r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3263
Expires: Thu, 08 Sep 2022 06:26:44 GMT
Date: Thu, 08 Sep 2022 05:32:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 08 Sep 2022 05:05:12 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wS-mTWlv84newIPKv1kDPX4OAyA_u2-oVIz41Wins4_UuXzcdHnGDg==
Age: 1629
bariatric-club.net/?p=42778
156.67.72.142301 Moved Permanently 707 B URL HTTP/1.1 bariatric-club.net/?p=42778
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Phishing
GET /?p=42778 HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 08 Sep 2022 05:32:20 GMT
server: LiteSpeed
location: https://bariatric-club.net/?p=42778
content-security-policy: upgrade-insecure-requests
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k26NRpIv9gQsaW48N9BZ58U7ysqPZ2EqfTt-2Vb1c3gr7IiukBJ8rA==
age: 6347
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:21 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 08 Sep 2022 04:38:18 GMT
Cache-Control: max-age=3600
Expires: Thu, 08 Sep 2022 05:11:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TpsiRt8VOnyLutDXf9-38oA0DGmgNCKctJxE0KgVjkKtupC1EE7RPA==
Age: 3243
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a81b0f5b5d11bf95fc176833b2f6e808
5b194aa5a8bf3a6b0d117ccfd0f487f6db0587b5
8f6ae83f2b85db7174bbbc6553e2921617b5c8a401315e76082682949a0bd9cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6389
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:21 GMT
Last-Modified: Thu, 08 Sep 2022 03:45:52 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.162.217.251101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.162.217.251:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2V9HJHxN1jm8DnYuKuO6OA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HzCapHTZLgzO1BsmbNfFOrBFFt8=
cdn-images.mailchimp.com/embedcode/classic-10_7.css
54.230.217.92200 OK 1.3 kB URL HTTP/1.1 cdn-images.mailchimp.com/embedcode/classic-10_7.css
IP 54.230.217.92:0
File type ASCII text, with very long lines (398)
Hash 5e4b40134a8471fe4b1110bf58764e9c
ce96c14babd9c2139a4529fca412d597a63cc2d7
6552a745b136325bc30da26ec6f0aa75e5bc24daa431cfc7eb7b526d57dee82e
GET /embedcode/classic-10_7.css HTTP/1.1
Host: cdn-images.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Dec 2015 16:52:30 GMT
x-amz-version-id: null
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 08 Sep 2022 04:58:56 GMT
ETag: W/"ae0fc9b84c30cada1784022044962394"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RXBUhgO7hvY0FHq54mPbM_NOdFypbZ9yUPL6lfxlhWyECv1wsXuyBg==
Age: 2007
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash de50d39318f58f490483c86aecd38e4c
f92177f493cb7bab9c5ce67f6b41f9214920907d
8bca037d0d46ddd72b4c1bbfc2829f96bc9e7bfb28724af3010f1441d14b7180
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.wp.com/p/jetpack/10.5/_inc/build/sharedaddy/sharing.min.js
192.0.77.37200 OK 3.8 kB URL HTTP/2 c0.wp.com/p/jetpack/10.5/_inc/build/sharedaddy/sharing.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (11507), with no line terminators
Hash ab44f90419a67e18467677ae7938a198
e701da713a7cc2e2ffec9c4aae65eebe0d8eaed7
a24affb0cdff0e1b99088399a1234977acb797e8773cf6a0b65f71d0868a4966
GET /p/jetpack/10.5/_inc/build/sharedaddy/sharing.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 04 Jan 2022 22:15:08 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/plugins/native-ads-adnow/public/css/adnow-widget-admin.css
156.67.72.142200 OK 2.6 kB URL HTTP/2 bariatric-club.net/wp-content/plugins/native-ads-adnow/public/css/adnow-widget-admin.css
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with very long lines (304)
Hash 938e1446a1636d2317de1b15f31eedb5
1a3fc70677980a18c036d918d5d2ea8a45f988b7
24c9f38de9c1566dbceac75c959d853e0fc5e9feee1798995d23e2ab096589d6
GET /wp-content/plugins/native-ads-adnow/public/css/adnow-widget-admin.css HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: text/css
last-modified: Sat, 05 Jan 2019 07:49:44 GMT
etag: "3430-5c306198-dc1b07c7ac83e349;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2561
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 721eb245d022db7af3e30ad4e6b94226
4a53b4e9ad119295498594089826bddea4d0b9a6
6f350e89f4e7a0cea74c003493ea950c768ffcbea234bcf68a818b60842a2f3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bariatric-club.net/wp-content/plugins/taqyeem-buttons/assets/style.css
156.67.72.142200 OK 957 B URL HTTP/2 bariatric-club.net/wp-content/plugins/taqyeem-buttons/assets/style.css
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with CRLF line terminators
Hash bc48a99617e199a0014da518be17d085
c047ee62777faad12dd64b06b0c28da3f5ae1359
40bed694acaae9ed24520c2350e513068ebcd159fec6215a58accd7db1d27667
GET /wp-content/plugins/taqyeem-buttons/assets/style.css HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: text/css
last-modified: Tue, 13 Nov 2018 17:51:36 GMT
etag: "102e-5beb0f28-43b26adc5dcbbd61;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 957
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/plugins/taqyeem/style.css
156.67.72.142200 OK 1.5 kB URL HTTP/2 bariatric-club.net/wp-content/plugins/taqyeem/style.css
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with CRLF line terminators
Hash a7d266cafa34736e0be74938159fe8d7
d49ad442f56e2d11c79c70258815283f0d2447f5
c08acbd5574c18622eb3d112a10a5a4eeb0a42cf30565224ae60a4c497f2e04f
GET /wp-content/plugins/taqyeem/style.css HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: text/css
last-modified: Tue, 13 Nov 2018 17:51:35 GMT
etag: "1afb-5beb0f27-2e299130e11816c5;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1502
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/plugins/wp-automatic/css/wp-automatic.css
156.67.72.142200 OK 541 B URL HTTP/2 bariatric-club.net/wp-content/plugins/wp-automatic/css/wp-automatic.css
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
Hash 8ace2dd592cce5346093d592914e2dcf
10a75d3b6cc0942b6a832c9d4d2fd164e9cc38d7
05fcbe5b4ed2c9b07908d7e0dfb09da4cfd34eec3b812556bbcccda002dd05a6
GET /wp-content/plugins/wp-automatic/css/wp-automatic.css HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: text/css
last-modified: Mon, 11 Nov 2019 20:52:33 GMT
etag: "a99-5dc9ca11-c160db1b30fa406b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 541
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
c0.wp.com/c/5.8.5/wp-includes/js/wp-embed.min.js
192.0.77.37200 OK 1.2 kB URL HTTP/2 c0.wp.com/c/5.8.5/wp-includes/js/wp-embed.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (1391)
Hash ba170910b295cef39e83336b87f3f17d
b66b998bfb5100968f38f4373cccde87c558d790
0b3cb6c3ba86dca32fa131742911f80b2a9579d76779c4ea85c58b1ba5ffcae0
GET /c/5.8.5/wp-includes/js/wp-embed.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 06 Jan 2021 15:29:24 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-233695947-1
142.250.74.72200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-233695947-1
IP 142.250.74.72:0
File type ASCII text, with very long lines (1615)
Hash 2c5b8fd726d7982cfeb21f58565c40a5
d011b5556121c69f1b73dcb435331fe29616ab3e
84ee1460c38de28b38ec11462ba3dda8c4c36018049e0f825b304747d7bd3a9a
GET /gtag/js?id=UA-233695947-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Sep 2022 05:32:22 GMT
expires: Thu, 08 Sep 2022 05:32:22 GMT
cache-control: private, max-age=900
last-modified: Thu, 08 Sep 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41873
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
142.250.74.46200 OK 27 kB URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP 142.250.74.46:0
Hash c18434203994293a14c65196e210acc0
c3bccdf0d3742ef15a3bb5b5ad0fb1ec3d50f3a3
2606161f05bdd627da377df1595a13c8d34b3350b1413436b177fc681cc84d35
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 Sep 2022 05:32:22 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+061; expires=Sat, 07-Sep-2024 05:32:22 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.wp.com/c/5.8.5/wp-includes/css/dist/block-library/style.min.css
192.0.77.37200 OK 10 kB URL HTTP/2 c0.wp.com/c/5.8.5/wp-includes/css/dist/block-library/style.min.css
IP 192.0.77.37:0
File type Unicode text, UTF-8 text, with very long lines (33376)
Hash 459cb9fe173746468a1b55f43463aa0c
473dd7e06ffd3e480cf28f708b459d98b3c71fcf
e6678ae4f9b76ad6d65952b1c65cdd5b834eadfa97a4cbbba18ed4d1720b9c39
GET /c/5.8.5/wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 01 Sep 2021 04:05:58 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
st-n.ads3-adnow.com/js/a.js
92.223.97.97200 OK 34 kB URL HTTP/2 st-n.ads3-adnow.com/js/a.js
IP 92.223.97.97:0
ASN #199524 G-Core Labs S.A.
Hash a509fc2bf5d4c6d0b6238658c1b25154
e0dd1c7eacf374beac520f036bf7313e16f05cad
f352607aca836992fcbcccebe3c4f37dc8cbcf77178b70b2e124d3c904eed6e7
GET /js/a.js HTTP/1.1
Host: st-n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
last-modified: Mon, 04 Apr 2022 07:22:22 GMT
etag: W/"624a9cae-157b4"
expires: Thu, 08 Sep 2022 05:33:22 GMT
cache-control: max-age=60
cache: REVALIDATED
x-cached-since: 2022-09-08T05:30:44+00:00
x-id: sto5-up-gc11
content-encoding: gzip
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/themes/sahifa/style.css
156.67.72.142200 OK 34 kB URL HTTP/2 bariatric-club.net/wp-content/themes/sahifa/style.css
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with very long lines (28229), with CRLF line terminators
Hash c65fc19f99d0a24e013fdebe6537024d
8ac130e8b47956e0b591e77e5af6e63652800c67
0fba8aae773fda16b5725b97c6781053847732052738dad6113e1dc6f33d6eee
GET /wp-content/themes/sahifa/style.css HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: text/css
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "3119d-5beb0ed6-9cc4882c575c6cf4;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 34083
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/themes/sahifa/css/ilightbox/light-skin/skin.css
156.67.72.142200 OK 1.2 kB URL HTTP/2 bariatric-club.net/wp-content/themes/sahifa/css/ilightbox/light-skin/skin.css
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with CRLF line terminators
Hash c35ff7f5126862905ea0d6d3a9c44148
47cd325768093be1619cb00ab1e80bdd638c7ae0
64b2c96c6655c7b3073a7b572ae2c456f756eccbd3c5b668df1fd41579649b94
GET /wp-content/themes/sahifa/css/ilightbox/light-skin/skin.css HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: text/css
last-modified: Tue, 13 Nov 2018 17:50:22 GMT
etag: "1d1b-5beb0ede-38346f765cf73e89;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1183
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/plugins/visitors-traffic-real-time-statistics/js/front.js
156.67.72.142200 OK 355 B URL HTTP/2 bariatric-club.net/wp-content/plugins/visitors-traffic-real-time-statistics/js/front.js
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
Hash 31ad02480c28b09eff04210574ae76c7
621619fa50d108acac9fd5bc859334ef43f4c364
8c7af7ff985e035bbacf171ecbfe98915dabdc19864b89c3d29217efabab6d7e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/visitors-traffic-real-time-statistics/js/front.js HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Thu, 20 Jan 2022 14:46:38 GMT
etag: "37a-61e975ce-fb3fb1103e9b9b22;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 355
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/plugins/native-ads-adnow/public/js/adnow-widget-public.js
156.67.72.142200 OK 194 B URL HTTP/2 bariatric-club.net/wp-content/plugins/native-ads-adnow/public/js/adnow-widget-public.js
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
Hash 499d2b25c00da28f6c4978475dcb7254
aeffe23ba7044b6ea29629733dfbf01930022637
854e9b5ab344a8a84f819524e153e7c53fa3c1b0e33963b0709bbbf23087dfb3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/native-ads-adnow/public/js/adnow-widget-public.js HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Sat, 05 Jan 2019 07:49:43 GMT
etag: "c2-5c306197-b5a8bddf433016da;;;"
accept-ranges: bytes
content-length: 194
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/plugins/taqyeem/js/tie.js
156.67.72.142200 OK 772 B URL HTTP/2 bariatric-club.net/wp-content/plugins/taqyeem/js/tie.js
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with CRLF line terminators
Hash 0c6006b90df34ea4a7d0e512af90698e
5b84bc249e979f5372ac891c3e5b9fb36a0460bb
24383e3e67c2d626b1dcd9f82fad18c16bc86cc0fffedf36ff4fc91da3f49f36
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/taqyeem/js/tie.js HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Tue, 13 Nov 2018 17:51:33 GMT
etag: "9e8-5beb0f25-2af564a4e47f0ae2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 772
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/plugins/wp-automatic/js/main-front.js
156.67.72.142200 OK 270 B URL HTTP/2 bariatric-club.net/wp-content/plugins/wp-automatic/js/main-front.js
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
Hash 3cd3b04d0b54484f43f3294184382485
1391a7ba59c91d643e8e927206d67b9caaacc344
5192e7b4f0862c582f135cad9cd561cf21a2f571372981a3ec67a3ea9d46c099
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-automatic/js/main-front.js HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Mon, 11 Nov 2019 20:52:30 GMT
etag: "378-5dc9ca0e-403903ad07401769;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 270
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/themes/sahifa/js/postviews-cache.js
156.67.72.142200 OK 139 B URL HTTP/2 bariatric-club.net/wp-content/themes/sahifa/js/postviews-cache.js
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with no line terminators
Hash 76591f91de8e1ba757c75f2ed652aa08
edccb6c8b113f6d1ad76cdba1a2499e13bae45ae
e4146dc61fb3064bed9359d9717141388f3a37b1fe3c2bd179c15776e84aff51
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/sahifa/js/postviews-cache.js HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "8b-5beb0ed6-af36a99b909f98b9;;;"
accept-ranges: bytes
content-length: 139
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/themes/sahifa/js/tie-scripts.js
156.67.72.142200 OK 22 kB URL HTTP/2 bariatric-club.net/wp-content/themes/sahifa/js/tie-scripts.js
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with very long lines (15465), with CRLF line terminators
Hash 88df8f2c83b7667906df64d48dbbdb3f
ab1390127815026a71786967b513583103cf3a0d
fed30c7538918c060e758ad82f60a8e2613c66f43a9eb2dd657ab6fb253bb3dc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/sahifa/js/tie-scripts.js HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "13356-5beb0ed6-4569c95454ec70aa;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 22344
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/themes/sahifa/js/ilightbox.packed.js
156.67.72.142200 OK 22 kB URL HTTP/2 bariatric-club.net/wp-content/themes/sahifa/js/ilightbox.packed.js
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with very long lines (65336)
Hash c07d37dda40da01a199ee0894ccaa9a7
7f27ac97daea06c5930efd8458e2f2b496198f92
26b5025e8458ea724e57c5c2ae6c7579c32302d9adbb2a1bb983771ea5624b99
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/sahifa/js/ilightbox.packed.js HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "12cdc-5beb0ed6-e9f10cd9f667a7b4;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 21866
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false
156.67.72.142200 OK 2.9 kB URL HTTP/2 bariatric-club.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with very long lines (8983), with no line terminators
Hash 36b1a92c39eadea655a54d658857f049
d007530eb0a8e73702ab9a314eaf66a9fcd2e253
6fc616bf8b2baa36aa9a9d6f606c715faf5fd7cd677b6732a1bf536eedcf56c1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Thu, 20 Jan 2022 14:46:35 GMT
etag: "2317-61e975cb-1a4697ce59ea9a55;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2887
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false
156.67.72.142200 OK 899 B URL HTTP/2 bariatric-club.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with very long lines (2341), with no line terminators
Hash 566f157e1247f5d57533369ce7c5ddae
3f54f6a0e4ab28c0634763cf671512a1a497523f
1dc2bcbe63aaaac5d4c0108cf1f7987ce06f92999d456a37974522aaf40af62e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Thu, 20 Jan 2022 14:46:35 GMT
etag: "925-61e975cb-2261a9db7f1779d3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 899
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-content/themes/sahifa/js/search.js
156.67.72.142200 OK 3.4 kB URL HTTP/2 bariatric-club.net/wp-content/themes/sahifa/js/search.js
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with CRLF line terminators
Hash ae99fac98a59ca9c3b3c3dac035bd8d7
bfb03ca0cd02883572908e1c9cbf3b4dcaeb6584
738e78f9c6813d5d6444f10bc1e18f8f53a960b0c78de4b0d04f355981be0019
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/sahifa/js/search.js HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "3aa2-5beb0ed6-53728ffa1a4bd05e;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3357
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
bariatric-club.net/wp-includes/js/wp-emoji-release.min.js
156.67.72.142200 OK 4.5 kB URL HTTP/2 bariatric-club.net/wp-includes/js/wp-emoji-release.min.js
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
File type ASCII text, with very long lines (15224)
Hash 9336a67615b8765497b6efb3b0ce86af
8e9f93d0e91889a28040f9f8f8d2acf71a0acdbb
