb408383fedbab7232e9026835c186dc763431ee85fa62e8b1a2233e5233f6777558d494c2a407d8fb6df939

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\7631

Filesize
9KB

MD5
74dd05a7978f0909f7fec8328e71a8d4

SHA1
5d50f6f7d833b661b6ce3242b69bd144ec2767ce

SHA256
0ac4d1ca8b39f684dbf051939e0e07f75abc17612356181ec5c28ec72407fc9c

SHA512
d9d1a91d961cd7a5dea1e4cf8c357097d4e8937bad9a1802bcd160cf339b66fdd9623ba3bf0f9f204303aba9c115ddca1dd0cc89b69f9a11ca4e0e4d6d33ecab

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\7707

Filesize
9KB

MD5
9590bb7c5fda3828059c6675e1f96d44

SHA1
82e0afb4b4af7a1b4ecc88c5cba859e012a733be

SHA256
e24fb3dc748a88fea424fa0adde982356f8c42988fcd4ded3d1ca84321791dcb

SHA512
4db6538a4e009350c6413bc4b557e3ff73cfa5dda2c50ae56700d57bdbe63d91619441763a52277a64d7eb795216ba8f616a8d57efe4cee656e9811c39b37f82

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\8048

Filesize
9KB

MD5
fac4f7631ed0c412f498e0137436e59c

SHA1
d11a19e70b3c113c3ecaf4a11810abf7c1efc3e7

SHA256
c6b4324b31fd70d7d1487ddbc82a3048e3a3d82df97fd8e2f87543faff2ec90d

SHA512
1bad1ebcc9dc0a3338990dc9562c63e135bd1a847ffe8879f08d46780a9a186a4e675aef8981f63055639a1d5250493a0d02d18255586db1ff221a7ac0ed4f21

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\8825

Filesize
9KB

MD5
564d2e29889cbfd1323f04b65e4613be

SHA1
716c0f52838f2c0016119f01a69658f809372345

SHA256
7d64b9f67eb7bdbdf17be2fdad802e20a33624d35a3eb03a31d59eeab70ad36b

SHA512
81e1a290cc7a74459720966f89a89d4488d24ecddaf7bedb480209ea29a355f3e1fb61850546657c027bbf19c86d8009841ff1fd5cd03e8e8accc062ff3ad6b8

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\8978

Filesize
9KB

MD5
59a0ded99be3469249be0f9457877954

SHA1
2bdd9f910b89c0de5ef7681c57e2b92773906f5f

SHA256
7fb32f5f6391e7e52725ac1a288c110a08a4ab847ee2130c364237b6d84a4ba4

SHA512
4fbb61d37a09056a2fb9754073a7ebff8b5be34e09625c66b90e6a305f172419681d31f08d608909cb4c81523cf3d2db5eb20c7dd81b6e027598043b412f97a2

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\9871

Filesize
9KB

MD5
da81215c82ad450f677efa83b619c12b

SHA1
c2528d71fd55d1285460f48f1eacb5fa007c5c57

SHA256
15cce2bf1f3a592608b0e15145d344e1ab047348079154f2c55fb3e9463ecd7e

SHA512
589552358baf30dbafe17b325018c141c1f72fa17ae76d6646bb301560fa9e2f2bd4ee6676f5eb183dd5aaba2c142c53196aa76b4cb0774ce0a054bd8734556a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\doomed\9891

Filesize
9KB

MD5
69e9728b939831012b50da0b2fb5acca

SHA1
c8a37203da33910f51509078dda5aa4baba2c617

SHA256
30ae9f35216e70b1c3231942d4e5c83a3b3583cf92431215685aeee8587fcdcc

SHA512
9a979c5981bac5481556d0d361a9fa95eaf770e0003a3246b50551714b686ed8af11857a114ef8dfaa7be8b7592c8187abda579f309bedd083309960528fb481

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\019E6E81C87648C62CE6729B1517DFE1B56B9EF2

Filesize
13KB

MD5
0fe647745c4dd52957d608b0309fb526

SHA1
57713ebef8ba95026743e4afbfb6e92eedf88133

SHA256
c3edde94749d283f0979c286b96b178aba321b77d36a972ba17b2b2c40185590

SHA512
c7b1936bb46c173e2cf36b0a4ead1ffff55afc6cd47c91970c2827d1a0da0aed0ae885b01d488c2cffcad0f075caf0ff54bfacffd71caf8f086a3d0f51a9d69a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\0EB8950C9A801F4465046BAD3AFAB419AE445777

Filesize
22KB

MD5
5761c738187be6ead776efe9f980d860

SHA1
f28f07ac1a8da9197224f3868b5d805fc0464fd9

SHA256
5901d29c5c808d6086943c807211d6fccc78ec1b78a50226637b6693d0f6dc4d

SHA512
4a76827eac0b409ccd121af3a944cdc14b743a77f965b078f399892d2b2be1e0abb9e4d371f359f64dd91335dcc64e855a7aebefc891aa2a921bba2184d09978

