firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 15 Sep 2022 02:10:10 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 77_4Ez0SKLENZMsnhC0DVpkaGpLWdxdzZEyU7rufA8UiREJ8cQGldw==
Age: 2424
cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
75.102.57.149301 Moved Permanently 0 B URL HTTP/1.1 cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
IP 75.102.57.149:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php HTTP/1.1
Host: cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
content-length: 0
date: Thu, 15 Sep 2022 02:50:33 GMT
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6716f88f982aa553eaf5de31b2629224
97ab757b0a059027ffb04675114e5c55738fccaf
06af9ae9fc72a3aeb4be2b742128a0cb8ea4aff348afe2e4490d3639b3b377d9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "06AF9AE9FC72A3AEB4BE2B742128A0CB8EA4AFF348AFE2E4490D3639B3B377D9"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8778
Expires: Thu, 15 Sep 2022 05:16:52 GMT
Date: Thu, 15 Sep 2022 02:50:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iz21xiYjowzCohzuAqBWZnWyNofLdQgIvy0au1qZJkwDD9zJeG9jmQ==
age: 80119
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 02:50:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
75.102.57.149404 Not Found 16 kB URL HTTP/1.1 www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
IP 75.102.57.149:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash d1ea9ce3ed2c6882231a3a6cde5ee1d6
2991e22db0a90dd7069de89a279f16151c29467b
4dc48586adb31a7dc62b074359430c957ff98110a42121fdb2dea10e786e6587
Analyzer Verdict Alert fortinet Phishing
GET /sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://www.cuscoinkasfeat.com/wp-json/>; rel="https://api.w.org/"
content-length: 16296
content-encoding: gzip
vary: Accept-Encoding
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/style.css
75.102.57.149200 OK 4.3 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/style.css
IP 75.102.57.149:0
File type ASCII text, with very long lines (357)
Hash 09f190702a81ed0b30dc8b79d99bdd53
87be4b47da45ca46d94f87340799a585b0ca86dc
8bc40b505171c0dbcf1b8ba3b654a802a755bef97b40971c13f64d52278438a1
GET /wp-content/themes/CuscoInkasFeat/style.css HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Wed, 20 Jul 2022 15:52:20 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4328
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/js/picker/css/default.css
75.102.57.149200 OK 1.3 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/js/picker/css/default.css
IP 75.102.57.149:0
File type ASCII text, with CRLF, CR line terminators
Hash d97cbd8a42e9e49ec525d9d465b3dcc6
28cb9186b81fddc3ed451823f1bdefb15d80d8f0
1fd5c4e58df473b44c81ea911f3a3a5102e4b5dbf5c2f0aac2912f4ef99273c0
GET /wp-content/themes/CuscoInkasFeat/js/picker/css/default.css HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Mon, 17 Apr 2017 23:48:50 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1255
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/css/owl.carousel.css
75.102.57.149200 OK 544 B URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/css/owl.carousel.css
IP 75.102.57.149:0
File type ASCII text, with CRLF line terminators
Hash 205501b6076d2cd5189d3280b4960403
5e1695c18773d0d4ce7a8d934d6ae027797ceeeb
f2d82817b91bc360195ac6e156854779b662c591836cbe28ebafe80efc5e2554
GET /wp-content/themes/CuscoInkasFeat/css/owl.carousel.css HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Sat, 01 Apr 2017 00:49:16 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 544
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/css/sumoselect.min.css?ver=3.4.6
75.102.57.149200 OK 2.1 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/css/sumoselect.min.css?ver=3.4.6
IP 75.102.57.149:0
File type ASCII text, with very long lines (7609)
Hash ad6e74a0c8866c083bd11d99e52f5de0
aef33b6a6edf70ef3a855a8c6810a393b5d026e4
561511f2462956915dc9f24fe91fff79af56c324eb617491dc98d71d91179c15
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/sumoselect.min.css?ver=3.4.6 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 01:43:01 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2080
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/chaty/css/chaty-front.min.css?ver=1658026073
75.102.57.149200 OK 4.7 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/chaty/css/chaty-front.min.css?ver=1658026073
IP 75.102.57.149:0
File type ASCII text, with very long lines (20627), with no line terminators
Hash 7b1cdaaac4568ae2503fcdfc416acba2
99318cdad0623f15ec0bc7a1acd099daacc1ee4d
d23a0271f9268fec6b45d7f2fb4e29a77b2c7176ac6796df3fd4df8744a28d9d
GET /wp-content/plugins/chaty/css/chaty-front.min.css?ver=1658026073 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Fri, 15 Jul 2022 04:44:43 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4713
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.1
75.102.57.149200 OK 972 B URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.1
IP 75.102.57.149:0
Hash e355e7e30d2cbeebefa6977790886c3a
eccf1c43237a1de702ae36722813fa10d580dd4e
49d452b612934ceb8ce12bfadb85dac2f573d458337a9ae0da76705a8ae8b018
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.1 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Tue, 19 Jul 2022 22:18:03 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 972