4834743cf8467e0159799d7c291fe7ef0db3d96323b60fe1bccdaa7d932a7de3
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=42778
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 05:32:22 GMT
content-type: application/x-javascript
last-modified: Thu, 20 Jan 2022 14:46:07 GMT
etag: "4705-61e975af-dc8dbca5ca32594a;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4499
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/10.5/_inc/build/photon/photon.min.js
192.0.77.37200 OK 1.2 kB URL HTTP/2 c0.wp.com/p/jetpack/10.5/_inc/build/photon/photon.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (685), with no line terminators
Hash 6cb4306a3ce5bd7af3a15e0c6a50c671
3b82519a70348619791b4fe31bc61b8b1e58fc7b
e8b1d8cba0c641cf4220903cab721cee6f1dd981fc9c7a1dde9585c0b9bfe020
GET /p/jetpack/10.5/_inc/build/photon/photon.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 44a1d302ee84dc1a2a8bd23e93064d28
e412bd90cf856e1e0daec473bc284b8b9c01cd0b
4dcf1aa046e72ec42abd7131092a7930e7fc238d884ded9e683d8b423da2fd97
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 08 Sep 2022 05:32:22 GMT
Last-Modified: Thu, 08 Sep 2022 05:16:22 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KtfgMnPJLDt857Re8Lx0OdrsLRg0hpH46qAQdsiJV8Jh1EGLEFMlzA==
Age: 960
stats.wp.com/e-202236.js
192.0.76.3200 OK 3.5 kB IP 192.0.76.3:0
File type ASCII text, with very long lines (2690)
Hash 96af2b13f740b486e50e8770e2ebd546
5c05f32d3015ec2835308188530038881a536cf6
72813752f366f74cd797366b828088d10914498f5f55c54204d4fe39276c0172
GET /e-202236.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Mon, 28 Aug 2023 02:01:00 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash cea0da071afbee34d02985f420e55e51
05fbf0223f2d5fdbbb78654f3b647824fc62ac9d
0980349b7173dec8be5721ffd5e338b156dd63dfac096d4d073b3d7349990e45
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 08 Sep 2022 05:32:22 GMT
Last-Modified: Thu, 08 Sep 2022 03:59:32 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2Wzl5RuY4o_IfewCGplkN-BlPNcxIvsoFMocxf5iMFrZ2qhBffFaNw==
Age: 5570
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f54363fd7836d74858c52a188704001f
015258b16c92f2218b86f983b3867f4f894000bf
fb9223314596e656faa2da3964fca75d0dae1511c5bc8d60d362def4c8439489
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FB9223314596E656FAA2DA3964FCA75D0DAE1511C5BC8D60D362DEF4C8439489"
Last-Modified: Tue, 06 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12773
Expires: Thu, 08 Sep 2022 09:05:16 GMT
Date: Thu, 08 Sep 2022 05:32:23 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash da05c4b51a3dabf88135becc19f1af52
2c8e928a750eff713ffba9cacff2ee241b22c236
3a718561532594be11fba74ace11458dc337786dacb48c588777120b6916984f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash da05c4b51a3dabf88135becc19f1af52
2c8e928a750eff713ffba9cacff2ee241b22c236
3a718561532594be11fba74ace11458dc337786dacb48c588777120b6916984f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ylx-1.com/bnr.php?section=General&pub=561739&format=160x600&ga=g
185.66.200.221200 OK 22 kB URL HTTP/2 ylx-1.com/bnr.php?section=General&pub=561739&format=160x600&ga=g
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
Hash 203f64fbae7072d1104a473142ffc72f
c0db2cbe6e51011a4f564f837ce8153e6d2c3c0a
e405383c9903df68fde0ed5abb329b207afcd2e6afda4824b231c3a764fc6051
GET /bnr.php?section=General&pub=561739&format=160x600&ga=g HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
expires: Thu, 08 Sep 2022 05:32:22 GMT
last-modified: Thu, 08 Sep 2022 05:32:22 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
fonts.gstatic.com/s/droidsans/v18/SlGWmQWMvZQIdix7AFxXmMh3eDs1Zw.woff2
142.250.74.163200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/droidsans/v18/SlGWmQWMvZQIdix7AFxXmMh3eDs1Zw.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 22376, version 1.0\012- data
Hash e6af16165f9bfda6aafd0088b8c01daa
c9c0ee8309619643e65ba1b22bfffcd1a7ca1e51
e803cd8c5031ac6b0d099a2d96ba1c3ee44782649a7f7c6f0d09b6410d93e216
GET /s/droidsans/v18/SlGWmQWMvZQIdix7AFxXmMh3eDs1Zw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bariatric-club.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 02:03:39 GMT
expires: Sun, 03 Sep 2023 02:03:39 GMT
cache-control: public, max-age=31536000
age: 444524
last-modified: Tue, 19 Apr 2022 18:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash da05c4b51a3dabf88135becc19f1af52
2c8e928a750eff713ffba9cacff2ee241b22c236
3a718561532594be11fba74ace11458dc337786dacb48c588777120b6916984f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
affiliate-tools.s3.amazonaws.com/eg/dod/en/728x90/img0000273.gif
52.217.134.177404 Not Found 305 B URL HTTP/1.1 affiliate-tools.s3.amazonaws.com/eg/dod/en/728x90/img0000273.gif
IP 52.217.134.177:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash 7142e7b5e1c8415f72f623845fb72115
b5b9e870fccfdb750043c3d6183aaacf57a1dd75
13ecce2c67c65ffdc891e0ad75b8dde1c09b5c6f04e7ef5aa355de12ceb5f5f8
GET /eg/dod/en/728x90/img0000273.gif HTTP/1.1
Host: affiliate-tools.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
x-amz-request-id: 08NCAD5QAHAPAYV9
x-amz-id-2: ir1OIPIsO5nBtfTs3JHP7H8+ESDzw5OTm7MQ2vZ1Yi3dHWHdITG2BXgFjcffHIPTwTgdzCch6fw=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Thu, 08 Sep 2022 05:32:22 GMT
Server: AmazonS3
ylx-1.com/bnr.php?section=General&pub=561739&format=728x90&ga=g
185.66.200.221200 OK 519 B URL HTTP/2 ylx-1.com/bnr.php?section=General&pub=561739&format=728x90&ga=g
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
Hash 7c30ae1f98325d66e64b1b1feec53936
8da56c0e16e2000f9fdee6a26195d2ad42ae34a0
9042d1371012f31e99d0914c7ed79ff33b2b3452639942dff9d9363cd813549c
GET /bnr.php?section=General&pub=561739&format=728x90&ga=g HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
expires: Thu, 08 Sep 2022 05:32:22 GMT
last-modified: Thu, 08 Sep 2022 05:32:22 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4010
Expires: Thu, 08 Sep 2022 06:39:13 GMT
Date: Thu, 08 Sep 2022 05:32:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4010
Expires: Thu, 08 Sep 2022 06:39:13 GMT
Date: Thu, 08 Sep 2022 05:32:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4010
Expires: Thu, 08 Sep 2022 06:39:13 GMT
Date: Thu, 08 Sep 2022 05:32:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4010
Expires: Thu, 08 Sep 2022 06:39:13 GMT
Date: Thu, 08 Sep 2022 05:32:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4010
Expires: Thu, 08 Sep 2022 06:39:13 GMT
Date: Thu, 08 Sep 2022 05:32:23 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F544c97ea-c914-4fdc-82af-945cb0832cde.jpeg
34.120.237.76200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F544c97ea-c914-4fdc-82af-945cb0832cde.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edcd025faafbf7161d4d606f47304c2b
a99519726bc82f2cc0541c79f47ddd15c7362669
ed7b147e3ea371ea4b014805d9c2f45407918924bb2ec540ea6f7cd0a8b1b698
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F544c97ea-c914-4fdc-82af-945cb0832cde.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3529
x-amzn-requestid: 6ee305f1-aaaf-49eb-94b5-1176943a1922
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YCjYWFzNoAMFajg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63174c35-7e8ef3554da3194d47726d0d;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 13:33:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: u3PSpvVEoPGJTFmcB643hOaVUAp-iW0X68PxtIaJZvGHc-Bh79gPgQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:42:18 GMT
age: 28205
etag: "a99519726bc82f2cc0541c79f47ddd15c7362669"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a07d553b6441514870ed7e9e989a29a7
98c145b9326d1e6036fa9089d87a25232dd45b0b
373a586b596016baeb8de98022207c25af24c099c06077edbdfd837cffc31a0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7492
x-amzn-requestid: 2c5e9ff3-c7a4-4a8f-96bf-74f0ca5d9137
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9dOHguIAMFjGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f87-70dbe6532b1a241e6dbe729e;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lbCmv9fV9iBGOQvxRzleYwC5dBYeu1kRgSSkC2hycDmavyXj-KlFSw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:24:59 GMT
age: 25644
etag: "98c145b9326d1e6036fa9089d87a25232dd45b0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca5b5d4ac26d97b5729a30ecdc688bc
3e633bc6c4ab9adfe84899e5209d73bef1d097eb
2c8275d1819d933f86df9685b76aea030842ba5a341c59ea88ffd2da99a5a3d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7885
x-amzn-requestid: 305dc6b7-eb3d-40ad-af89-8b60be935637
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9ThE3DIAMFRtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-7c0b58644e26de7f27c5b388;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: MG4_YJuVqfSCQ80FTdo5XU8xIi74XtILVbIQAbByh54QNOoMJCyS-Q==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:47:05 GMT
age: 27918
etag: "3e633bc6c4ab9adfe84899e5209d73bef1d097eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b1ceaeb-6cf1-42e7-b7e3-28eb631f4b98.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b1ceaeb-6cf1-42e7-b7e3-28eb631f4b98.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 77aa1349e0d44b4756bbede0cbd05413
339fc154a29a7459101dd6125bebf38219bfd11a
74e6439067201bba5e0edc7fd477c62c0566c5fac30b035150d06fea2d30cce0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b1ceaeb-6cf1-42e7-b7e3-28eb631f4b98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12131
x-amzn-requestid: c190466e-eab9-4705-be7e-9724d240a1a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9VNF8BoAMFYBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f54-0f718d821b0107bb1b1474a9;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:28 GMT
x-amz-cf-pop: SFO20-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: f88GXTqODlTXl1sX4BakGIcPj0sGV6IUQ3R8zpBQwg-QEGe3YstK0Q==
via: 1.1 36cc13280ef76bb2fee6ae5eed6fec2e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:47:44 GMT
age: 27879
etag: "339fc154a29a7459101dd6125bebf38219bfd11a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1574e23-3c8b-4ce2-95be-812a884e557e.webp
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1574e23-3c8b-4ce2-95be-812a884e557e.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3aa46849d3bba47d63691883cf00056e
705bece0f3cca112c508c6e77bbb728e6e733905
5f6d0e6996967667c18b02385c896f1734efe530f10ff27d212bd216da91b3cd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1574e23-3c8b-4ce2-95be-812a884e557e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4320
x-amzn-requestid: cd37ae50-7ab0-48b6-8a30-caf4f941b65d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE9u4EeXIAMFoRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6318432b-6751e5fc30a2ecae0776fa74;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:07:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: j8HDRmAd1Pvds0Uw6nzTeY5jmYay8tT0raGl7I4yXEJV1EupiIl-Kw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 07:14:58 GMT
age: 80245
etag: "705bece0f3cca112c508c6e77bbb728e6e733905"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd38a7ac-451e-4dae-8707-f68a3c27ee4e.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd38a7ac-451e-4dae-8707-f68a3c27ee4e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ccc1d45458086694a8221a8a6c6aa3b
b8f1359214f21be812390a6cca80b8e84c26a403
461503caa5ec14c1214bdc19795e47b8c1c3c5be1b21f0f29e923e5191e93846
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd38a7ac-451e-4dae-8707-f68a3c27ee4e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8693
x-amzn-requestid: aae6e4f7-9b0a-49da-b2f1-58b625609942
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9TgFokoAMFbwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-27854a575dea22e1035454e3;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: ja2OeAUlF9lkO2n0bSzYlZHXKnfa6Z4_lU7lAoLZkccaw7CCzFlyKg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:47:05 GMT
age: 27918
etag: "b8f1359214f21be812390a6cca80b8e84c26a403"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js
52.217.37.246200 OK 143 kB URL HTTP/1.1 s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js
IP 52.217.37.246:0
File type ASCII text, with very long lines (32132)
Size 143 kB (143249 bytes)
Hash 6465dd4a8331265e6629cd069e03504c
581e1ae78452c7433d842af8e83afcebe36f17a6
b15aceb04dbf5604df5617cfe984f48479cb131c1df02825d1c24e9f35d01857
GET /downloads.mailchimp.com/js/mc-validate.js HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 98QgVdr4wwzs4gBn6q8u+ACexT8+k6NeuiyiFpxujq31bVTWLskhadBerkPBcFXbeq7sEls0KCA=
x-amz-request-id: TPBVAHPYZH2JKVP8
Date: Thu, 08 Sep 2022 05:32:23 GMT
Last-Modified: Mon, 20 Aug 2018 17:42:38 GMT
ETag: "6465dd4a8331265e6629cd069e03504c"
Cache-Control: public,max-age=2592000
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 143249
ylx-1.com/trk/?48ca0051145a00ae003fe2b391ee3801
185.66.200.221200 OK 43 B URL HTTP/2 ylx-1.com/trk/?48ca0051145a00ae003fe2b391ee3801
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?48ca0051145a00ae003fe2b391ee3801 HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/show.php?u59261662615143=true&ad=673873&f=160x600&a=781385&cri=0&s=MjQ3MDhhNDgzYjlkYWI2NmM2NTYzYTQ2MmRkMGMxNDQ=&u=561739&si=694711613&di=30393698&ci=16&h=48ca0051145a00ae003fe2b391ee3801&cc=NO&https=1&useAf=loaded_string_9562335b0bce9d250429df012c0426f88d0bd_2316997_1662615143.1093_99762&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv
Cookie: used_ad2316997=1; total_impressions=1; cpa_673873=160x600_694711613_0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: image/gif
content-length: 43
last-modified: Thu, 08 Sep 2022 05:32:23 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
c0.wp.com/c/5.8.5/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
192.0.77.37200 OK 74 kB URL HTTP/2 c0.wp.com/c/5.8.5/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
IP 192.0.77.37:0
File type ASCII text, with very long lines (11256), with no line terminators
Hash 36808921212ca8baeaf7c80016412d41
085dc545f5fea02d469ef85bcfc93f4075679fd2
9fbf828511f1786fd475de058e8cbc8a17b54cab751c164a1c67fef7a72dc646
GET /c/5.8.5/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
pixel.wp.com/g.gif?v=ext&j=1%3A10.5&blog=154371492&post=42778&tz=1&srv=bariatric-club.net&host=bariatric-club.net&ref=&fcp=2311&rand=0.07029860301297453
192.0.76.3200 OK 50 B URL HTTP/2 pixel.wp.com/g.gif?v=ext&j=1%3A10.5&blog=154371492&post=42778&tz=1&srv=bariatric-club.net&host=bariatric-club.net&ref=&fcp=2311&rand=0.07029860301297453
IP 192.0.76.3:0
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&j=1%3A10.5&blog=154371492&post=42778&tz=1&srv=bariatric-club.net&host=bariatric-club.net&ref=&fcp=2311&rand=0.07029860301297453 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 623de397266eb70d80d3f9846c77bfba
960b3727a700d83b590c0e7a40de1403644485a2
3e2a63d67e81bd8485c9b3e0ebc922563abc53ba99f027a185c1abc0c51602b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E2A63D67E81BD8485C9B3E0EBC922563ABC53BA99F027A185C1ABC0C51602B3"
Last-Modified: Tue, 06 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11086
Expires: Thu, 08 Sep 2022 08:37:09 GMT
Date: Thu, 08 Sep 2022 05:32:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 623de397266eb70d80d3f9846c77bfba
960b3727a700d83b590c0e7a40de1403644485a2
3e2a63d67e81bd8485c9b3e0ebc922563abc53ba99f027a185c1abc0c51602b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E2A63D67E81BD8485C9B3E0EBC922563ABC53BA99F027A185C1ABC0C51602B3"
Last-Modified: Tue, 06 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11086
Expires: Thu, 08 Sep 2022 08:37:09 GMT
Date: Thu, 08 Sep 2022 05:32:23 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash db433121f8c8215d44bcd26aff290172
f96b386796e3589437cd57fac6782842c17ce746
455323a3f807014a498118929131b6aad4ec5283f95be23108b2afd329576098
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 050627ed02d5c193d7d35451eeae0f3b
c11c9373389eb4c42d8a361b7d18ee7cef63b300
1c8f2685c71caefbcb30a95ad95954374c2e2adaa25ce78da7ba74b19855c92f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C8F2685C71CAEFBCB30A95AD95954374C2E2ADAA25CE78DA7BA74B19855C92F"
Last-Modified: Tue, 06 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9781
Expires: Thu, 08 Sep 2022 08:15:24 GMT
Date: Thu, 08 Sep 2022 05:32:23 GMT
Connection: keep-alive
translate.googleapis.com/translate_static/css/translateelement.css
142.250.74.74200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP 142.250.74.74:0
File type ASCII text, with very long lines (18670)
Hash 897ba9a21d9625286674da769dacc2e2
84b4923ab7dee562395160824d53496314499b77
696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 05:02:19 GMT
expires: Thu, 08 Sep 2022 06:02:19 GMT
cache-control: public, max-age=3600
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
age: 1804
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash db433121f8c8215d44bcd26aff290172
f96b386796e3589437cd57fac6782842c17ce746
455323a3f807014a498118929131b6aad4ec5283f95be23108b2afd329576098
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ylx-i.advertica-cdn2.com/aff/pub_le6kgi.png?1480419362
185.66.200.127200 OK 34 kB URL HTTP/2 ylx-i.advertica-cdn2.com/aff/pub_le6kgi.png?1480419362
IP 185.66.200.127:0
ASN #201702 skHosting.eu s.r.o.