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\118BB2BA245AAA64B01692DF29396B97E11FC1A0

Filesize
14KB

MD5
d6a63e995c86fa6a7fc6a4d19dca8a64

SHA1
1946ef4838ae5fefefdabeede1b47f2688956217

SHA256
87784df0d97bf3f601e88a8b5b4d6b8f9f6ad0a328844d9d65d8427432fc290a

SHA512
3d03c07be02e5fd6b39b8fe5a3167f66d2870a6992d65596b07d077a7d12fd7f7815b03bda8d44cdd5a5f58fd8378f18eb9fd591ff0dc6f4e007b0e1928e7426

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\1AB93F38FE8544D64D80D425F08726AEAD0A0322

Filesize
65KB

MD5
ad93ce8c0db0d4462a5bb5ecfcf28ed0

SHA1
e420c060a8d8a89179188e959d92bc8314bd105c

SHA256
e402f3d2e509ff67a074f8e224834a9cfc90610902187b9a2762a86fd366c926

SHA512
04b53ec8ea6e1702a7db02419c9a0ab3e8e5f58107890fb0f3993af1615e42bcb99caf8fcb90fa84accb30722fec8aba5f064690682f8d41182beb7f387eebad

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\2F704A14203B10E810939701125EDD86E8623BD7

Filesize
14KB

MD5
003a9cbfd146a76890f7cf1b13d5d614

SHA1
97f99c064023be753476c278f05cd2cb42d2e599

SHA256
a3f1b0d27f0da38e38480a930c8d8c361340c66a3d933c177102b91eaaaf5ff3

SHA512
b857a45f5c05f02d9510ec127b74347e6f04ac25f62f00e22eb918026a0e3ed2e81180a7d3dd658061c292432ebf7bac965d12daa8e3afb68cd971eb7a3b0eaf

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\39642D0F85ADAC3530CD1D982D0BCECD6E5CFE50

Filesize
38KB

MD5
6b8f74f8120256913c9c434ab8d6397b

SHA1
7e10fc1c33e970d3ddeb20c32d3b565c7561f18c

SHA256
deaac90439eb9ecddb6f787a1a0a1c719ea7562c518becda3d543a6f59099a32

SHA512
227adb5b6198cf876f9ac6751893adea33454d35df35d0162a08bbf5f21ae5e44f498d799e4a41393ca544bda6da32f87b095487d7c6c0436062051cc7831280

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\650692A44186B5788EF51AA6CC2B7F1836E9B1C1

Filesize
41KB

MD5
c008a998887a36bfe38d5a395bd9a45e

SHA1
c01ca051d855012dafc56d93b68ab55e9fae90c5

SHA256
5da83798ca5b92aa48dc53664ac530b0d97b2257b5377b7a2464f3ca3bcd978a

SHA512
c937d068428385e0c7397fc9f22bf32519898275cea219f2587bf6c855f56e858cdb48c42cc483c0ffd34e579caaf9fb5b8e686ff1b4bd774f949d9fd1ed8d07

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\70CBC3E50D0480B9C302BB7266AEEAA9371512E0

Filesize
9KB

MD5
be68d14ba3f360a046e410b7ec651e1d

SHA1
d11c387920719e8044ba3be0b97a0cb92290e6db

SHA256
7f243c63ce110e4d28c73ad44254cdca91e6fb5056326a90b0462ddaa5009922

SHA512
7bff0aafab42bc940f7cdd5ed5267ebd4c2fbbe8ea35644df18b97d3199c35e17249d54b7ffd69c7f398781bbecf07d437ead392dc584ae0a0d5f400b5ee05fd

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\79ABCF757D7A8F70C13E142BADE32F7495473466

Filesize
8KB

MD5
7a6963e2a5da216c2935bcbd68709571

SHA1
1735be7a223c301651faae882aaed00705104901

SHA256
fd1e2ba6d6b2ad0de8bd4be67fb6d890eeaaafeada68b43af2d5e268d1d880fc

SHA512
be512c444744350b9c1b3c25b42a48f9c30096fa6301c7e7205d1f7adcc73f3df55d1a47983180b48b8540121a6162f961fac5ab78c2a475b509a6b6bc03ad7a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\85C760C203F358453C354F1E235C1D954A92D369

Filesize
9KB

MD5
a2a86121435f3ecd8f15f62d4196013d

SHA1
3a8aea2d2be74867fb8b9a6620d50c29566b00de

SHA256
9638f584055984279e87855a8b171c6588d14b111134cac8a4ebb02670387349

SHA512
aa55b474af6ed0188918276d74a70ab40f9375606e007a3312b7e3ff1f1d29f9065887373d7ff6eb3bd8b5348a3f20206d6d1a07356afa4f67803efc910906ee