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/css/bwg-fonts/fonts.css?ver=0.0.1
75.102.57.149200 OK 884 B URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/css/bwg-fonts/fonts.css?ver=0.0.1
IP 75.102.57.149:0
Hash fbd3cb84e1194d91c4eb572a7f5842c3
18231875f66f767084a8b1eee5732380a5602db0
6e5012861ffeb56456543a0b0adfd71a5e562bd478998e40374f536a35793d4c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/bwg-fonts/fonts.css?ver=0.0.1 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 01:43:03 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 884
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/social-media-widget/social_widget.css?ver=6.0.2
75.102.57.149200 OK 505 B URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/social-media-widget/social_widget.css?ver=6.0.2
IP 75.102.57.149:0
Hash 4c6decc0204c9ac878ffa9c9cf7e9661
ecd633e778bc38b8225ec21acd6182a69be676ec
499d5dd15e75983a1cde5781d885892db604fd724348e90a1ef282c40a26732f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/social-media-widget/social_widget.css?ver=6.0.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Fri, 14 Jul 2017 20:47:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 505
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.min.css?ver=3.1.5
75.102.57.149200 OK 4.0 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.min.css?ver=3.1.5
IP 75.102.57.149:0
File type ASCII text, with very long lines (42839), with no line terminators
Hash 2dfe22d6084a7d2f894f520c361d9159
86d60eafb21be2d7e05f5ebc80dd2c89da251969
93f6b1a6c9cd230bdc9f05023f25ee9e557429ae1e7963e69aef5bd684292778
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.min.css?ver=3.1.5 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 01:43:03 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 3979
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/css/styles.min.css?ver=1.6.10
75.102.57.149200 OK 7.1 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/css/styles.min.css?ver=1.6.10
IP 75.102.57.149:0
File type ASCII text, with very long lines (45363), with no line terminators
Hash 87a67fd58f3ff0bbbf1d11b372aa0011
20a4a2b7cf95c2463c634643dd079962e35e1edc
a4bebb3a206b3b262713b08345028917509d95331576df1ca0d44a0a28c30494
GET /wp-content/plugins/photo-gallery/css/styles.min.css?ver=1.6.10 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 01:43:03 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 7072
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/css/google-maps-builder.min.css?ver=2.1.2
75.102.57.149200 OK 1.8 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/css/google-maps-builder.min.css?ver=2.1.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (7098), with no line terminators
Hash 300d16ff6206d9f04700160ea58e37e0
ca8bf761a63f9155b16492122a69c5ed58393e37
321b7f120a8581cd1dd5a8f8c0fc52ec28d2444b36c3e367ef6ee769a0d34be6
GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/css/google-maps-builder.min.css?ver=2.1.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Fri, 14 Jul 2017 23:40:18 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1752
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/css/map-icons.css?ver=2.1.2
75.102.57.149200 OK 2.7 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/css/map-icons.css?ver=2.1.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (3883)
Hash e1cb9cfe401aabeb00289db43a786b2c
1b44327155820cea6c198e9714c80a235b5ffe34
0d63292af08176a861a8755093ce30acb2194d6ab9c3772eeb9f4783e018bfa7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/css/map-icons.css?ver=2.1.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Fri, 14 Jul 2017 23:40:20 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2707
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/uploads/maxmegamenu/style_en_us.css?ver=59698a
75.102.57.149200 OK 5.6 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/maxmegamenu/style_en_us.css?ver=59698a
IP 75.102.57.149:0
File type ASCII text, with very long lines (1140)
Hash 62a5c2aace0ed1c0d3875c8ddf408265
e618868fa2e94e0b981b810ce35e7ee7313927a7
6c5b8726fb36362306058400c865e0e5197696a4d4a0d1f51133427558a9fa3b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/maxmegamenu/style_en_us.css?ver=59698a HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Thu, 28 Jul 2022 00:48:53 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 5565
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/uploads/masterslider/custom.css?ver=34.5
75.102.57.149200 OK 1.7 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/masterslider/custom.css?ver=34.5
IP 75.102.57.149:0
File type ASCII text, with very long lines (13675)
Hash 653c60532d4e18364c6846a497dcb753
0d8ad7b20e56688a1289a00bf773076daa6afe0f
173a4e4f4c186068eb543795a136347981fa28a7b5a44aff9b6f42b5f8cd7ea8
GET /wp-content/uploads/masterslider/custom.css?ver=34.5 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 13:51:10 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1654
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.2.14
75.102.57.149200 OK 10 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.2.14
IP 75.102.57.149:0
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash 947d66c536c163fbc8382634bc6d9777