Hash 8ab601eadc33df7f725f0b3778c549b9
e0c8818a3f4b7049ada091a3e72dfd9c9329a4de
460ded649196c4821f0ad0cf3cc40832a804cfdaf035960fae7b6fac3c6a45d7
GET /aff/pub_le6kgi.png?1480419362 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: image/png
last-modified: Tue, 29 Nov 2016 11:36:02 GMT
etag: W/"583d6822-8610"
expires: Sat, 08 Oct 2022 05:32:23 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
104.18.10.207200 OK 22 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
IP 104.18.10.207:0
File type ASCII text, with very long lines (65325)
Hash 90d07a40dee20d446bc43c1371d0148e
36db53e01ace2078eae2dcfdf25a7a64e36e6597
ba5a06cf65cc5938141f51b8cd726d2d055d65c96fd2c21343a84f7d61e56951
GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ebaaa.xyz
Connection: keep-alive
Referer: https://ebaaa.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 01/30/2022 11:18:43
cdn-edgestorageid: 756
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.02
cdn-requestid: 17cbbf52cb17a41f68b472fada811a1a
cdn-cache: HIT
cf-cache-status: HIT
age: 15846078
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74754da7ca340b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
142.250.74.163200 OK 128 kB URL HTTP/2 fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ebaaa.xyz
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 20:36:08 GMT
expires: Fri, 01 Sep 2023 20:36:08 GMT
cache-control: public, max-age=31536000
age: 550575
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCdZAdrrCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_69879&adApiR=loaded_string_6287635b0bce9d250429df012c0426f88d0bd_2633134_1662615143.377_64516&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Mw==&adApiR=loaded_string_6287635b0bce9d250429df012c0426f88d0bd_2633134_1662615143.377_64516&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=728&height=90&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=885689474180&realRef=bUZNbVNXdW9lWmh3dDcvUzBoMklpN1VuQTZQUUluRGZLYmtUZ2VUd3RWbz0=
185.66.201.8200 OK 26 kB URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCdZAdrrCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_69879&adApiR=loaded_string_6287635b0bce9d250429df012c0426f88d0bd_2633134_1662615143.377_64516&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Mw==&adApiR=loaded_string_6287635b0bce9d250429df012c0426f88d0bd_2633134_1662615143.377_64516&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=728&height=90&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=885689474180&realRef=bUZNbVNXdW9lWmh3dDcvUzBoMklpN1VuQTZQUUluRGZLYmtUZ2VUd3RWbz0=
IP 185.66.201.8:0
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (16962), with no line terminators
Hash 33b47d53a5c3b3204addf5d2965db4d6
30a57219ccac19f157233ab87efd0425f9ae2728
552f5adf8395968b6fde123e7fb40569292f020d099ba4b5dd203de8677d7eb0
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCdZAdrrCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_69879&adApiR=loaded_string_6287635b0bce9d250429df012c0426f88d0bd_2633134_1662615143.377_64516&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Mw==&adApiR=loaded_string_6287635b0bce9d250429df012c0426f88d0bd_2633134_1662615143.377_64516&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=728&height=90&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=885689474180&realRef=bUZNbVNXdW9lWmh3dDcvUzBoMklpN1VuQTZQUUluRGZLYmtUZ2VUd3RWbz0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: text/html; charset=UTF-8
set-cookie: total_impressions=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure; SameSite=None
used_ad2633134=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc54ec76cad5207150fdf9df5ef92b48
cb83a0e922dbf8ba30464e020e854f3d12ce69f4
60c37a98fdf98703a03766ffd5aec518b51d2f86c8cc444c4bf16ac6261d29ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc54ec76cad5207150fdf9df5ef92b48
cb83a0e922dbf8ba30464e020e854f3d12ce69f4
60c37a98fdf98703a03766ffd5aec518b51d2f86c8cc444c4bf16ac6261d29ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc54ec76cad5207150fdf9df5ef92b48
cb83a0e922dbf8ba30464e020e854f3d12ce69f4
60c37a98fdf98703a03766ffd5aec518b51d2f86c8cc444c4bf16ac6261d29ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/Oq65fZr7wi8/mqdefault.jpg
142.250.74.182200 OK 12 kB URL HTTP/2 i.ytimg.com/vi/Oq65fZr7wi8/mqdefault.jpg
IP 142.250.74.182:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3\012- data
Hash 199c4316c3532946427df6abe35ec8a7
ca0e0d8d1937038bedca9da413093a4d3cb61afc
c3536c51a5d24f63f4f9ca0fd5f74b7158620f853333c75c5b871545f7226166
GET /vi/Oq65fZr7wi8/mqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ebaaa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 12435
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 04:22:31 GMT
expires: Thu, 08 Sep 2022 06:22:31 GMT
cache-control: public, max-age=7200
age: 4192
etag: "1611147288"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ylx-1.com/bnr_xload.php?section=General&pub=561739&format=728x90&ga=g&xt=166261514230494&xtt=4966763
185.66.200.221200 OK 19 kB URL HTTP/2 ylx-1.com/bnr_xload.php?section=General&pub=561739&format=728x90&ga=g&xt=166261514230494&xtt=4966763
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
Hash 377ef44b21c71b142e9decaaae4ada13
c78fcb046b1b64f3aa7fe840b749d86fc8706a1c
78243f11769995d42687f1095dfe03d9bb19459458d80cec99bfe4f8d9a36d9e
GET /bnr_xload.php?section=General&pub=561739&format=728x90&ga=g&xt=166261514230494&xtt=4966763 HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Cookie: used_ad2316997=1; total_impressions=1; cpa_673873=160x600_694711613_0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 08 Sep 2022 05:32:23 GMT
last-modified: Thu, 08 Sep 2022 05:32:23 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
set-cookie: used_ad2633134=1; expires=Fri, 09-Sep-2022 04:00:00 GMT; Max-Age=80857; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
total_impressions=2; expires=Fri, 09-Sep-2022 04:00:00 GMT; Max-Age=80857; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
cpa_673873=728x90_694711613_0; expires=Sat, 08-Oct-2022 05:32:23 GMT; Max-Age=2592000; path=/; domain=ylx-1.com; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc54ec76cad5207150fdf9df5ef92b48
cb83a0e922dbf8ba30464e020e854f3d12ce69f4
60c37a98fdf98703a03766ffd5aec518b51d2f86c8cc444c4bf16ac6261d29ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ebaaa.xyz/87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCGjrijACxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_51997&adApiR=loaded_string_9562335b0bce9d250429df012c0426f88d0bd_2316997_1662615143.1093_99762&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=160&height=600&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
185.66.201.8200 OK 20 kB URL HTTP/2 ebaaa.xyz/87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCGjrijACxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_51997&adApiR=loaded_string_9562335b0bce9d250429df012c0426f88d0bd_2316997_1662615143.1093_99762&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=160&height=600&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
IP 185.66.201.8:0
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (480)
Hash 922a8edee87173df25e97d636cf06227
c12e0b95d77ff3e0fe35c6e9f83bd374a8b29683
cdd8633916c24d2ebaaa009dc0d3d88e8a77d033e8078ed75230d13b8a21b0f8
GET /87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCGjrijACxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_51997&adApiR=loaded_string_9562335b0bce9d250429df012c0426f88d0bd_2316997_1662615143.1093_99762&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=160&height=600&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: application/javascript
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc54ec76cad5207150fdf9df5ef92b48
cb83a0e922dbf8ba30464e020e854f3d12ce69f4
60c37a98fdf98703a03766ffd5aec518b51d2f86c8cc444c4bf16ac6261d29ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/gCjZKhacQVE/mqdefault.jpg
142.250.74.182200 OK 28 kB URL HTTP/2 i.ytimg.com/vi/gCjZKhacQVE/mqdefault.jpg
IP 142.250.74.182:0
File type gzip compressed data, max compression\012- data
Hash fcc427748ccfa1dc1a6d5ed280a4bc03
311a411731b9a87a08f86c2f1e90c125168359b9
e2dddf0462e2c19e282aa15de9b150fbd626da0ad3aacafbbb1234e007e3f3da
GET /vi/gCjZKhacQVE/mqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ebaaa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 28028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 04:22:31 GMT
expires: Thu, 08 Sep 2022 06:22:31 GMT
cache-control: public, max-age=7200
age: 4192
etag: "1594374222"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ylx-1.com/show.php?u3161662615143=true&ad=673873&f=728x90&a=625611&cri=0&s=YzY3MmFlZTc2YWM0OGU1NjhlY2ZlODE0ZTY0NDliOTQ=&u=561739&si=694711613&di=30393698&ci=16&h=274bfa552e396e8f6a1dfb95c9f944fd&cc=NO&https=1&useAf=loaded_string_6287635b0bce9d250429df012c0426f88d0bd_2633134_1662615143.377_64516&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Mw==&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv
185.66.200.221200 OK 8.6 kB URL HTTP/2 ylx-1.com/show.php?u3161662615143=true&ad=673873&f=728x90&a=625611&cri=0&s=YzY3MmFlZTc2YWM0OGU1NjhlY2ZlODE0ZTY0NDliOTQ=&u=561739&si=694711613&di=30393698&ci=16&h=274bfa552e396e8f6a1dfb95c9f944fd&cc=NO&https=1&useAf=loaded_string_6287635b0bce9d250429df012c0426f88d0bd_2633134_1662615143.377_64516&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Mw==&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
Hash 414a36b381fa92d710d340fc4a1a5d45
7dbf9265db95ab77d242d6668e227a3cb7ea0927
4d1c1594a06eba4d86340fca2a1405771c1f47a737fa79f62c75f62fd98a006d
GET /show.php?u3161662615143=true&ad=673873&f=728x90&a=625611&cri=0&s=YzY3MmFlZTc2YWM0OGU1NjhlY2ZlODE0ZTY0NDliOTQ=&u=561739&si=694711613&di=30393698&ci=16&h=274bfa552e396e8f6a1dfb95c9f944fd&cc=NO&https=1&useAf=loaded_string_6287635b0bce9d250429df012c0426f88d0bd_2633134_1662615143.377_64516&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Mw==&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/bnr_xload.php?section=General&pub=561739&format=728x90&ga=g&xt=166261514230494&xtt=4966763
Cookie: used_ad2316997=1; total_impressions=2; cpa_673873=728x90_694711613_0; used_ad2633134=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 08 Sep 2022 05:32:23 GMT
last-modified: Thu, 08 Sep 2022 05:32:23 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
ylx-i.advertica-cdn2.com/aff/pub_upk7x1.png?1480419365
185.66.200.127200 OK 33 kB URL HTTP/2 ylx-i.advertica-cdn2.com/aff/pub_upk7x1.png?1480419365
IP 185.66.200.127:0
ASN #201702 skHosting.eu s.r.o.
Hash 79149b530b29bf206061fd9a46b08603
c02a1da18fab2d405577fa080faa9c9626edabd3
33c45e1cf4196c26baf63797e74509a485ae238bce9eb32088200c7c8144ab8d
GET /aff/pub_upk7x1.png?1480419365 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: image/png
last-modified: Tue, 29 Nov 2016 11:36:05 GMT
etag: W/"583d6825-5642"
expires: Sat, 08 Oct 2022 05:32:23 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
ebaaa.xyz/87d1c6c507/4f9c843bb0/bg.jpg
185.66.201.8200 OK 22 kB URL HTTP/2 ebaaa.xyz/87d1c6c507/4f9c843bb0/bg.jpg
IP 185.66.201.8:0
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (927)
Hash a9eab1a1c1450f86c062364d82247d2b
53c8486c4f41964852d7de78f6d606a771b284b7
ed90b32aa92a0d89fdfeb9d3afbeb104ff49e23a95b19c295d9463ec56c2b4a8
GET /87d1c6c507/4f9c843bb0/bg.jpg HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ebaaa.xyz/87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCGjrijACxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_51997&adApiR=loaded_string_9562335b0bce9d250429df012c0426f88d0bd_2316997_1662615143.1093_99762&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=160&height=600&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=950382848672&realRef=bUZNbVNXdW9lWmh3dDcvUzBoMklpN1VuQTZQUUluRGZLYmtUZ2VUd3RWbz0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: application/javascript
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
content-encoding: br
X-Firefox-Spdy: h2
i.ytimg.com/vi/rD8SmacBUcU/mqdefault.jpg
142.250.74.182200 OK 7.7 kB URL HTTP/2 i.ytimg.com/vi/rD8SmacBUcU/mqdefault.jpg
IP 142.250.74.182:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3\012- data
Hash 5e83b215199d2fd876e98378ea9025b7
186bc66b2a3c43d84ea008faec3a477bc08295fb
0b60376bfbfe9353cce412f0f279a2e46002bbc9118b9bf86aa72aa3f5989bb5
GET /vi/rD8SmacBUcU/mqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ebaaa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 7718
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 04:22:31 GMT
expires: Thu, 08 Sep 2022 06:22:31 GMT
cache-control: public, max-age=7200
age: 4192
etag: "1464206943"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vidtrends.net/api/bannerVideo/article/db/box/
185.66.200.41200 OK 26 kB URL HTTP/2 vidtrends.net/api/bannerVideo/article/db/box/
IP 185.66.200.41:0
ASN #201702 skHosting.eu s.r.o.