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\8D11680DCA2E576836A6550CE4015F998B8AD024

Filesize
7KB

MD5
1ebe61694695a27cc2334976fe56d6d5

SHA1
b38db89750dc680be9d54dce0d350f27af0ad2e5

SHA256
c43e33f27baf953c6c26a19fa2b383712c44bb573afaf400df906506e7fa2e20

SHA512
39723d476006cde7d3a385b49aa5399e75b73d9683c2e6e2e328d331300e43e7bce638455419d5a2e2e0fb03a09cd82cba6412d6a91a66e51c30cb6806d5c1bc

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\A5A4AB99EDC62594E398C49CA6E45E24417F91A5

Filesize
17KB

MD5
d16aa26a1911a0c03d5f42f25c568dbd

SHA1
641b389303d1b0d3e515be7c847e0fea2b1b4dda

SHA256
7c359e8224a56c60efdc5f2e2e5067bc8a39a804ddb8152035503d277aca94b0

SHA512
fe678dcb5a195429fac7ce2c5d71386a2f9c77955913e84137eb8a21553537c15e275edfdbbea60768e64263f03ac4d8cf4fbbb1b74ffe0c19a2b099f77920bf

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\AA218DBF4A424B5A620CC3F13B9EC23C88177E9C

Filesize
8KB

MD5
2bb57001788b832df752f15d059f1d69

SHA1
2df0161d7c5c419aa30d93a00c7b1b91b996583c

SHA256
5e6e93118fe0bdfe295adb996c659c5dc45d17c4d6d587674ea8a10baad7d0a0

SHA512
deaee1f2462ccaf4971ff75ac3944b152f083d17880a455527cd709d76bf8d9725080d10ceea7a2d58267353d0a444ee183990a6f000e97083d4e7334cf1827e

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\AB92E2A5FC3FC641DF36624A906B0AF96BCB5C2F

Filesize
8KB

MD5
b2f4e160b88382555ba8a0e067465808

SHA1
69b574dc57970c103f743c88d477012745521532

SHA256
f0c728ac57d9932e6243710c5fb7fe9af94eaec6305b1c3ad97fcf51613fa6ed

SHA512
2aac765fbaa417969a0f6a7e007357e876bf4441fa2636d33cd4145df2e50d73ee3b2d5fc5df162250302d1c922201b3a5684025bc7c799f9157de6938fef200

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\AF5AE45C37CEE6F4A286A9726124594452001220

Filesize
121KB

MD5
33b7f692b6b925101a8080b7262b0567

SHA1
2fb88e35217c53775ce3e61fe97e1800bdfd24a7

SHA256
340a56c9d1facbc9fd6fc00da97d495efe188e5dc676bf9c16b00769d3c48d28

SHA512
a78ea3e5f1bbdf94f9bdef8537eb699da813f5635b811560346cfc234c5fd269a8449a346f4958986bb715f4606806203f70e0f6929f204c7a6166962aad8b29

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\CA02BBD09DFA835246935F64B6F4EB43B712F589

Filesize
17KB

MD5
f625b8a2394624a644a84b9e11dd7ca3

SHA1
07c07327dbf4d1eae4548394446d3c84df6d3478

SHA256
33fc5072d1af0e2aebb82d9a79943af691df880c7e5374abc0ae6073afd7093b

SHA512
39d6db470ed9b36f1451c5b305f727860f263faa46c52d635614f889394d5e8a2f9989d02262863fdb9cb8b035ea6dd689bbe267d89449a8ea0239537ef927ec

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\D4ADB1BC307BA77DA492BD25BD8972279BE0F672

Filesize
26KB

MD5
bfc651430915f2d9e83e086b46e869ec

SHA1
2fac8a485205f1dbb8dbc32e5b408f87151e1c75

SHA256
59ccd85426c1598708794e76eae35e7397bfdba6d46ef65dda1818a208aae43f

SHA512
e65a17a56fbd6cf0a231bc0cc81ca509d36e006a07de16878651beb473fe9d205bae3869cbf9d60c681939c0042fc70107bf2f0028f06c929728b6595d367caf

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\D81AFFBC820A57A47F6ECA0EEC898A06ECC2167B

Filesize
180KB

MD5
f54adf1f145bcad0a4c44ae43f638b73

SHA1
c42a11c849dd80f2fe9a088448e59cbd92492e0f

SHA256
addb54735675dcf7341534ff7004511417fc0e23ddd1b1225628398cee567e85

SHA512
76aa745eb20ae598f22dd6e27327d2928d5517dc14a000483c13c2248b80759b80feebf7eecd4236dc54cb6dadd72705ae7feadba6118c8109592a21708558ad

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\DDDD0EBE1BB8493B69B7F85764E6C3CB0024C8EA

Filesize
988KB

MD5
f52e8d63afb803678b88c10d142201e8

SHA1
2c8ce8aa4732ad67111c59686a45940f3ded0d57

SHA256
460def7c0d8a0a480ce9fbbc58a4d8e66d4efe26369cba79f10341300d3326d1

SHA512
54646a96d8e4cab29f5d85ebcc5d525eb2b163b9ec4ee679a9c0ce3ab42120c87ac9fdeb200be50206e4fd61e0f6b574105614ecf4f4bed3f64533d635dbd284

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\cache2\entries\F1FAA4E89E085ED3F2074720750E3B2119164C6E

Filesize
15KB

MD5
d77eb52f4b3b7dd59fd9a083d60fdd18

SHA1
b0061536c82892f2577953edc0394e48e163f2b6

SHA256
2e1379d50ae463e6d6fb1c18073152f026b1c217f00b10a5204a3b64cbdcee34

SHA512
b894c7c1f98135c4e4cdfcf94073fab8818c0cb054dae550254deb37f58b9f977c9ecb2dd7e1aec7f5e5fa380a34c0969aadf14dc143808140b7af309d8acdf8

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json

Filesize
67KB

MD5
6c651609d367b10d1b25ef4c5f2b3318

SHA1
0abcc756ea415abda969cd1e854e7e8ebeb6f2d4

SHA256
960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9

SHA512
3e084452eefe14e58faa9ef0d9fda2d21af2c2ab1071ae23cde60527df8df43f701668ca0aa9d86f56630b0ab0ca8367803c968347880d674ad8217fba5d8915

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json

Filesize
44KB

MD5
39b73a66581c5a481a64f4dedf5b4f5c

SHA1
90e4a0883bb3f050dba2fee218450390d46f35e2

SHA256
022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17

SHA512
cfb697958e020282455ab7fabc6c325447db84ead0100d28b417b6a0e2455c9793fa624c23cb9b92dfea25124f59dcd1d5c1f43bf1703a0ad469106b755a7cdd

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json

Filesize
33KB

MD5
0ed0473b23b5a9e7d1116e8d4d5ca567

SHA1
4eb5e948ac28453c4b90607e223f9e7d901301c4

SHA256
eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b

SHA512
464508d7992edfa0dfb61b04cfc5909b7daacf094fc81745de4d03214b207224133e48750a710979445ee1a65bb791bf240a2b935aacaf3987e5c67ff2d8ba9c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json

Filesize
33KB

MD5
c82700fcfcd9b5117176362d25f3e6f6

SHA1
a7ad40b40c7e8e5e11878f4702952a4014c5d22a

SHA256
c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780

SHA512
d38e65ab55cee8fef538ad96448cd0c6b001563714fc7b37c69a424d0661ec6b7d04892cf4b76b13ddbc7d300c115e87e0134d47c3f38ef51617e5367647b217

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json

Filesize
67KB

MD5
df96946198f092c029fd6880e5e6c6ec

SHA1
9aee90b66b8f9656063f9476ff7b87d2d267dcda

SHA256
df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996

SHA512
43a9fc190f4faadef37e01fa8ad320940553b287ed44a95321997a48312142f110b29c79eed7930477bfb29777a5a9913b42bf22ce6bb3e679dda5af54a125ea

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json

Filesize
45KB

MD5
a92a0fffc831e6c20431b070a7d16d5a

SHA1
da5bbe65f10e5385cbe09db3630ae636413b4e39

SHA256
8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c

SHA512
31a8602e1972900268651cd074950d16ad989b1f15ff3ebbd8e21e0311a619eef4d7d15cdb029ea8b22cf3b8759fa95b3067b4faaadcb90456944dbc3c9806a9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json

Filesize
45KB

MD5
6ccd943214682ac8c4ec08b7ec6dbcbd

SHA1
18417647f7c76581d79b537a70bf64f614f60fa2

SHA256
ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b

SHA512
e57573d6f494df8aa7e8e6a20427a18f6868e19dc853b441b8506998158b23c7a4393b682c83b3513aae5075a21148dd8ca854a11dabcea6a0a0db8f2e6828b8

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_finance.json

Filesize
33KB

MD5
e95c2d2fc654b87e77b0a8a37aaa7fcf

SHA1
b4b00c9554839cab6a50a7ed8cd43d21fdaf35dc

SHA256
384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e

SHA512
9696998a8d0e3a85982016ff0a22bb8ae1790410f1f6198bb379c0a192579f24c75c25c7648b76b00d25a32ac204178acaccd744ee78846dfc62ebf70bf7b93a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json