Hash 4da281cad7d93bc5d4bb5e30897280dc
0c8a30af935bd1db8f3075f244dd45a6900c2079
badd6432e557cb6280a8cb8c418e17ca907d17cdcd0cb59ea69d05e83f031be5
GET /api/bannerVideo/article/db/box/ HTTP/1.1
Host: vidtrends.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ebaaa.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: text/javascript;charset=UTF-8
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc54ec76cad5207150fdf9df5ef92b48
cb83a0e922dbf8ba30464e020e854f3d12ce69f4
60c37a98fdf98703a03766ffd5aec518b51d2f86c8cc444c4bf16ac6261d29ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 652bdaaaca09a66fc9a260163eee7aeb
f59f82dd2c189cdff5c641ff7c53c5f257e1f2d2
bbaf18a14748bb922b9bd19125c78310a564b1aebb7de8f30af0be6fa390e7da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-9JX488NS09>m=2oe8v0&_p=1150824197&gdid=dZTNiMT&cid=513769678.1662615136&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662615136&sct=1&seg=0&dl=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778&dt=Tchoupi%20L%20Integrale%20Dvdrip%2056k%20-%20Free%20Bariatric%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-9JX488NS09>m=2oe8v0&_p=1150824197&gdid=dZTNiMT&cid=513769678.1662615136&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662615136&sct=1&seg=0&dl=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778&dt=Tchoupi%20L%20Integrale%20Dvdrip%2056k%20-%20Free%20Bariatric%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9JX488NS09>m=2oe8v0&_p=1150824197&gdid=dZTNiMT&cid=513769678.1662615136&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662615136&sct=1&seg=0&dl=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778&dt=Tchoupi%20L%20Integrale%20Dvdrip%2056k%20-%20Free%20Bariatric%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bariatric-club.net
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://bariatric-club.net
date: Thu, 08 Sep 2022 05:32:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 652bdaaaca09a66fc9a260163eee7aeb
f59f82dd2c189cdff5c641ff7c53c5f257e1f2d2
bbaf18a14748bb922b9bd19125c78310a564b1aebb7de8f30af0be6fa390e7da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 05:32:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ae01.alicdn.com/kf/HTB1bf4ahYZnBKNjSZFG762t3FXa1/EN_725_90.png
23.38.200.42200 OK 15 kB URL HTTP/2 ae01.alicdn.com/kf/HTB1bf4ahYZnBKNjSZFG762t3FXa1/EN_725_90.png
IP 23.38.200.42:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 725x90, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6e4a2a04b542b55c46da2d22551ee97f
5d2a16bf137284c1fdae0c693707c0c9fe8c4d64
3b5e1c9d21afacf805a12f336f4a89f18b26949e6956fc92066c086e4979b892
GET /kf/HTB1bf4ahYZnBKNjSZFG762t3FXa1/EN_725_90.png HTTP/1.1
Host: ae01.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
last-modified: Sun, 10 Jul 2022 09:40:53 GMT
server: Akamai Image Manager
content-length: 15286
content-type: image/webp
cache-control: private, no-transform, max-age=1926911
expires: Fri, 30 Sep 2022 12:47:35 GMT
date: Thu, 08 Sep 2022 05:32:24 GMT
from-req-dns-type: NA
network_info: NO_OSLO_50304
served-from: 23.36.79.28
timing-allow-origin: *
X-Firefox-Spdy: h2
ae01.alicdn.com/kf/HTB1Djt5X7KWBuNjy1zj763OypXar/EN_500_500.png
23.38.200.42200 OK 42 kB URL HTTP/2 ae01.alicdn.com/kf/HTB1Djt5X7KWBuNjy1zj763OypXar/EN_500_500.png
IP 23.38.200.42:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2780806f4d52231dbf000dce11f26c28
bba0456e5335c28863d39dbba485d9e1b1ea37d1
438bd19d77b6d4d583baf9f25dab178025db22ecfa34b6d446a269f6fa70eba7
GET /kf/HTB1Djt5X7KWBuNjy1zj763OypXar/EN_500_500.png HTTP/1.1
Host: ae01.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
last-modified: Thu, 16 Jun 2022 19:10:43 GMT
server: Akamai Image Manager
x-serial: 84
x-check-cacheable: YES
content-length: 41552
content-type: image/webp
cache-control: private, no-transform, max-age=70196
expires: Fri, 09 Sep 2022 01:02:20 GMT
date: Thu, 08 Sep 2022 05:32:24 GMT
from-req-dns-type: NA
network_info: NO_OSLO_50304
served-from: 23.36.79.28
timing-allow-origin: *
X-Firefox-Spdy: h2
n.ads3-adnow.com/st?d=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&r=96860
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/st?d=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&r=96860
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /st?d=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&r=96860 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
n.ads3-adnow.com/stn?d=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&r=15911
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/stn?d=eyJ0aW1lIjoxNjYyNjE1MTQ0LCJhZG5faWQiOjE3LCJhZHRfaWQiOjE0LCJjb2RlX2lkIjo2MDYzNzEsInNpdGVfaWQiOjM2MzQ1Miwic3ViX2lkIjoiIiwiY25yX2NvZGUiOiJOT1IiLCJjaXR5IjoiT3NsbyIsImlzX2NhY2hlZCI6MCwiZHNwIjoyNTgsImRzcF9wcmljZSI6MC4wMDAxLCJkc3BfcHJpY2VfdXNkIjowLjAwMDAwMiwicHJpY2UiOjAuMDAwMSwiZXh0ZXJuYWxfYmlkX3ByaWNlX3VzZCI6MCwiZXh0ZXJuYWxfYmlkX3ByaWNlX3J1YiI6MCwiYWR0X2Zvcm1hdCI6Im50di01eDIiLCJjb2RlX3Nob3dfdHlwZSI6Im5vcm1hbCIsImJpZGlkIjoiU0NCLTI1OC1zc3AtOThmYzQ0M2YtOGM1Zi1kYmMzLTE0OGEtMTQ4YS04ZmFmZDM0OTdiLWw3c200bmZhLTFnZ3EiLCJpbXBpZCI6IlNDSS0yNTgtNjA2MzcxLWw3c200bmZhLTFhY2kiLCJjcGMiOjAsImNwbSI6MCwidGVhc2Vyc0RhdGEiOltdfQ&r=15911
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /stn?d=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&r=15911 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
n.ads3-adnow.com/stn?d=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&r=47356
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/stn?d=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&r=47356
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /stn?d=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&r=47356 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
n.ads3-adnow.com/stn?d=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&r=91348
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/stn?d=eyJ0aW1lIjoxNjYyNjE1MTQ0LCJhZG5faWQiOjE3LCJhZHRfaWQiOjE0LCJjb2RlX2lkIjo2MDYzNzEsInNpdGVfaWQiOjM2MzQ1Miwic3ViX2lkIjoiIiwiY25yX2NvZGUiOiJOT1IiLCJjaXR5IjoiT3NsbyIsImlzX2NhY2hlZCI6MCwiZHNwIjoyNTgsImRzcF9wcmljZSI6MC4wMDAxLCJkc3BfcHJpY2VfdXNkIjowLjAwMDAwMiwicHJpY2UiOjAuMDAwMSwiZXh0ZXJuYWxfYmlkX3ByaWNlX3VzZCI6MCwiZXh0ZXJuYWxfYmlkX3ByaWNlX3J1YiI6MCwiYWR0X2Zvcm1hdCI6Im50di01eDIiLCJjb2RlX3Nob3dfdHlwZSI6Im5vcm1hbCIsImJpZGlkIjoiU0NCLTI1OC1zc3AtOThmYzQ0M2YtOGM1Zi1kYmMzLTE0OGEtMTQ4YS04ZmFmZDM0OTdiLWw3c200bmZhLTFnZ3EiLCJpbXBpZCI6IlNDSS0yNTgtNjA2MzcxLWw3c200bmZhLTFhY2kiLCJjcGMiOjAsImNwbSI6MCwidGVhc2Vyc0RhdGEiOltdfQ&r=91348
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /stn?d=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&r=91348 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c009d54a5351d80078ac6af058f0e060
1f34e8802428c37d08d01fe68033edcc6c68c80b
41a5a32f6d8f03fdcfd2976dff2c702ae634b244b0b122b3850b99e556ef9747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41A5A32F6D8F03FDCFD2976DFF2C702AE634B244B0B122B3850B99E556EF9747"
Last-Modified: Tue, 06 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10909
Expires: Thu, 08 Sep 2022 08:34:13 GMT
Date: Thu, 08 Sep 2022 05:32:24 GMT
Connection: keep-alive
n.ads3-adnow.com/stn?d=eyJ0aW1lIjoxNjYyNjE1MTQ0LCJhZG5faWQiOjE3LCJhZHRfaWQiOjE0LCJjb2RlX2lkIjo2MDYzNzEsInNpdGVfaWQiOjM2MzQ1Miwic3ViX2lkIjoiIiwiY25yX2NvZGUiOiJOT1IiLCJjaXR5IjoiT3NsbyIsImlzX2NhY2hlZCI6MCwiZHNwIjoyNTgsImRzcF9wcmljZSI6MC4wMDAxLCJkc3BfcHJpY2VfdXNkIjowLjAwMDAwMiwicHJpY2UiOjAuMDAwMSwiZXh0ZXJuYWxfYmlkX3ByaWNlX3VzZCI6MCwiZXh0ZXJuYWxfYmlkX3ByaWNlX3J1YiI6MCwiYWR0X2Zvcm1hdCI6Im50di01eDIiLCJjb2RlX3Nob3dfdHlwZSI6Im5vcm1hbCIsImJpZGlkIjoiU0NCLTI1OC1zc3AtOThmYzQ0M2YtOGM1Zi1kYmMzLTE0OGEtMTQ4YS04ZmFmZDM0OTdiLWw3c200bmZhLTFnZ3EiLCJpbXBpZCI6IlNDSS0yNTgtNjA2MzcxLWw3c200bmZhLTFhY2kiLCJjcGMiOjAsImNwbSI6MCwidGVhc2Vyc0RhdGEiOltdfQ&r=38668
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/stn?d=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&r=38668
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /stn?d=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&r=38668 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
n.ads3-adnow.com/stn?d=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&r=61813
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/stn?d=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&r=61813
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /stn?d=eyJ0aW1lIjoxNjYyNjE1MTQ0LCJhZG5faWQiOjE3LCJhZHRfaWQiOjE0LCJjb2RlX2lkIjo2MDYzNzEsInNpdGVfaWQiOjM2MzQ1Miwic3ViX2lkIjoiIiwiY25yX2NvZGUiOiJOT1IiLCJjaXR5IjoiT3NsbyIsImlzX2NhY2hlZCI6MCwiZHNwIjoyNTgsImRzcF9wcmljZSI6MC4wMDAxLCJkc3BfcHJpY2VfdXNkIjowLjAwMDAwMiwicHJpY2UiOjAuMDAwMSwiZXh0ZXJuYWxfYmlkX3ByaWNlX3VzZCI6MCwiZXh0ZXJuYWxfYmlkX3ByaWNlX3J1YiI6MCwiYWR0X2Zvcm1hdCI6Im50di01eDIiLCJjb2RlX3Nob3dfdHlwZSI6Im5vcm1hbCIsImJpZGlkIjoiU0NCLTI1OC1zc3AtOThmYzQ0M2YtOGM1Zi1kYmMzLTE0OGEtMTQ4YS04ZmFmZDM0OTdiLWw3c200bmZhLTFnZ3EiLCJpbXBpZCI6IlNDSS0yNTgtNjA2MzcxLWw3c200bmZhLTFhY2kiLCJjcGMiOjAsImNwbSI6MCwidGVhc2Vyc0RhdGEiOltdfQ&r=61813 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
n.ads3-adnow.com/stn?d=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&r=58938
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/stn?d=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&r=58938
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /stn?d=eyJ0aW1lIjoxNjYyNjE1MTQ0LCJhZG5faWQiOjE3LCJhZHRfaWQiOjE0LCJjb2RlX2lkIjo2MDYzNzEsInNpdGVfaWQiOjM2MzQ1Miwic3ViX2lkIjoiIiwiY25yX2NvZGUiOiJOT1IiLCJjaXR5IjoiT3NsbyIsImlzX2NhY2hlZCI6MCwiZHNwIjoyNTgsImRzcF9wcmljZSI6MC4wMDAxLCJkc3BfcHJpY2VfdXNkIjowLjAwMDAwMiwicHJpY2UiOjAuMDAwMSwiZXh0ZXJuYWxfYmlkX3ByaWNlX3VzZCI6MCwiZXh0ZXJuYWxfYmlkX3ByaWNlX3J1YiI6MCwiYWR0X2Zvcm1hdCI6Im50di01eDIiLCJjb2RlX3Nob3dfdHlwZSI6Im5vcm1hbCIsImJpZGlkIjoiU0NCLTI1OC1zc3AtOThmYzQ0M2YtOGM1Zi1kYmMzLTE0OGEtMTQ4YS04ZmFmZDM0OTdiLWw3c200bmZhLTFnZ3EiLCJpbXBpZCI6IlNDSS0yNTgtNjA2MzcxLWw3c200bmZhLTFhY2kiLCJjcGMiOjAsImNwbSI6MCwidGVhc2Vyc0RhdGEiOltdfQ&r=58938 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
st-n.ads5-adnow.com/i/logo/adnow-mini-v2.png
92.223.97.97200 OK 1.6 kB URL HTTP/2 st-n.ads5-adnow.com/i/logo/adnow-mini-v2.png
IP 92.223.97.97:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 127 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 8097fcbc90702c16deb9c7ab9fa16018
5562a75c4342d55f826d6e714f639e90072d9e6b
59b5e3f2ee98460d0d815072c15c6683f9614e7ebaa614dc104f2ab03ff41b7c
GET /i/logo/adnow-mini-v2.png HTTP/1.1
Host: st-n.ads5-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/png
content-length: 1590
last-modified: Tue, 22 Dec 2015 13:27:30 GMT
etag: "56794fc2-636"
expires: Thu, 08 Sep 2022 05:33:24 GMT
cache-control: max-age=60
cache: HIT
x-cached-since: 2022-09-08T05:31:36+00:00
x-id: sto5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
n.ads3-adnow.com/stn?d=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&r=54108
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/stn?d=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&r=54108
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /stn?d=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&r=54108 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
n.ads3-adnow.com/stn?d=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&r=96837
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/stn?d=eyJ0aW1lIjoxNjYyNjE1MTQ0LCJhZG5faWQiOjE3LCJhZHRfaWQiOjE0LCJjb2RlX2lkIjo2MDYzNzEsInNpdGVfaWQiOjM2MzQ1Miwic3ViX2lkIjoiIiwiY25yX2NvZGUiOiJOT1IiLCJjaXR5IjoiT3NsbyIsImlzX2NhY2hlZCI6MCwiZHNwIjoyNTgsImRzcF9wcmljZSI6MC4wMDAxLCJkc3BfcHJpY2VfdXNkIjowLjAwMDAwMiwicHJpY2UiOjAuMDAwMSwiZXh0ZXJuYWxfYmlkX3ByaWNlX3VzZCI6MCwiZXh0ZXJuYWxfYmlkX3ByaWNlX3J1YiI6MCwiYWR0X2Zvcm1hdCI6Im50di01eDIiLCJjb2RlX3Nob3dfdHlwZSI6Im5vcm1hbCIsImJpZGlkIjoiU0NCLTI1OC1zc3AtOThmYzQ0M2YtOGM1Zi1kYmMzLTE0OGEtMTQ4YS04ZmFmZDM0OTdiLWw3c200bmZhLTFnZ3EiLCJpbXBpZCI6IlNDSS0yNTgtNjA2MzcxLWw3c200bmZhLTFhY2kiLCJjcGMiOjAsImNwbSI6MCwidGVhc2Vyc0RhdGEiOltdfQ&r=96837
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /stn?d=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&r=96837 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
n.ads3-adnow.com/a?Id=606371&uid=ssp-98fc443f-8c5f-dbc3-148a-148a-8fafd3497b&sync=0&hours=5&ajax=0&domain=n.ads3-adnow.com&unq=0&cookies=1&_c=e30%3D&RNum=3628&docurl_=aHV2c3c_NTZqanx0bcKBwoB4cz51f8KJd0TChX3CjUlawoxaUlFXWFo&client_info=eyJ3aW4iOnsidyI6MTI2OCwiaCI6OTM5fSwic2NyZWVuIjp7IndpZHRoIjoxMjgwLCJoZWlnaHQiOjEwMjQsImNvbG9yRGVwdGgiOjI0LCJwaXhlbERlcHRoIjoyNH0sIm5hdmlnYXRvciI6eyJsYW5ndWFnZSI6ImVuLVVTIiwiYnJvd3Nlckxhbmd1YWdlIjoiIiwic3lzdGVtTGFuZ3VhZ2UiOiIiLCJ1c2VyTGFuZ3VhZ2UiOiIiLCJwbGF0Zm9ybSI6IkxpbnV4IHg4Nl82NCIsInZlbmRvciI6IiIsInRpbWVab25lIjowLCJkYXRlIjoiMjAyMi0wOS0wOFQwNTozMjoxNi4wNTBaIiwiaG91ciI6NSwid2lkdGgiOjEyODAsImhlaWdodCI6OTM5LCJwbHVnaW5zIjpbXSwiZmxhc2hWZXJzaW9uIjpmYWxzZSwiY29ubmVjdGlvblR5cGUiOiJ1bmRlZiJ9fQ%3D%3D&doc_inf=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%3D&set=e30%3D&ver=8&bln=0&bver=5