Filesize
67KB

MD5
70ba02dedd216430894d29940fc627c2

SHA1
f0c9aa816c6b0e171525a984fd844d3a8cabd505

SHA256
905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34

SHA512
3ae60d0bf3c45d28e340d97106790787be2cc80ba579d313b5414084664b86e89879391c99e94b6e33bdc5508ea42a9fd34f48ca9b1e7adfa7b6dd22c783c263

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_games.json

Filesize
44KB

MD5
4182a69a05463f9c388527a7db4201de

SHA1
5a0044aed787086c0b79ff0f51368d78c36f76bc

SHA256
35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85

SHA512
40023c9f89e0357fae26c33a023609de96b2a0b439318ef944d3d5b335b0877509f90505d119154eaa81e1097ecfb5aa44dd8bb595497cdecfc3ee711a1fe1d5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_health.json

Filesize
33KB

MD5
11711337d2acc6c6a10e2fb79ac90187

SHA1
5583047c473c8045324519a4a432d06643de055d

SHA256
150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565

SHA512
c2301ed72f623b22f05333c5ecc5ebf55d8a2d9593167cc453a66d8f42c05ff7c11e2709b6298912038a8ea6175f050bbc6d1fc4381f385f7ad7a952ad1e856b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json

Filesize
67KB

MD5
bb45971231bd3501aba1cd07715e4c95

SHA1
ea5bfd43d60a3d30cda1a31a3a5eb8ea0afa142a

SHA256
47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d

SHA512
74767b1badbd32cacd3f996b8172df9c43656b11fea99f5a51fff38c6c6e2120fae8bdd0dd885234a3f173334054f580164fdf8860c27cbcf5fb29c5bcdc060d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json

Filesize
33KB

MD5
250acc54f92176775d6bdd8412432d9f

SHA1
a6ad9ad7519e5c299d4b4ba458742b1b4d64cb65

SHA256
19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54

SHA512
a52c81062f02c15701f13595f4476f0a07735034fcf177b1a65b001394a816020ee791fed5afae81d51de27630b34a85efa717fe80da733556fdda8739030f49

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json

Filesize
67KB

MD5
36689de6804ca5af92224681ee9ea137

SHA1
729d590068e9c891939fc17921930630cd4938dd

SHA256
e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52

SHA512
1c4f4aa02a65a9bbdf83dc5321c24cbe49f57108881616b993e274f5705f0466be2dd3389055a725b79f3317c98bdf9f8d47f86d62ebd151e4c57cc4dca2487c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json

Filesize
33KB

MD5
2d69892acde24ad6383082243efa3d37

SHA1
d8edc1c15739e34232012bb255872991edb72bc7

SHA256
29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a

SHA512
da391152e1fbce1f03607b486c5dea9a298a438e58e440ebb7b871bd5c62d7339b540eed115b4001b9840de1ba3898c6504872ff9094ba4d6a47455051c3f1c5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_law_and_government.json

Filesize
68KB

MD5
80c49b0f2d195f702e5707ba632ae188

SHA1
e65161da245318d1f6fdc001e8b97b4fd0bc50e7

SHA256
257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63

SHA512
972e95de7fe330c61cd22111bd3785999d60e7c02140809122d696a1f1f76f2cd0d63d6d92f657cdec24366d66b681e24f2735a8aabb8bcecec43c74e23fb4f5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_online_communities.json

Filesize
67KB

MD5
37a74ab20e8447abd6ca918b6b39bb04

SHA1
b50986e6bb542f5eca8b805328be51eaa77e6c39

SHA256
11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f

SHA512
49c6b96655ba0b5d08425af6815f06237089ec06926f49de1f03bc11db9e579bd125f2b6f3eaf434a2ccf10b262c42af9c35ab27683e8e9f984d5b36ec8f59fd

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_people_and_society.json

Filesize
45KB

MD5
b1bd26cf5575ebb7ca511a05ea13fbd2

SHA1
e83d7f64b2884ea73357b4a15d25902517e51da8

SHA256
4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0

SHA512
edcede39c17b494474859bc1a9bbf18c9f6abd3f46f832086db3bb1337b01d862452d639f89f9470ca302a6fcb84a1686853ebb4b08003cb248615f0834a1e02

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json

Filesize
44KB

MD5
5b26aca80818dd92509f6a9013c4c662

SHA1
31e322209ba7cc1abd55bbb72a3c15bc2e4a895f

SHA256
dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671

SHA512
29038f9f3b9b12259fb42daa93cdefabb9fb32a10f0d20f384a72fe97214eff1864b7fa2674c37224b71309d7d9cea4e36abd24a45a0e65f0c61dc5ca161ec7c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_real_estate.json

Filesize
67KB

MD5
9899942e9cd28bcb9bf5074800eae2d0

SHA1
15e5071e5ed58001011652befc224aed06ee068f

SHA256
efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a

SHA512
9f7a5fbe6d46c694e8bc9b50e7843e9747ea3229cf4b00b8e95f1a5467bd095d166cbd523b3d9315c62e9603d990b8e56a018ba4a11d30ad607f5281cc42b4cd