31.172.81.227200 OK 6.1 kB URL HTTP/2 n.ads3-adnow.com/a?Id=606371&uid=ssp-98fc443f-8c5f-dbc3-148a-148a-8fafd3497b&sync=0&hours=5&ajax=0&domain=n.ads3-adnow.com&unq=0&cookies=1&_c=e30%3D&RNum=3628&docurl_=aHV2c3c_NTZqanx0bcKBwoB4cz51f8KJd0TChX3CjUlawoxaUlFXWFo&client_info=eyJ3aW4iOnsidyI6MTI2OCwiaCI6OTM5fSwic2NyZWVuIjp7IndpZHRoIjoxMjgwLCJoZWlnaHQiOjEwMjQsImNvbG9yRGVwdGgiOjI0LCJwaXhlbERlcHRoIjoyNH0sIm5hdmlnYXRvciI6eyJsYW5ndWFnZSI6ImVuLVVTIiwiYnJvd3Nlckxhbmd1YWdlIjoiIiwic3lzdGVtTGFuZ3VhZ2UiOiIiLCJ1c2VyTGFuZ3VhZ2UiOiIiLCJwbGF0Zm9ybSI6IkxpbnV4IHg4Nl82NCIsInZlbmRvciI6IiIsInRpbWVab25lIjowLCJkYXRlIjoiMjAyMi0wOS0wOFQwNTozMjoxNi4wNTBaIiwiaG91ciI6NSwid2lkdGgiOjEyODAsImhlaWdodCI6OTM5LCJwbHVnaW5zIjpbXSwiZmxhc2hWZXJzaW9uIjpmYWxzZSwiY29ubmVjdGlvblR5cGUiOiJ1bmRlZiJ9fQ%3D%3D&doc_inf=eyJ0aXRsZSI6IlRjaG91cGklMjBMJTIwSW50ZWdyYWxlJTIwRHZkcmlwJTIwNTZrJTIwLSUyMEZyZWUlMjBCYXJpYXRyaWMlMjBDbHViIiwiZGVzY3JpcHRpb24iOiJUY2hvdXBpJTIwTCUyMEludGVncmFsZSUyMER2ZHJpcCUyMDU2ayUyMERvd25sb2FkJTIwJUUyJTk4JTg1JUUyJTk4JTg1JUUyJTk4JTg1JUUyJTk4JTg1JUUyJTk4JTg1JTIwRE9XTkxPQUQlMjBUY2hvdXBpJTIwTCUyMEludGVncmFsZSUyMER2ZHJpcCUyMDU2ayUyMEhhdmluZyUyMHRyb3VibGUlM0YlMjBSZXF1ZXN0JTIwY3VzdG9tZXIlMjBzdXBwb3J0JTIwaW4lMjB0aGUlMjBzdG9yZS4lMjBEb24ndCUyMHdvcnJ5LiUyMFdlJ3JlJTIwaGVyZSUyMHRvJTIwaGVscC4lMjBUaGUlMjBvcmRlciUyMHN0YXR1cyUyMHdpbGwlMjBkaXNwbGF5JTIweW91ciUyMG9yZGVyZWQlMjBpdGVtJTIwYXMlMjB3ZSUyMHJlY2VpdmUuJTIwVGhlJTIwZnVuY3Rpb24lMjBvZiUyMGElMjB3ZWIlMjBzaXRlJTIwaXMlMjBhJTIwc2l0ZSUyMGF0IiwiY2hhclNldCI6IlVURi04In0%3D&set=e30%3D&ver=8&bln=0&bver=5
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash b1075c3b04eb6151d5cec3307c72f37f
3b0bf971319ca1bae591ede27e1fdf452c54b96d
9c46fc4e81d522a1505731c4f6ac32123254c237526f52cfa8b6eb5217d46aef
GET /a?Id=606371&uid=ssp-98fc443f-8c5f-dbc3-148a-148a-8fafd3497b&sync=0&hours=5&ajax=0&domain=n.ads3-adnow.com&unq=0&cookies=1&_c=e30%3D&RNum=3628&docurl_=aHV2c3c_NTZqanx0bcKBwoB4cz51f8KJd0TChX3CjUlawoxaUlFXWFo&client_info=eyJ3aW4iOnsidyI6MTI2OCwiaCI6OTM5fSwic2NyZWVuIjp7IndpZHRoIjoxMjgwLCJoZWlnaHQiOjEwMjQsImNvbG9yRGVwdGgiOjI0LCJwaXhlbERlcHRoIjoyNH0sIm5hdmlnYXRvciI6eyJsYW5ndWFnZSI6ImVuLVVTIiwiYnJvd3Nlckxhbmd1YWdlIjoiIiwic3lzdGVtTGFuZ3VhZ2UiOiIiLCJ1c2VyTGFuZ3VhZ2UiOiIiLCJwbGF0Zm9ybSI6IkxpbnV4IHg4Nl82NCIsInZlbmRvciI6IiIsInRpbWVab25lIjowLCJkYXRlIjoiMjAyMi0wOS0wOFQwNTozMjoxNi4wNTBaIiwiaG91ciI6NSwid2lkdGgiOjEyODAsImhlaWdodCI6OTM5LCJwbHVnaW5zIjpbXSwiZmxhc2hWZXJzaW9uIjpmYWxzZSwiY29ubmVjdGlvblR5cGUiOiJ1bmRlZiJ9fQ%3D%3D&doc_inf=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%3D&set=e30%3D&ver=8&bln=0&bver=5 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
n.ads3-adnow.com/stn?d=eyJ0aW1lIjoxNjYyNjE1MTQ0LCJhZG5faWQiOjE3LCJhZHRfaWQiOjE0LCJjb2RlX2lkIjo2MDYzNzEsInNpdGVfaWQiOjM2MzQ1Miwic3ViX2lkIjoiIiwiY25yX2NvZGUiOiJOT1IiLCJjaXR5IjoiT3NsbyIsImlzX2NhY2hlZCI6MCwiZHNwIjoyNTgsImRzcF9wcmljZSI6MC4wMDAxLCJkc3BfcHJpY2VfdXNkIjowLjAwMDAwMiwicHJpY2UiOjAuMDAwMSwiZXh0ZXJuYWxfYmlkX3ByaWNlX3VzZCI6MCwiZXh0ZXJuYWxfYmlkX3ByaWNlX3J1YiI6MCwiYWR0X2Zvcm1hdCI6Im50di01eDIiLCJjb2RlX3Nob3dfdHlwZSI6Im5vcm1hbCIsImJpZGlkIjoiU0NCLTI1OC1zc3AtOThmYzQ0M2YtOGM1Zi1kYmMzLTE0OGEtMTQ4YS04ZmFmZDM0OTdiLWw3c200bmZhLTFnZ3EiLCJpbXBpZCI6IlNDSS0yNTgtNjA2MzcxLWw3c200bmZhLTFhY2kiLCJjcGMiOjAsImNwbSI6MCwidGVhc2Vyc0RhdGEiOltdfQ&r=65520
31.172.81.227200 OK 119 B URL HTTP/2 n.ads3-adnow.com/stn?d=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&r=65520
IP 31.172.81.227:0
ASN #44066 diva-e Datacenters GmbH
Hash 399be6eed09c9a6569f3690e0ed89965
231b2c1391e1b8000b548f6e3b5f8c09295b800c
5e2366a6682a0d2ff0a87820842cc8763103127646945a46e695c0b32c2bb90a
GET /stn?d=eyJ0aW1lIjoxNjYyNjE1MTQ0LCJhZG5faWQiOjE3LCJhZHRfaWQiOjE0LCJjb2RlX2lkIjo2MDYzNzEsInNpdGVfaWQiOjM2MzQ1Miwic3ViX2lkIjoiIiwiY25yX2NvZGUiOiJOT1IiLCJjaXR5IjoiT3NsbyIsImlzX2NhY2hlZCI6MCwiZHNwIjoyNTgsImRzcF9wcmljZSI6MC4wMDAxLCJkc3BfcHJpY2VfdXNkIjowLjAwMDAwMiwicHJpY2UiOjAuMDAwMSwiZXh0ZXJuYWxfYmlkX3ByaWNlX3VzZCI6MCwiZXh0ZXJuYWxfYmlkX3ByaWNlX3J1YiI6MCwiYWR0X2Zvcm1hdCI6Im50di01eDIiLCJjb2RlX3Nob3dfdHlwZSI6Im5vcm1hbCIsImJpZGlkIjoiU0NCLTI1OC1zc3AtOThmYzQ0M2YtOGM1Zi1kYmMzLTE0OGEtMTQ4YS04ZmFmZDM0OTdiLWw3c200bmZhLTFnZ3EiLCJpbXBpZCI6IlNDSS0yNTgtNjA2MzcxLWw3c200bmZhLTFhY2kiLCJjcGMiOjAsImNwbSI6MCwidGVhc2Vyc0RhdGEiOltdfQ&r=65520 HTTP/1.1
Host: n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Thu, 08 Sep 2022 05:32:36 GMT
content-type: image/png
content-length: 119
access-control-allow-origin: *
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
X-Firefox-Spdy: h2
i.ibb.co/FxFSq5p/1.jpg
51.210.32.106200 OK 63 kB IP 51.210.32.106:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 200x200, components 3\012- data
Hash 207bae62689b019142bbea12fe9e8619
c528fef7dac8fdfa2cf330d052641b1ef5fd7306
c6de24e39ac5a4e6dd1b82acf10846be18e5404f5197f129c130dee10980e7ea
GET /FxFSq5p/1.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/jpeg
content-length: 63246
last-modified: Fri, 06 May 2022 05:28:58 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/1KM3kMd/4.gif
51.210.32.106200 OK 74 kB IP 51.210.32.106:0
File type GIF image data, version 89a, 200 x 200\012- data
Hash 52cab048efb7e5189c04c3a9d9eae27c
546add2dab0cca9a88f1a57f608b3153af656e41
ef2b953c173fd94559e932509d1d4a95eabedfc9fe7dfabcc2c31d5f862158a6
GET /1KM3kMd/4.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/gif
content-length: 73985
last-modified: Fri, 06 May 2022 05:32:59 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/3BHNfDt/6.jpg
51.210.32.106200 OK 67 kB IP 51.210.32.106:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=640, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 200x200, components 3\012- data
Hash 7a1b38227245ede7f9ad7bd3cb836e80
896acc0c9c336d385a36cc33e9838e3f86945f55
674795c60a74c77a3974fb84a71f626c75c184b3200342464d9bd806f24decc4
GET /3BHNfDt/6.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/jpeg
content-length: 66658
last-modified: Fri, 06 May 2022 05:33:44 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/3TTHvhb/2.jpg
51.210.32.106200 OK 50 kB IP 51.210.32.106:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=678, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=564], progressive, precision 8, 200x200, components 3\012- data
Hash ccaa2025295ca9ea1bfe1505c2c3d622
633d7049311f63747e371eb43b83b038777ec89f
d375fde4cc2a8a5affd079a05ce434bea8f6bffe06647aaa3943c2ff9306233f
GET /3TTHvhb/2.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/jpeg
content-length: 50335
last-modified: Fri, 06 May 2022 05:31:50 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/0ZCKzGy/9.jpg
51.210.32.106200 OK 56 kB IP 51.210.32.106:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1066, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 200x200, components 3\012- data
Hash 57169c1691b33e17d931f02df2fca877
bdc7a0f907242a5263f84be619a2e123810026dc
b3b5a2ad3f9ebb357b0a1a6c2ddbc7481e78103100c98eeda025b6227c3d6a55
GET /0ZCKzGy/9.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/jpeg
content-length: 55513
last-modified: Fri, 06 May 2022 05:34:41 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/4WDrCGG/8.jpg
51.210.32.106200 OK 69 kB IP 51.210.32.106:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=423, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=564], progressive, precision 8, 200x200, components 3\012- data
Hash 635b0f5fd097a4059eed3d5cbcd0677f
9b4bad94b67f26d80b654ceb704f29c7171f47ae
7694de1ad82e5103cdff255c27cf502b11b22c8960590634b3e1ab8add168078
GET /4WDrCGG/8.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/jpeg
content-length: 69251
last-modified: Fri, 06 May 2022 05:34:23 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/NVF7fMB/3.jpg
51.210.32.106200 OK 80 kB IP 51.210.32.106:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1080], progressive, precision 8, 200x200, components 3\012- data
Hash 0d756003f7f67c22edc114e4420bd698
dd07d8dec8f8ffb7fdd61aa0549d7f19accfafb1
b7dccda1313c5d71c091b803ac65ffdf700b040a427c202adeaf3efa35890e73
GET /NVF7fMB/3.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/jpeg
content-length: 80433
last-modified: Fri, 06 May 2022 05:32:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/Nt8vV3s/10.jpg
51.210.32.106200 OK 59 kB IP 51.210.32.106:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=667, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 200x200, components 3\012- data
Hash f6640eb6d4a3780568fa2025135092d7
90c02d2fe0314a963826bce498a9eafdce2d5524
9522047b999c419486848fbd945f33db9abba805cd27eaa573000ac84e91da34
GET /Nt8vV3s/10.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/jpeg
content-length: 58760
last-modified: Fri, 06 May 2022 05:35:03 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/PQ3t180/5.gif
51.210.32.106200 OK 86 kB IP 51.210.32.106:0
File type GIF image data, version 89a, 200 x 200\012- data
Hash 4b3c6714748e2ee28008c5108e917041
3fecc3ff89ea0364d36fac265bd004bbc3e9808a
f70df0cd3805ae10373931fabd89380ed702ab5a4c1ff185372d91dd04edda5e
GET /PQ3t180/5.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/gif
content-length: 86133
last-modified: Fri, 06 May 2022 05:33:23 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/8Y0kB9G/7.jpg
51.210.32.106200 OK 85 kB IP 51.210.32.106:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=810, bps=0, PhotometricIntepretation=RGB, description=Bitcoin on motherboard,3d rendering,conceptual image., orientation=upper-left, width=1296], progressive, precision 8, 200x200, components 3\012- data
Hash d353df7cb3cca52ec9a3babeaa5436d7
51ba8a37d2db1f692593f117c9286c97428fee6a
0392b6cb7370f71e48ea26e5c0af384a5bb7560b88f1ceb9e58e6c195b78f137
GET /8Y0kB9G/7.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: image/jpeg
content-length: 85090
last-modified: Fri, 06 May 2022 05:34:04 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
scnd-tr.com/track.gif?a=configurable_perf1&b=1005&c=1273&d=287&e=518&f=&g=ssp-98fc443f-8c5f-dbc3-148a-148a-8fafd3497b&h=606371
88.208.41.104204 No Content 0 B URL HTTP/2 scnd-tr.com/track.gif?a=configurable_perf1&b=1005&c=1273&d=287&e=518&f=&g=ssp-98fc443f-8c5f-dbc3-148a-148a-8fafd3497b&h=606371
IP 88.208.41.104:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track.gif?a=configurable_perf1&b=1005&c=1273&d=287&e=518&f=&g=ssp-98fc443f-8c5f-dbc3-148a-148a-8fafd3497b&h=606371 HTTP/1.1
Host: scnd-tr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
access-control-allow-origin: *
x-upstream: 192.168.11.102:8085, 192.168.11.101:8085
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Thu, 08 Sep 2022 04:41:12 GMT
expires: Thu, 08 Sep 2022 06:41:12 GMT
cache-control: public, max-age=7200
age: 3072
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
z-na.amazon-adsystem.com/widgets/onejs?MarketPlace=US&adInstanceId=f712473a-b631-4fe7-9692-6d0454958aef
54.230.82.193200 OK 8.2 kB URL HTTP/2 z-na.amazon-adsystem.com/widgets/onejs?MarketPlace=US&adInstanceId=f712473a-b631-4fe7-9692-6d0454958aef
IP 54.230.82.193:0
File type ASCII text, with very long lines (25474), with no line terminators
Hash ac5d4389312431c0b2fcdbc4a13f0141
03ba928f9843803e12254bbfb7b24edb7b1c8d25
7c66b91cd4262ebed6bae4ffd2585e0a83e310943b5abe0f011f99ac886e2bf5
GET /widgets/onejs?MarketPlace=US&adInstanceId=f712473a-b631-4fe7-9692-6d0454958aef HTTP/1.1
Host: z-na.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
content-length: 8207
date: Thu, 08 Sep 2022 05:32:24 GMT
server: Server
content-encoding: gzip
charset: UTF-8
access-control-allow-origin: *
cache-control: public,max-age=300,s-maxage=300,no-transform
expires: Thu, 08 Sep 2022 05:37:24 GMT
pragma: Public
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SAHaBi2nWT7IX4VyzH4bM_NfOLHs4AHs4BXvxu0nv_H3kdvJFeN2Cg==
X-Firefox-Spdy: h2
z-na.amazon-adsystem.com/widgets/onejs?MarketPlace=US&adInstanceId=69ec0ab0-b0f8-4d2d-a148-b068e44a6822
54.230.82.193200 OK 8.2 kB URL HTTP/2 z-na.amazon-adsystem.com/widgets/onejs?MarketPlace=US&adInstanceId=69ec0ab0-b0f8-4d2d-a148-b068e44a6822
IP 54.230.82.193:0
File type ASCII text, with very long lines (25409), with no line terminators
Hash 45acc56407b4c5a5a48c6aded7236afd
2c5f68113a74b8787ca3dd2b9da426c962886db7
2e69fdb3c0d7d8b7bd44e1e04e1b70168818fb767572d2f790d6c8b44ee9fe6a
GET /widgets/onejs?MarketPlace=US&adInstanceId=69ec0ab0-b0f8-4d2d-a148-b068e44a6822 HTTP/1.1
Host: z-na.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
content-length: 8185
date: Thu, 08 Sep 2022 05:32:24 GMT
server: Server
content-encoding: gzip
charset: UTF-8
access-control-allow-origin: *
cache-control: public,max-age=300,s-maxage=300,no-transform
expires: Thu, 08 Sep 2022 05:37:24 GMT
pragma: Public
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZQRqugXH4SAjZkVmURpjY8GtAtBsaVNp2hnuAv123fejVRRdK591cg==
X-Firefox-Spdy: h2
aax-us-east.amazon-adsystem.com/x/getad?src=308&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22placement%22%3A%22adunit0%22%2C%22enable_interest_ads%22%3A%22true%22%2C%22div_name%22%3A%22amzn-assoc-ad-f712473a-b631-4fe7-9692-6d0454958aef%22%2C%22tracking_id%22%3A%22e038-20%22%2C%22fallback_mode%22%3A%7B%22type%22%3A%22search%22%2C%22value%22%3A%22weight%20loss%22%7D%2C%22ad_mode%22%3A%22auto%22%2C%22ad_type%22%3A%22smart%22%2C%22marketplace%22%3A%22amazon%22%2C%22region%22%3A%22US%22%2C%22linkid%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22default_category%22%3A%22All%22%2C%22design%22%3A%22text_links%22%2C%22rows%22%3A%224%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22e038-20%22%2C%22slotNum%22%3A0%2C%22ead%22%3A4%7D&u=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778&jscb=amzn_assoc_jsonp_callback_adunit0_0
52.46.128.144200 OK 78 kB URL HTTP/1.1 aax-us-east.amazon-adsystem.com/x/getad?src=308&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22placement%22%3A%22adunit0%22%2C%22enable_interest_ads%22%3A%22true%22%2C%22div_name%22%3A%22amzn-assoc-ad-f712473a-b631-4fe7-9692-6d0454958aef%22%2C%22tracking_id%22%3A%22e038-20%22%2C%22fallback_mode%22%3A%7B%22type%22%3A%22search%22%2C%22value%22%3A%22weight%20loss%22%7D%2C%22ad_mode%22%3A%22auto%22%2C%22ad_type%22%3A%22smart%22%2C%22marketplace%22%3A%22amazon%22%2C%22region%22%3A%22US%22%2C%22linkid%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22default_category%22%3A%22All%22%2C%22design%22%3A%22text_links%22%2C%22rows%22%3A%224%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22e038-20%22%2C%22slotNum%22%3A0%2C%22ead%22%3A4%7D&u=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778&jscb=amzn_assoc_jsonp_callback_adunit0_0
IP 52.46.128.144:0
File type HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 482827d445ac6c0d0ff8cb9306a0c0e8
a106087b0378f9425011c7af657b1d9e74e62a37
b369944b8a1526b7d89ea987542931724f864d772d3921927d1f227ca560929a
GET /x/getad?src=308&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22placement%22%3A%22adunit0%22%2C%22enable_interest_ads%22%3A%22true%22%2C%22div_name%22%3A%22amzn-assoc-ad-f712473a-b631-4fe7-9692-6d0454958aef%22%2C%22tracking_id%22%3A%22e038-20%22%2C%22fallback_mode%22%3A%7B%22type%22%3A%22search%22%2C%22value%22%3A%22weight%20loss%22%7D%2C%22ad_mode%22%3A%22auto%22%2C%22ad_type%22%3A%22smart%22%2C%22marketplace%22%3A%22amazon%22%2C%22region%22%3A%22US%22%2C%22linkid%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22default_category%22%3A%22All%22%2C%22design%22%3A%22text_links%22%2C%22rows%22%3A%224%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22e038-20%22%2C%22slotNum%22%3A0%2C%22ead%22%3A4%7D&u=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778&jscb=amzn_assoc_jsonp_callback_adunit0_0 HTTP/1.1
Host: aax-us-east.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 08 Sep 2022 05:32:25 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 77806
Connection: keep-alive
x-amz-rid: XDJMCT3AS1TZADKPWKPE
Set-Cookie: ad-id=A8w9iw32vkP-j6eacGbzxWE; Domain=.amazon-adsystem.com; Expires=Sat, 01-Apr-2023 05:32:25 GMT; Path=/; Secure; HttpOnly; SameSite=None
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
aax-us-east.amazon-adsystem.com/x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w51%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A4%2C%22logType%22%3A%22smart_hide%22%2C%22availableItems%22%3A%5B%5D%2C%22reason%22%3A%22No%20ASIN%20results%20at%20all%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%7D
52.46.128.144200 OK 43 B URL HTTP/1.1 aax-us-east.amazon-adsystem.com/x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w51%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A4%2C%22logType%22%3A%22smart_hide%22%2C%22availableItems%22%3A%5B%5D%2C%22reason%22%3A%22No%20ASIN%20results%20at%20all%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%7D
IP 52.46.128.144:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w51%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A4%2C%22logType%22%3A%22smart_hide%22%2C%22availableItems%22%3A%5B%5D%2C%22reason%22%3A%22No%20ASIN%20results%20at%20all%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%7D HTTP/1.1
Host: aax-us-east.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 08 Sep 2022 05:32:25 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: 04QK70E5TEN6B49SV5JB
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 7b58d9ea5a46a73f1c5a8fc168142ba0
76106dc44cc29bda38381017206049e810d4b5cd
ba2c1b710025bbb333a0629f5c7f2a179341dc207b0dfdd036c21490a050a65e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 08 Sep 2022 05:32:25 GMT
Last-Modified: Thu, 08 Sep 2022 04:31:32 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FZ4yGD3nchStwJmdDwYCVj5bx9MJVF_bi0VnlKUfbL1_8YCJAAaAYg==
Age: 3653
wms-na.amazon-adsystem.com/panda/20070822/US/img/amzn-widgets-sprite-2x.png
54.230.80.193200 OK 42 kB URL HTTP/2 wms-na.amazon-adsystem.com/panda/20070822/US/img/amzn-widgets-sprite-2x.png
IP 54.230.80.193:0
File type PNG image data, 698 x 582, 8-bit/color RGBA, non-interlaced\012- data
Hash d4946b965713962d80a83775b3f533fc
72188ab8119166e4df0812af0b52c3775cbf2db7
f45e8d22b5dfa4c04aabcb189e576f5dfe24d9a02d8d43d617ce49c8a4be3fdb
GET /panda/20070822/US/img/amzn-widgets-sprite-2x.png HTTP/1.1
Host: wms-na.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 41521
date: Tue, 23 Aug 2022 02:03:33 GMT
server: Server
last-modified: Fri, 10 Jun 2022 10:11:59 GMT
etag: "a231-5e1152b3f5cc9"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Tue, 30 Aug 2022 02:03:33 GMT
charset: UTF-8
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8vAtJsBnWwHWzFW8d9DQ7fCT4WmTNW1Ayd7YD_zTHwiOLCpwttw71w==
age: 1394932
X-Firefox-Spdy: h2
aax-us-east.amazon-adsystem.com/x/getad?src=308&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22placement%22%3A%22adunit0%22%2C%22enable_interest_ads%22%3A%22true%22%2C%22div_name%22%3A%22amzn-assoc-ad-69ec0ab0-b0f8-4d2d-a148-b068e44a6822%22%2C%22tracking_id%22%3A%22e038-20%22%2C%22fallback_mode%22%3A%7B%22type%22%3A%22search%22%2C%22value%22%3A%22weight%20loss%22%7D%2C%22ad_mode%22%3A%22auto%22%2C%22ad_type%22%3A%22smart%22%2C%22marketplace%22%3A%22amazon%22%2C%22region%22%3A%22US%22%2C%22linkid%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22default_category%22%3A%22All%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22e038-20%22%2C%22slotNum%22%3A1%2C%22ead%22%3A8%7D&u=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778&jscb=amzn_assoc_jsonp_callback_adunit0_1
52.46.128.144200 OK 135 kB URL HTTP/1.1 aax-us-east.amazon-adsystem.com/x/getad?src=308&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22placement%22%3A%22adunit0%22%2C%22enable_interest_ads%22%3A%22true%22%2C%22div_name%22%3A%22amzn-assoc-ad-69ec0ab0-b0f8-4d2d-a148-b068e44a6822%22%2C%22tracking_id%22%3A%22e038-20%22%2C%22fallback_mode%22%3A%7B%22type%22%3A%22search%22%2C%22value%22%3A%22weight%20loss%22%7D%2C%22ad_mode%22%3A%22auto%22%2C%22ad_type%22%3A%22smart%22%2C%22marketplace%22%3A%22amazon%22%2C%22region%22%3A%22US%22%2C%22linkid%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22default_category%22%3A%22All%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22e038-20%22%2C%22slotNum%22%3A1%2C%22ead%22%3A8%7D&u=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778&jscb=amzn_assoc_jsonp_callback_adunit0_1
IP 52.46.128.144:0
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Size 135 kB (135364 bytes)
Hash da706c7c952534352d4916cd761ade1a
2599b998cc541366976c5a1e049242bbc13a5101
9f71e8432caaf95bab01a28f975a618b448498c357915460538e977115c7dfe1
GET /x/getad?src=308&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22placement%22%3A%22adunit0%22%2C%22enable_interest_ads%22%3A%22true%22%2C%22div_name%22%3A%22amzn-assoc-ad-69ec0ab0-b0f8-4d2d-a148-b068e44a6822%22%2C%22tracking_id%22%3A%22e038-20%22%2C%22fallback_mode%22%3A%7B%22type%22%3A%22search%22%2C%22value%22%3A%22weight%20loss%22%7D%2C%22ad_mode%22%3A%22auto%22%2C%22ad_type%22%3A%22smart%22%2C%22marketplace%22%3A%22amazon%22%2C%22region%22%3A%22US%22%2C%22linkid%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22default_category%22%3A%22All%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22e038-20%22%2C%22slotNum%22%3A1%2C%22ead%22%3A8%7D&u=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778&jscb=amzn_assoc_jsonp_callback_adunit0_1 HTTP/1.1
Host: aax-us-east.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 08 Sep 2022 05:32:25 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 135364
Connection: keep-alive
x-amz-rid: BEY9SA8TSW5V9Y7CMQBJ
Set-Cookie: ad-id=A559dPu-XUXNvuRJU-FKmHM; Domain=.amazon-adsystem.com; Expires=Sat, 01-Apr-2023 05:32:25 GMT; Path=/; Secure; HttpOnly; SameSite=None
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
wms-na.amazon-adsystem.com/panda/20070822/US/img/amzn-nsa-sprite-2x.png
54.230.80.193200 OK 4.3 kB URL HTTP/2 wms-na.amazon-adsystem.com/panda/20070822/US/img/amzn-nsa-sprite-2x.png
IP 54.230.80.193:0
File type PNG image data, 530 x 150, 8-bit colormap, non-interlaced\012- data
Hash 77716f7d4f54355bbb67e19ab8f24309
34380b3971e6c940da2fadb00a7dbc7f2ca7cbe6
3d363721e733cd455560f59c74cffdb28148623c7c716a23403bd6b85696b4fa
GET /panda/20070822/US/img/amzn-nsa-sprite-2x.png HTTP/1.1
Host: wms-na.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4335
date: Wed, 24 Aug 2022 02:11:40 GMT
server: Server
last-modified: Fri, 10 Dec 2021 11:06:38 GMT
etag: "10ef-5d2c8b7960688"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 31 Aug 2022 02:11:40 GMT
charset: UTF-8
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ySQG5kBFJoJ2w3eOY4sUuM7r9oEWD2eTnKVEYLB-hf2pMuCP-Vup_g==
age: 1308045
X-Firefox-Spdy: h2
aax-us-east.amazon-adsystem.com/x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/%7B%22adViewability%22:[%7B%22above_the_fold%22:true,%22topPos%22:0.4387646432374867,%22leftPos%22:0.37109375%7D]%7D&cb=2413940
52.46.128.144200 OK 43 B URL HTTP/1.1 aax-us-east.amazon-adsystem.com/x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/%7B%22adViewability%22:[%7B%22above_the_fold%22:true,%22topPos%22:0.4387646432374867,%22leftPos%22:0.37109375%7D]%7D&cb=2413940
IP 52.46.128.144:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/%7B%22adViewability%22:[%7B%22above_the_fold%22:true,%22topPos%22:0.4387646432374867,%22leftPos%22:0.37109375%7D]%7D&cb=2413940 HTTP/1.1
Host: aax-us-east.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 08 Sep 2022 05:32:25 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: XPS2R7R7D2T0YKSDFRGM
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
aax-us-east.amazon-adsystem.com/x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w51%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A4%2C%22visibleItemCount%22%3A4%2C%22axfExperiment%22%3A%22%5B%5D%22%2C%22items%22%3A%5B%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08M9L1KG5%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A0%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B09VPNGG4S%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A1%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08DKKQXG2%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A2%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08ZY8MSMV%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A3%7D%5D%2C%22logType%22%3A%22smart_impressions%22%2C%22design%22%3A%22text_links%22%2C%22eperf%22%3A%7B%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%224%22%7D%2C%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%224%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%2C%22totalDocHeight%22%3A6278%2C%22totalDocWidth%22%3A1268%2C%22actualWidth%22%3A660%2C%22actualHeight%22%3A190.5%2C%22atfInFirstLoad%22%3Atrue%2C%22posX%22%3A472.5%2C%22posY%22%3A410.33331298828125%2C%22refUrl%22%3A%22https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778%22%7D
52.46.128.144200 OK 43 B URL HTTP/1.1 aax-us-east.amazon-adsystem.com/x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w51%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A4%2C%22visibleItemCount%22%3A4%2C%22axfExperiment%22%3A%22%5B%5D%22%2C%22items%22%3A%5B%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08M9L1KG5%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A0%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B09VPNGG4S%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A1%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08DKKQXG2%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A2%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08ZY8MSMV%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A3%7D%5D%2C%22logType%22%3A%22smart_impressions%22%2C%22design%22%3A%22text_links%22%2C%22eperf%22%3A%7B%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%224%22%7D%2C%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%224%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%2C%22totalDocHeight%22%3A6278%2C%22totalDocWidth%22%3A1268%2C%22actualWidth%22%3A660%2C%22actualHeight%22%3A190.5%2C%22atfInFirstLoad%22%3Atrue%2C%22posX%22%3A472.5%2C%22posY%22%3A410.33331298828125%2C%22refUrl%22%3A%22https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778%22%7D
IP 52.46.128.144:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w51%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A4%2C%22visibleItemCount%22%3A4%2C%22axfExperiment%22%3A%22%5B%5D%22%2C%22items%22%3A%5B%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08M9L1KG5%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A0%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B09VPNGG4S%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A1%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08DKKQXG2%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A2%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08ZY8MSMV%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A3%7D%5D%2C%22logType%22%3A%22smart_impressions%22%2C%22design%22%3A%22text_links%22%2C%22eperf%22%3A%7B%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%224%22%7D%2C%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%224%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%2C%22totalDocHeight%22%3A6278%2C%22totalDocWidth%22%3A1268%2C%22actualWidth%22%3A660%2C%22actualHeight%22%3A190.5%2C%22atfInFirstLoad%22%3Atrue%2C%22posX%22%3A472.5%2C%22posY%22%3A410.33331298828125%2C%22refUrl%22%3A%22https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778%22%7D HTTP/1.1