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_reference.json

Filesize
56KB

MD5
567eaa19be0963b28b000826e8dd6c77

SHA1
7e4524c36113bbbafee34e38367b919964649583

SHA256
3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49

SHA512
6766919b06ca209eaed86f99bee20c6dad9cc36520fc84e1c251a668bcfe0afcf720ea6c658268dc3bbaaf602bfdf61eb237c68e08d5252ea6e5d1d2a373b9fe

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_science.json

Filesize
56KB

MD5
7a8fd079bb1aeb4710a285ec909c62b9

SHA1
8429335e5866c7c21d752a11f57f76399e5634b6

SHA256
9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32

SHA512
8fc1546e509b5386c9e1088e0e3a1b81f288ef67f1989f3e83888057e23769907a2b184d624a4e4c44fcd5b88d719bd4cca94dfb33798804a721b8be022ec0c6

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_shopping.json

Filesize
67KB

MD5
97d4a0fd003e123df601b5fd205e97f8

SHA1
a802a515d04442b6bde60614e3d515d2983d4c00

SHA256
bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6

SHA512
111e8a96bc8e07be2d1480a820fc30797d861a48d80622425af00b009512aacb30a2df9052c53bfbf4ee0800b6e6f5b56daa93d33f30fecb52e2f3850dfa9130

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_sports.json

Filesize
56KB

MD5
ce4e75385300f9c03fdd52420e0f822f

SHA1
85c34648c253e4c88161d09dd1e25439b763628c

SHA256
44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14

SHA512
d119dc4706bbf3b6369fe72553cfacf1c9b2688e0188a7524b56d3e2ac85582a18bbee66d5594e0fb40767432646c23bf3e282090bd9b4c29f989a374aeae61f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\nb_model_build_attachment_travel.json

Filesize
67KB

MD5
48139e5ba1c595568f59fe880d6e4e83

SHA1
5e9ea36b9bb109b1ecfc41356cd5c8c9398d4a78

SHA256
4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa

SHA512
57e826f0e1d9b12d11b05d47e2f5ae4f5787537862f26e039918cb14faff4bc854298c0b7de3023e371756a331c0f3ee1aa7cebbbf94ec70cdfc29e00a900ed1

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\suuk1m1w.default-release\personality-provider\recipe_attachment.json

Filesize
1KB

MD5
be3d0f91b7957bbbf8a20859fd32d417

SHA1
fbc0380fe1928d6d0c8ab8b0a793a2bba0722d10

SHA256
fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7

SHA512
8da24afcf587fbd4f945201702168e7cfc12434440200d00f09ddcd1d1d358a5e01065ac2a411fdf96a530e94db3697e3530578b392873cf874476b5e65d774a

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
8.0MB

MD5
a01c5ecd6108350ae23d2cddf0e77c17

SHA1
c6ac28a2cd979f1f9a75d56271821d5ff665e2b6

SHA256
345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42

SHA512
b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
7KB

MD5
dc590f185dbe981a8cf3f539874c3ef4

SHA1
7323a2333f1e778b77306272f78b7335b97913dd

SHA256
7e0ceb63ba961fac0df7641f43852bd02229900920965e5b2759445b49785201

SHA512
92eed5143bd914199849faac718ca925dd5b8f4292dfac0aff4978e0a2dd862b23b27da0b23b35826ab5513b88d103afaea5c24dc5760964fef78c5efeff2628

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\bookmarkbackups\bookmarks-2023-07-09_11_kViMUEybGM8eMXLVRmmD+Q==.jsonlz4

Filesize
950B

MD5
8cc3af9de5f9a5a7461d7ad17c336fa5

SHA1
493500d99369aba8402aefd69b757d34ec494ace

SHA256
65b984506f61c6c102c7114044ba416aa43a292d87009a5655b3d1dbd0ee2d9d

SHA512
08898a58b7315cb069f7bd43818b26c47f94d77c627cbe9eab82b14808e14d6c9048f357c8776e5c80d71dbfa1b8a66d99320704530dd4984411f0fe2ffcb3d0

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\broadcast-listeners.json

Filesize
216B

MD5
f27343f39d551de91b37839fc8f96ef5

SHA1
e09a258405b7b984b6bbf07b408d56ccbfb15fe8

SHA256
ac784376d5af68426b6e68d7e371dc636ff1639ec3296c91777a78abfaa8fa07

SHA512
dfc700d14af41a38ab558bbda3613c7b0b67fa336fd09f35f283a5f316e8bc0c5ab9748673bfab20cdf2efe3543144a5692d68bb96dc2668899c405f861cc542