Host: aax-us-east.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 08 Sep 2022 05:32:25 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: FRXMNEKVR3DZPE0HMTQC
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
aax-us-east.amazon-adsystem.com/x/px/ROSlUPH3K-OrnXrGW9MCr5UAAAGDG5XLuwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICBWGuYn/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w41%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A2%2C%22logType%22%3A%22smart_hide%22%2C%22availableItems%22%3A%5B%5D%2C%22reason%22%3A%22Not%20enough%20products%20for%20even%20one%20row%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%7D
52.46.128.144200 OK 43 B URL HTTP/1.1 aax-us-east.amazon-adsystem.com/x/px/ROSlUPH3K-OrnXrGW9MCr5UAAAGDG5XLuwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICBWGuYn/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w41%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A2%2C%22logType%22%3A%22smart_hide%22%2C%22availableItems%22%3A%5B%5D%2C%22reason%22%3A%22Not%20enough%20products%20for%20even%20one%20row%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%7D
IP 52.46.128.144:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /x/px/ROSlUPH3K-OrnXrGW9MCr5UAAAGDG5XLuwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICBWGuYn/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w41%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A2%2C%22logType%22%3A%22smart_hide%22%2C%22availableItems%22%3A%5B%5D%2C%22reason%22%3A%22Not%20enough%20products%20for%20even%20one%20row%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%7D HTTP/1.1
Host: aax-us-east.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 08 Sep 2022 05:32:25 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: YM6N0J0FRRC8M8HRSCPW
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
m.media-amazon.com/images/I/51lE54Bl0uL._AC_SL115_.jpg
54.230.219.191200 OK 4.2 kB URL HTTP/2 m.media-amazon.com/images/I/51lE54Bl0uL._AC_SL115_.jpg
IP 54.230.219.191:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 107x115, components 3\012- data
Hash a08633a38fc2b30a51ddcc2401ac859a
3d8fd9f37fd55509a57baaf4a9c9dbde0d90f96e
2f88b6c10af682b160f60923ee13a92c527212c285ec15f5535f2bbc0db27a30
GET /images/I/51lE54Bl0uL._AC_SL115_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4248
server: Server
date: Thu, 30 Jun 2022 08:02:25 GMT
x-amz-ir-id: e41a3051-2f9b-4cc5-bcff-2b5287b0841f
expires: Wed, 25 Jun 2042 08:02:25 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-375 /images/I/51lE54Bl0uL
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-375,/images/I/51lE54Bl0uL
access-control-allow-origin: *
last-modified: Thu, 30 Jun 2022 07:03:26 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wcOhI_q21-is-aqHMYX7uZtBbc6MoVJSbU2zAHUimg-Euh8b3ZcZwQ==
age: 6039000
X-Firefox-Spdy: h2
m.media-amazon.com/images/I/41vVKSGbgPL._AC_SL115_.jpg
54.230.219.191200 OK 3.4 kB URL HTTP/2 m.media-amazon.com/images/I/41vVKSGbgPL._AC_SL115_.jpg
IP 54.230.219.191:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 87x115, components 3\012- data
Hash 75015eed5cae374732d722d45e81a699
e6689f2a2ccfcafe64719b7abbe2975bbaacbde5
9ce2642da569eeae9f1dd76e72f1b0bac33ad339acbd9669ec2b33312e7019fc
GET /images/I/41vVKSGbgPL._AC_SL115_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3438
server: Server
date: Tue, 30 Aug 2022 19:42:18 GMT
x-amz-ir-id: 56492ac1-236e-48e2-9c13-490af7bad4ce
expires: Mon, 25 Aug 2042 19:42:18 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-257 /images/I/41vVKSGbgPL
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-257,/images/I/41vVKSGbgPL
access-control-allow-origin: *
last-modified: Wed, 29 Jun 2022 01:38:11 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UuqQ79rqYK5QXYfEGpiSXbEWVuYTzm-h3QzKPNsPrU9xldv8v5YaOA==
age: 726607
X-Firefox-Spdy: h2
m.media-amazon.com/images/I/41XxxkfYJmL._AC_SL115_.jpg
54.230.219.191200 OK 3.2 kB URL HTTP/2 m.media-amazon.com/images/I/41XxxkfYJmL._AC_SL115_.jpg
IP 54.230.219.191:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 92x115, components 3\012- data
Hash 3b97ff8660e09d94c7e15fcfae9c101c
8d196d17672744293c568164745b17806d73b744
097e36f117d4d0b42cc16dfe3c760b44f0a2b7348ad60d784879873b25a16ead
GET /images/I/41XxxkfYJmL._AC_SL115_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3227
server: Server
date: Sat, 03 Sep 2022 01:11:08 GMT
x-amz-ir-id: 1318f604-de5a-4cce-af13-ca19ffe18b90
expires: Wed, 27 Aug 2042 11:28:30 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-110 /images/I/41XxxkfYJmL
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-110,/images/I/41XxxkfYJmL
access-control-allow-origin: *
last-modified: Wed, 06 Jul 2022 08:49:51 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: spSgBA9v-iYHa7URcn2OyGtqtoE_xLpkl-KQKlVAxShB5q46vNkEBw==
age: 447677
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 2e40828acf1870c32c9a0dc730eb97dd
f01f9ef2e332e7cff37c44db122bc594e43c0dd8
41fb8a5ca7210c4e2173e79e466befed65d807da5cf141a5c6ffe4119b9bad67
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 08 Sep 2022 05:32:25 GMT
Last-Modified: Thu, 08 Sep 2022 03:44:12 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mLT4Vp8ThV9fG7Dj9gOyL-qMOmgr7d5sdw2PTwx5RvjQ_6MJHeFvcQ==
Age: 6493
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 2e40828acf1870c32c9a0dc730eb97dd
f01f9ef2e332e7cff37c44db122bc594e43c0dd8
41fb8a5ca7210c4e2173e79e466befed65d807da5cf141a5c6ffe4119b9bad67
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 08 Sep 2022 05:32:25 GMT
Last-Modified: Thu, 08 Sep 2022 04:28:17 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oeOAgeJ688MPiOUddzT_YOtl4T2GjirQMgwkF1MKVnrZd8Yx6fXMhQ==
Age: 3848
m.media-amazon.com/images/I/41PFkQM2VpL._AC_SL115_.jpg
54.230.219.191200 OK 3.2 kB URL HTTP/2 m.media-amazon.com/images/I/41PFkQM2VpL._AC_SL115_.jpg
IP 54.230.219.191:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 115x86, components 3\012- data
Hash 7620e780e86176af693d4daf79262727
a81a73db82b2254035862632186ae632bf4cafaf
9adf22d4e5590701d24282108220c6a26d731e7c7019ce8f333140548931d698
GET /images/I/41PFkQM2VpL._AC_SL115_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3191
server: Server
date: Mon, 22 Aug 2022 10:37:48 GMT
x-amz-ir-id: b475ff32-3974-4e06-84e7-ff5718de28ac
expires: Sun, 17 Aug 2042 10:37:48 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-710 /images/I/41PFkQM2VpL
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-710,/images/I/41PFkQM2VpL
access-control-allow-origin: *
last-modified: Wed, 16 Jan 2019 22:02:53 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lxDNnmfoFxWyyHNyX4f0pTaQDwTl-ge_DClrH9pbHtZnK55wpI6Kqw==
age: 1450478
X-Firefox-Spdy: h2
fls-na.amazon-adsystem.com/1/action-impressions/1/OE/associates-adsystems/action/cm_:wdgt_load_time@v=4935,wdgt_load_time_NO@v=4935,wdgt_load_time_smart@v=4935,wdgt_load_time_invoke@v=645,wdgt_load_time_invoke_smart@v=645,wdgt_load_time_invoke_smart_NO@v=645?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=ca9f2de2-c7db-4417-be10-a1986bed2854&session=8d741553-94f0-4a66-b236-de6eaf7d3b56
52.94.225.95204 No Content 0 B URL HTTP/1.1 fls-na.amazon-adsystem.com/1/action-impressions/1/OE/associates-adsystems/action/cm_:wdgt_load_time@v=4935,wdgt_load_time_NO@v=4935,wdgt_load_time_smart@v=4935,wdgt_load_time_invoke@v=645,wdgt_load_time_invoke_smart@v=645,wdgt_load_time_invoke_smart_NO@v=645?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=ca9f2de2-c7db-4417-be10-a1986bed2854&session=8d741553-94f0-4a66-b236-de6eaf7d3b56
IP 52.94.225.95:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/action-impressions/1/OE/associates-adsystems/action/cm_:wdgt_load_time@v=4935,wdgt_load_time_NO@v=4935,wdgt_load_time_smart@v=4935,wdgt_load_time_invoke@v=645,wdgt_load_time_invoke_smart@v=645,wdgt_load_time_invoke_smart_NO@v=645?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=ca9f2de2-c7db-4417-be10-a1986bed2854&session=8d741553-94f0-4a66-b236-de6eaf7d3b56 HTTP/1.1
Host: fls-na.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
x-amzn-RequestId: c6b4df40-4e4b-4c2e-82ab-17d9b26e5531
Content-Type: text/plain
Date: Thu, 08 Sep 2022 05:32:25 GMT
fls-na.amazon-adsystem.com/1/action-impressions/1/OE/associates-adsystems/action/cm_:onejs_load_evt@v=4289,onejs_exec_time@v=6,aax_load_time@v=596,aax_load_time_smart@v=596?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=ca9f2de2-c7db-4417-be10-a1986bed2854&session=8d741553-94f0-4a66-b236-de6eaf7d3b56
52.94.225.95204 No Content 0 B URL HTTP/1.1 fls-na.amazon-adsystem.com/1/action-impressions/1/OE/associates-adsystems/action/cm_:onejs_load_evt@v=4289,onejs_exec_time@v=6,aax_load_time@v=596,aax_load_time_smart@v=596?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=ca9f2de2-c7db-4417-be10-a1986bed2854&session=8d741553-94f0-4a66-b236-de6eaf7d3b56
IP 52.94.225.95:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/action-impressions/1/OE/associates-adsystems/action/cm_:onejs_load_evt@v=4289,onejs_exec_time@v=6,aax_load_time@v=596,aax_load_time_smart@v=596?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=ca9f2de2-c7db-4417-be10-a1986bed2854&session=8d741553-94f0-4a66-b236-de6eaf7d3b56 HTTP/1.1
Host: fls-na.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
x-amzn-RequestId: d16b4b71-8f92-4213-95f6-104b446f5342
Content-Type: text/plain
Date: Thu, 08 Sep 2022 05:32:25 GMT
aax-us-east.amazon-adsystem.com/x/px/ROSlUPH3K-OrnXrGW9MCr5UAAAGDG5XLuwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICBWGuYn/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w41%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A2%2C%22visibleItemCount%22%3A4%2C%22axfExperiment%22%3A%22%5B%5D%22%2C%22slotNum%22%3A%221%22%2C%22items%22%3A%5B%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08M9L1KG5%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A0%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08ZY8MSMV%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A1%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B07LBBQGS7%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A2%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B09VPNGG4S%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A3%2C%22extraInfo%22%3A%7B%7D%7D%5D%2C%22logType%22%3A%22smart_impressions%22%2C%22design%22%3A%22grid%22%2C%22eperf%22%3A%7B%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%228%22%7D%2C%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%228%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%2C%22totalDocHeight%22%3A6398%2C%22totalDocWidth%22%3A1268%2C%22actualWidth%22%3A660%2C%22actualHeight%22%3A282%2C%22atfInFirstLoad%22%3Afalse%2C%22posX%22%3A472.5%2C%22posY%22%3A5675.13330078125%2C%22refUrl%22%3A%22https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778%22%7D
52.46.128.144200 OK 43 B URL HTTP/1.1 aax-us-east.amazon-adsystem.com/x/px/ROSlUPH3K-OrnXrGW9MCr5UAAAGDG5XLuwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICBWGuYn/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w41%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A2%2C%22visibleItemCount%22%3A4%2C%22axfExperiment%22%3A%22%5B%5D%22%2C%22slotNum%22%3A%221%22%2C%22items%22%3A%5B%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08M9L1KG5%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A0%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08ZY8MSMV%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A1%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B07LBBQGS7%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A2%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B09VPNGG4S%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A3%2C%22extraInfo%22%3A%7B%7D%7D%5D%2C%22logType%22%3A%22smart_impressions%22%2C%22design%22%3A%22grid%22%2C%22eperf%22%3A%7B%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%228%22%7D%2C%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%228%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%2C%22totalDocHeight%22%3A6398%2C%22totalDocWidth%22%3A1268%2C%22actualWidth%22%3A660%2C%22actualHeight%22%3A282%2C%22atfInFirstLoad%22%3Afalse%2C%22posX%22%3A472.5%2C%22posY%22%3A5675.13330078125%2C%22refUrl%22%3A%22https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778%22%7D
IP 52.46.128.144:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /x/px/ROSlUPH3K-OrnXrGW9MCr5UAAAGDG5XLuwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICBWGuYn/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w41%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A2%2C%22visibleItemCount%22%3A4%2C%22axfExperiment%22%3A%22%5B%5D%22%2C%22slotNum%22%3A%221%22%2C%22items%22%3A%5B%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08M9L1KG5%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A0%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08ZY8MSMV%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A1%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B07LBBQGS7%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A2%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B09VPNGG4S%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A3%2C%22extraInfo%22%3A%7B%7D%7D%5D%2C%22logType%22%3A%22smart_impressions%22%2C%22design%22%3A%22grid%22%2C%22eperf%22%3A%7B%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%228%22%7D%2C%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%228%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%2C%22totalDocHeight%22%3A6398%2C%22totalDocWidth%22%3A1268%2C%22actualWidth%22%3A660%2C%22actualHeight%22%3A282%2C%22atfInFirstLoad%22%3Afalse%2C%22posX%22%3A472.5%2C%22posY%22%3A5675.13330078125%2C%22refUrl%22%3A%22https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D42778%22%7D HTTP/1.1