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

Filesize
997KB

MD5
fe3355639648c417e8307c6d051e3e37

SHA1
f54602d4b4778da21bc97c7238fc66aa68c8ee34

SHA256
1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e

SHA512
8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

Filesize
116B

MD5
3d33cdc0b3d281e67dd52e14435dd04f

SHA1
4db88689282fd4f9e9e6ab95fcbb23df6e6485db

SHA256
f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b

SHA512
a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

Filesize
479B

MD5
49ddb419d96dceb9069018535fb2e2fc

SHA1
62aa6fea895a8b68d468a015f6e6ab400d7a7ca6

SHA256
2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539

SHA512
48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

Filesize
372B

MD5
8be33af717bb1b67fbd61c3f4b807e9e

SHA1
7cf17656d174d951957ff36810e874a134dd49e0

SHA256
e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd

SHA512
6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

Filesize
11.8MB

MD5
33bf7b0439480effb9fb212efce87b13

SHA1
cee50f2745edc6dc291887b6075ca64d716f495a

SHA256
8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e

SHA512
d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

Filesize
1KB

MD5
688bed3676d2104e7f17ae1cd2c59404

SHA1
952b2cdf783ac72fcb98338723e9afd38d47ad8e

SHA256
33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237

SHA512
7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

Filesize
1KB

MD5
937326fead5fd401f6cca9118bd9ade9

SHA1
4526a57d4ae14ed29b37632c72aef3c408189d91

SHA256
68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81

SHA512
b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\prefs-1.js

Filesize
6KB

MD5
ef16d1ca0c53520ab40bbac8acdabd64

SHA1
d9828bcecc228cf8e95fe58ae427d7a34fc0c288

SHA256
4b56c1e3137c480d9c661a93daf6f7509638fe3c2ea436513d4144b8f685579f

SHA512
13d4813a8491e5e0e6c8119a2617ac0d4f026c960cc45f9b17afc793a06855cb640810eb006cf63028e2805ebf83da57e2c33b602ad3752111570f0fc4ef9459

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\prefs-1.js

Filesize
7KB

MD5
fe7c61366ec7c911e22791bcad93ea91

SHA1
a27fa8f702da692c61a289a5006e306c4d5590ca

SHA256
33f825cb5cde8b92fc6fb097f04eb579b6119633e227d3b8b6a6cf1e0c17bfbd

SHA512
612f923026e7d46bbe5c20552cba8e524439f38d4670a8b16050fbbcdce06ceb5f6c1de6577eae74acc9276bd90010e99d37f9bf5ca0eac15c197575adb3e38f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\prefs-1.js

Filesize
10KB

MD5
a095a46ec1878f7e218c3d185dc6e012

SHA1
91e3bcb3a2dd675c51ecaebd3926dce2d8c6f336

SHA256
08a5190c8600a94ba327d94a2024e9c670733c727b6ae6137da82aeab299d700

SHA512
7b41e6c1f37145a25ef10f4822e801325eeec78fa680147406740ed5cbeda7b0be7e1081852ae4359c20c7f8fe31216ebe3fca44916df1fa56171dc9aba096ff

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\prefs-1.js

Filesize
10KB

MD5
7cef20601fea254d12fca8cf30c459f4

SHA1
af35402e92f4dad045a0647888f2a588bf661c56

SHA256
83908e4942a64cdf465d2ab7236c458d49a7822c2ebc326ce8b30f09494ba130

SHA512
247be23d2dcd3f390a3395ec1525a7dd31612a18bf75db9d590881dd32b1906737bbfa852e2bf089848754788e18a0a53d0b6aa95defcac3b71a3a9cb84f78b5

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\prefs-1.js

Filesize
6KB

MD5
80a11a9e7902886f1ebdc1b298b0894e

SHA1
f0fcd7514f3e6741ee0226848f0ad00db4f6afba

SHA256
adcb5e5040489e1e972432ed05bdf334b61bf4a348dd11e6925385efd3b3bc89

SHA512
549f03862be1509b55cad748349ec0cc0144a4ed6c7fe4d33c12c4687e4b3b19f62a21c5371bcc0c0d5b56667063f1400e1e9edf322f523e709ee6ba4c62c3cd

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\prefs.js

Filesize
6KB

MD5
df714c2657f03cda53187d494c186587

SHA1
044ca049c24da89b8f4efddf858baafb11c58644

SHA256
869506ca30966e5c91ab1130916401cd282be0b1c3d864e6303c388a925856f1

SHA512
597a2b3533d49f91841cf8a236d14455419ec7df41a258356d6617a59041bf134b613d80c0e5493c321e7ea344c8df028ee79001340007b231b8a501ff5c6922