Host: aax-us-east.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 08 Sep 2022 05:32:26 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: 7JMRHJFJN4WQ737YNZV3
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
aax-us-east.amazon-adsystem.com/x/px/ROSlUPH3K-OrnXrGW9MCr5UAAAGDG5XLuwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICBWGuYn/%7B%22adViewability%22:[%7B%22above_the_fold%22:false,%22topPos%22:6.045793397231097,%22leftPos%22:0.37109375%7D]%7D&cb=2263682
52.46.128.144200 OK 43 B URL HTTP/1.1 aax-us-east.amazon-adsystem.com/x/px/ROSlUPH3K-OrnXrGW9MCr5UAAAGDG5XLuwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICBWGuYn/%7B%22adViewability%22:[%7B%22above_the_fold%22:false,%22topPos%22:6.045793397231097,%22leftPos%22:0.37109375%7D]%7D&cb=2263682
IP 52.46.128.144:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /x/px/ROSlUPH3K-OrnXrGW9MCr5UAAAGDG5XLuwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICBWGuYn/%7B%22adViewability%22:[%7B%22above_the_fold%22:false,%22topPos%22:6.045793397231097,%22leftPos%22:0.37109375%7D]%7D&cb=2263682 HTTP/1.1
Host: aax-us-east.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 08 Sep 2022 05:32:26 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: 9JABKAF617KDPD8WDRDF
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
m.media-amazon.com/images/I/41PFkQM2VpL._AC_SL148_.jpg
54.230.219.191200 OK 4.8 kB URL HTTP/2 m.media-amazon.com/images/I/41PFkQM2VpL._AC_SL148_.jpg
IP 54.230.219.191:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 148x111, components 3\012- data
Hash 919b6156c2f28b0533fa59d2a733811f
7e922b7290c7806484f0cc711303d89da0a8db8c
e35ce8285097cf952d27b326ea02d1945d2f442a0eeb7064e4d149a76b64a88a
GET /images/I/41PFkQM2VpL._AC_SL148_.jpg HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4798
server: Server
date: Tue, 30 Aug 2022 19:01:18 GMT
x-amz-ir-id: 6920c0c6-53f6-4b7d-aa3f-03e6864313d4
expires: Mon, 25 Aug 2042 19:01:18 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-848 /images/I/41PFkQM2VpL
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-848,/images/I/41PFkQM2VpL
access-control-allow-origin: *
last-modified: Wed, 16 Jan 2019 22:02:53 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bp-ggApwIUB29bWy4DeJ34hDB6krmk-ge-06u_p7hY2XTjbaD-E04w==
age: 729068
X-Firefox-Spdy: h2
fls-na.amazon-adsystem.com/1/action-impressions/1/OE/associates-adsystems/action/cm_:wdgt_load_time@v=5212,wdgt_load_time_NO@v=5212,wdgt_load_time_smart@v=5212?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=0f60cfd6-948a-4a6f-8d2f-7de861e8ee31&session=4314279b-c2df-49bf-a177-d153716fc0e7
52.94.225.95204 No Content 0 B URL HTTP/1.1 fls-na.amazon-adsystem.com/1/action-impressions/1/OE/associates-adsystems/action/cm_:wdgt_load_time@v=5212,wdgt_load_time_NO@v=5212,wdgt_load_time_smart@v=5212?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=0f60cfd6-948a-4a6f-8d2f-7de861e8ee31&session=4314279b-c2df-49bf-a177-d153716fc0e7
IP 52.94.225.95:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/action-impressions/1/OE/associates-adsystems/action/cm_:wdgt_load_time@v=5212,wdgt_load_time_NO@v=5212,wdgt_load_time_smart@v=5212?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=0f60cfd6-948a-4a6f-8d2f-7de861e8ee31&session=4314279b-c2df-49bf-a177-d153716fc0e7 HTTP/1.1
Host: fls-na.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
x-amzn-RequestId: fe6d6a83-96fc-4181-8457-4289cbfd30d6
Content-Type: text/plain
Date: Thu, 08 Sep 2022 05:32:25 GMT
aax-us-east.amazon-adsystem.com/x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/%7B%22adViewability%22:[%7B%22viewable%22:true%7D]%7D&cb=5388759
52.46.128.144200 OK 43 B URL HTTP/1.1 aax-us-east.amazon-adsystem.com/x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/%7B%22adViewability%22:[%7B%22viewable%22:true%7D]%7D&cb=5388759
IP 52.46.128.144:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /x/px/RNJo2RAWBdPYuhQdoMaqlooAAAGDG5XLegEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICDx2fii/%7B%22adViewability%22:[%7B%22viewable%22:true%7D]%7D&cb=5388759 HTTP/1.1
Host: aax-us-east.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 08 Sep 2022 05:32:26 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: ZM2AHME3H2SHGG03EJSA
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
c0.wp.com/p/jetpack/10.5/css/jetpack.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/10.5/css/jetpack.css
IP 192.0.77.37:0
GET /p/jetpack/10.5/css/jetpack.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 04 Jan 2022 22:15:08 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
st-n.ads1-adnow.com/js/ads.js
92.223.97.97200 OK 0 B URL HTTP/2 st-n.ads1-adnow.com/js/ads.js
IP 92.223.97.97:0
ASN #199524 G-Core Labs S.A.
GET /js/ads.js HTTP/1.1
Host: st-n.ads1-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
last-modified: Wed, 28 Sep 2016 12:50:11 GMT
etag: W/"57ebbc83-93"
expires: Thu, 08 Sep 2022 05:33:22 GMT
cache-control: max-age=60
cache: MISS
x-id: sto5-up-gc10
content-encoding: gzip
X-Firefox-Spdy: h2
ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
185.66.200.127200 OK 0 B URL HTTP/2 ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
IP 185.66.200.127:0
ASN #201702 skHosting.eu s.r.o.
GET /logo_n_small.png?1480628810 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: image/png
last-modified: Thu, 01 Dec 2016 21:46:50 GMT
etag: W/"58409a4a-631"
expires: Sat, 08 Oct 2022 05:32:23 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
st-n.ads3-adnow.com/js/configurable.js
92.223.97.97200 OK 0 B URL HTTP/2 st-n.ads3-adnow.com/js/configurable.js
IP 92.223.97.97:0
ASN #199524 G-Core Labs S.A.
GET /js/configurable.js HTTP/1.1
Host: st-n.ads3-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: application/javascript
last-modified: Mon, 04 Apr 2022 07:22:22 GMT
etag: W/"624a9cae-20b3c"
expires: Thu, 08 Sep 2022 05:33:24 GMT
cache-control: max-age=60
cache: REVALIDATED
x-cached-since: 2022-09-08T05:30:29+00:00
x-id: sto5-up-gc11
content-encoding: gzip
X-Firefox-Spdy: h2
bariatric-club.net/?p=42778
156.67.72.142200 OK 0 B URL HTTP/2 bariatric-club.net/?p=42778
IP 156.67.72.142:0
ASN #47583 Hostinger International Limited
Analyzer Verdict Alert fortinet Phishing
GET /?p=42778 HTTP/1.1
Host: bariatric-club.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-powered-by: PHP/7.0.33
content-type: text/html; charset=UTF-8
link: <https://bariatric-club.net/index.php?rest_route=/>; rel="https://api.w.org/", <https://bariatric-club.net/index.php?rest_route=/wp/v2/posts/42778>; rel="alternate"; type="application/json", <https://wp.me/parJ4M-b7Y>; rel=shortlink
x-litespeed-cache-control: public,max-age=604800
x-litespeed-tag: 314_HTTP.200,314_PGSRP,314_post,314_URL.6666cd76f96956469e7be39d750cc7d9,314_Po.42778,314_
etag: "1308291-1662615142;br"
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Sep 2022 05:32:22 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/10.5/_inc/build/related-posts/related-posts.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/10.5/_inc/build/related-posts/related-posts.min.js
IP 192.0.77.37:0
GET /p/jetpack/10.5/_inc/build/related-posts/related-posts.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/10.5/_inc/social-logos/social-logos.min.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/10.5/_inc/social-logos/social-logos.min.css
IP 192.0.77.37:0
GET /p/jetpack/10.5/_inc/social-logos/social-logos.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 30 Jun 2020 14:24:10 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/5.8.5/wp-includes/js/mediaelement/wp-mediaelement.min.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/5.8.5/wp-includes/js/mediaelement/wp-mediaelement.min.css
IP 192.0.77.37:0
GET /c/5.8.5/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/10.5/_inc/build/widgets/google-translate/google-translate.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/10.5/_inc/build/widgets/google-translate/google-translate.min.js
IP 192.0.77.37:0
GET /p/jetpack/10.5/_inc/build/widgets/google-translate/google-translate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 04 Jan 2022 22:15:08 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ylx-1.com/bnr_xload.php?section=General&pub=561739&format=160x600&ga=g&xt=166261514252481&xtt=1990429
185.66.200.221200 OK 0 B URL HTTP/2 ylx-1.com/bnr_xload.php?section=General&pub=561739&format=160x600&ga=g&xt=166261514252481&xtt=1990429
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
GET /bnr_xload.php?section=General&pub=561739&format=160x600&ga=g&xt=166261514252481&xtt=1990429 HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 08 Sep 2022 05:32:23 GMT
last-modified: Thu, 08 Sep 2022 05:32:23 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
set-cookie: used_ad2316997=1; expires=Fri, 09-Sep-2022 04:00:00 GMT; Max-Age=80857; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Fri, 09-Sep-2022 04:00:00 GMT; Max-Age=80857; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
cpa_673873=160x600_694711613_0; expires=Sat, 08-Oct-2022 05:32:23 GMT; Max-Age=2592000; path=/; domain=ylx-1.com; secure; SameSite=None
X-Firefox-Spdy: h2
c0.wp.com/c/5.8.5/wp-includes/js/jquery/jquery-migrate.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/5.8.5/wp-includes/js/jquery/jquery-migrate.min.js
IP 192.0.77.37:0
GET /c/5.8.5/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/bariatric-club.net/wp-content/uploads/2018/11/ddD.jpg?fit=32%2C32&ssl=1
192.0.77.2404 Not Found 0 B URL HTTP/2 i0.wp.com/bariatric-club.net/wp-content/uploads/2018/11/ddD.jpg?fit=32%2C32&ssl=1
IP 192.0.77.2:0
GET /bariatric-club.net/wp-content/uploads/2018/11/ddD.jpg?fit=32%2C32&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Sep 2022 05:32:25 GMT
content-type: text/html; charset=utf-8
x-nc: EXPIRED arn 2
X-Firefox-Spdy: h2
st-n.ads2-adnow.com/js/adv_out.js
92.223.97.97200 OK 0 B URL HTTP/2 st-n.ads2-adnow.com/js/adv_out.js
IP 92.223.97.97:0
ASN #199524 G-Core Labs S.A.
GET /js/adv_out.js HTTP/1.1
Host: st-n.ads2-adnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: application/javascript
last-modified: Mon, 04 Apr 2022 07:22:22 GMT
etag: W/"624a9cae-157b4"
expires: Thu, 08 Sep 2022 05:33:23 GMT
cache-control: max-age=60
cache: REVALIDATED
x-cached-since: 2022-09-08T05:31:15+00:00
x-id: sto5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Droid+Sans%3Aregular%2C700
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Droid+Sans%3Aregular%2C700
IP 142.250.74.10:0
GET /css?family=Droid+Sans%3Aregular%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 Sep 2022 05:32:22 GMT
date: Thu, 08 Sep 2022 05:32:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ylx-1.com/show.php?u59261662615143=true&ad=673873&f=160x600&a=781385&cri=0&s=MjQ3MDhhNDgzYjlkYWI2NmM2NTYzYTQ2MmRkMGMxNDQ=&u=561739&si=694711613&di=30393698&ci=16&h=48ca0051145a00ae003fe2b391ee3801&cc=NO&https=1&useAf=loaded_string_9562335b0bce9d250429df012c0426f88d0bd_2316997_1662615143.1093_99762&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv
185.66.200.221200 OK 0 B URL HTTP/2 ylx-1.com/show.php?u59261662615143=true&ad=673873&f=160x600&a=781385&cri=0&s=MjQ3MDhhNDgzYjlkYWI2NmM2NTYzYTQ2MmRkMGMxNDQ=&u=561739&si=694711613&di=30393698&ci=16&h=48ca0051145a00ae003fe2b391ee3801&cc=NO&https=1&useAf=loaded_string_9562335b0bce9d250429df012c0426f88d0bd_2316997_1662615143.1093_99762&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
GET /show.php?u59261662615143=true&ad=673873&f=160x600&a=781385&cri=0&s=MjQ3MDhhNDgzYjlkYWI2NmM2NTYzYTQ2MmRkMGMxNDQ=&u=561739&si=694711613&di=30393698&ci=16&h=48ca0051145a00ae003fe2b391ee3801&cc=NO&https=1&useAf=loaded_string_9562335b0bce9d250429df012c0426f88d0bd_2316997_1662615143.1093_99762&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/bnr_xload.php?section=General&pub=561739&format=160x600&ga=g&xt=166261514252481&xtt=1990429
Cookie: used_ad2316997=1; total_impressions=1; cpa_673873=160x600_694711613_0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:23 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 08 Sep 2022 05:32:23 GMT
last-modified: Thu, 08 Sep 2022 05:32:23 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
c0.wp.com/c/5.8.5/wp-includes/js/jquery/jquery.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/5.8.5/wp-includes/js/jquery/jquery.min.js
IP 192.0.77.37:0
GET /c/5.8.5/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 05:32:22 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
content-encoding: br
expires: Fri, 08 Sep 2023 05:32:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/bariatric-club.net/wp-content/uploads/2018/11/ddD.jpg?fit=100%2C100&ssl=1
192.0.77.2404 Not Found 0 B URL HTTP/2 i0.wp.com/bariatric-club.net/wp-content/uploads/2018/11/ddD.jpg?fit=100%2C100&ssl=1
IP 192.0.77.2:0
GET /bariatric-club.net/wp-content/uploads/2018/11/ddD.jpg?fit=100%2C100&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Sep 2022 05:32:24 GMT
content-type: text/html; charset=utf-8
x-nc: EXPIRED arn 2
X-Firefox-Spdy: h2