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\sessionCheckpoints.json

Filesize
90B

MD5
c4ab2ee59ca41b6d6a6ea911f35bdc00

SHA1
5942cd6505fc8a9daba403b082067e1cdefdfbc4

SHA256
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2

SHA512
71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
194KB

MD5
c3cffe37d81cb33b8df1f03824c20767

SHA1
49f8bf2ea2dfe9bbd71401dd47bcc5572f0c3ad7

SHA256
c24873a542844e199a14373a09761930556518ba2d6886f05ba23d6f4f0c3ad4

SHA512
157bb1bd1060bb9c2c9e7c07c3ce2ff26e327ad055075ef0ddb209f30b9afb76022274f0f9a0121d44338845e2fa105430708b6b8de5680f20c231c9485aeea6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
194KB

MD5
3ca20dead8f30e5e70e3644e874f23be

SHA1
97d9176a992900051f77e68c5767cf48d0a0795a

SHA256
e1654e59aa5dd5cb78521aa8843c6894790fa78a045d5d369dbca583925449f1

SHA512
d53b94fba29bc5cdaa69f7db36ee330663bba7c0135bd2ec91e7dae32139ee5e08b444dcfe1cfb764e3d5ce8573e222cce1327aebe4ebdac3ddabdd2ea978ce8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
194KB

MD5
e38363359f54c5119fd12a7c506ee6f9

SHA1
d330380b7199d7c1f0bb585154cb819cf0b7802c

SHA256
b85af60b4885e41503fcb5ecf3af8383a7b136ef50850638bcfa9e31206c438e

SHA512
5b136e75b30a00a0a025fd9f20d2a1b827afda2b191d0475278f44d644740fc16cffb0bd246840b77d623c2830e5391a821d8a56ceacaf8bd8cc7436c3b746b4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
194KB

MD5
6c588736938281b727ec84c3045e461b

SHA1
dd03903b5432861cd825d5e9e4f2dd83a31ac19d

SHA256
f467eb10edae0dd248c35413114536f5a80c3ffed0b96d5c11d9d901a67f7418

SHA512
99fdaa3454cc03d376d03368c21a16ec556dcf7f3f20844156ea7f8dd686087cd146c815a4fd98831a85b94e11fa814a174f98f15c4e46d81f8cd1c5bbbd78ca

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
194KB

MD5
ff757653fa57c59fddc19938710408d0

SHA1
465ae95952fec478d98f8ec536f6e782233df322

SHA256
d944772b226e368b000a0ed5afb993ec2bba8ee6d3f154fcd02a85ec629a8191

SHA512
cee0d8a250a61c0b258cf48dd70a8bd2564785a737c4cac6f6c0b8f0dad885a6438ef99b4f82a357b819fc7af54aa97b023c99c5b22a84c79783995410ddb59c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
194KB

MD5
e235dfed9182ffe5c6ce504523cb6a3b

SHA1
f3ac31cc696c85f85845b482991dd2f69ed83f58

SHA256
d9d17364a4ab9a2f83c78649eac5d7338007cc507dcadff45c724f1d3f71e314

SHA512
5bb4970589186720544dfbc1400dbb5cd0cff3cf33f9a0e34b07e533d53f0041898eefe49df4a0051424c25a86f836a931a4ce1ed094177cd27502b8982ba379

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
194KB

MD5
5f48366845a816bb0b72a68ecf862e5e

SHA1
0ab3c7cc9a3f096ab2b853375541af09e621e434

SHA256
ca6626376da0d17636726b063884370c2af2dd9ac023bb1f5ab73bd1258c5c13

SHA512
a8f956afbab3b8d965882d7669abe300ef88672b2ee647275813d2290691a3b8a55c3e6cb9fe060a4465fac8fb70e927ff9fe0b48b0cae47dbdcabfa709e38e7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

Filesize
1.3MB

MD5
45ec3cdefab7aab9c608909ccc92d0ac

SHA1
4c3d8779d2225696cd3010d22f62c278b42fce28

SHA256
81882dbefabacccac778c032e4fc9e223242c4ccedd8d14475b36119c091c627

SHA512
f9e2c42245cd63a198bced27c535d89054c13b9673f248b7f09a134fff2c6f75f38a0aca9fd17fa24f009b34bbc791fdb14d98e50d22bb37f9a826d94d16e5e0

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\suuk1m1w.default-release\targeting.snapshot.json

Filesize
4KB

MD5
37addc5ee01396f13c503873e0887b19

SHA1
86ff261daeee31f17d5f2228357b9c786f3936c8

SHA256
90d3ebe03dd62f5631121bf522389fe1ea3df1118fb6f8aa4d33d772a4cd6877

SHA512
4cbd0bf4ef15a09a7aac9a4f9ee7db41674a85ccd63f0bca18a41c36d5c95c8d7a46a5d2e4b963383fe84d1a1eef7cc884df7183f65f401084dd830214cbe5a7

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response