90a680e693e2f3fe08844f10cd9826b3a36275f8
6078d177f271feba1226cfbf6f749d24cc009940a0068cf7d857bb494d4b7d2e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.2.14 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Sat, 11 May 2019 22:49:50 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 10534
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
75.102.57.149200 OK 4.2 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (11126)
Hash c41f3a82e911de81a1817131069bc7d2
1e883290a0b794916cead41e5f0705716fd77b89
e9791f24770f098ea30bb4d25e2e10bdedb97132d0bbf7d2bd79eedac22efa27
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Thu, 19 Nov 2020 09:31:12 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4168
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-includes/css/dashicons.min.css?ver=6.0.2
75.102.57.149200 OK 36 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-includes/css/dashicons.min.css?ver=6.0.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (58981)
Hash 57daffc76b4eaf9a7deb7c0e03a61f85
7b028ad43294b75d4b241239bb0190c7ab9c5273
00ab13c2e8718e6804d864984db327ff9d83c04292849c09861c73bc9020241d
GET /wp-includes/css/dashicons.min.css?ver=6.0.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Thu, 15 Apr 2021 21:53:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 35599
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
75.102.57.149200 OK 31 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 75.102.57.149:0
File type ASCII text, with very long lines (65447)
Hash 554969c8ed0e4b5eece1261c4e1e9cd0
3b514b21c2e26b2caa15054e43ed00184a8ebc38
4a10709ca76c5112fbaf69e065b4ef93dd37bcffd4ae39b351e56d40c9322123
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Sat, 16 Jul 2022 11:24:06 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 30969
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/chaty/js/cht-front-script.min.js?ver=1658026073
75.102.57.149200 OK 14 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/chaty/js/cht-front-script.min.js?ver=1658026073
IP 75.102.57.149:0
File type ASCII text, with very long lines (55160), with no line terminators
Hash ad2819985f7552a2c97c2463dc827bd8
b7757adc6442f217896494cad07d1d634bf4be83
2d3626e2f65eb982783a611a2bd226183d8f8a7dbdb19b3df732ba67d89d4c52
GET /wp-content/plugins/chaty/js/cht-front-script.min.js?ver=1658026073 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Fri, 15 Jul 2022 04:44:43 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 14364
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/jquery.mobile.min.js?ver=1.4.5
75.102.57.149200 OK 9.1 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/jquery.mobile.min.js?ver=1.4.5
IP 75.102.57.149:0
File type HTML document, ASCII text, with very long lines (25075)
Hash 91b165b14cf3a9dc06289b7ec1a9d861
a11b7af632aab6e10c7881c090df84763dac78b0
725264b9a6c39b7d73b519dbf3f849a8ba60f923ba4327c377cfb593a00d157a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/jquery.mobile.min.js?ver=1.4.5 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 01:43:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 9140
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=3.4.6
75.102.57.149200 OK 7.9 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=3.4.6
IP 75.102.57.149:0
File type ASCII text, with very long lines (1518)
Hash b3e61133de7a6fedbdb9f4c0a8573e7e
fab0297c0433ea1cf1baa18866582286f2ec8ecd
9ce32819eb5fc8489530a6d205cc64050dec7e3027374a7fc51766d87549745f
GET /wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=3.4.6 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 01:43:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 7912
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=3.1.5
75.102.57.149200 OK 13 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=3.1.5
IP 75.102.57.149:0
File type ASCII text, with very long lines (32001)
Hash 4e984e0202e9b65d480accaae56c10c3
2ea0a495257943f723a74625c984da4d8df088a7
e54d1b45e86d6f8bef173873919f720a74e10d01ed2dfc90ec2d49c6891046e7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=3.1.5 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 01:43:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 12951
date: Thu, 15 Sep 2022 02:50:33 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c86fc6649c7c512abb52fcd62d51ee26
bf241d6c1779668447df444a239d715b6ed46f6d
822cb499ea058f2c40ce4942048528575fadc172d3669007f5f34fae41c7ea49
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/jquery.fullscreen.min.js?ver=0.6.0
75.102.57.149200 OK 2.2 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/jquery.fullscreen.min.js?ver=0.6.0
IP 75.102.57.149:0
File type Unicode text, UTF-8 text, with very long lines (5661)
Hash 34365ec780a618c875bc74e42d3912fd
a96df8ee7d76c02a764c4328fa418a26960a0309
14e21865cf9796833b9f0366b98fe7667187019ed1d5166ef11a735e83d6ef87
GET /wp-content/plugins/photo-gallery/js/jquery.fullscreen.min.js?ver=0.6.0 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 01:43:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2185
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/css/owl.theme.css
75.102.57.149200 OK 618 B URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/css/owl.theme.css
IP 75.102.57.149:0
File type ASCII text, with CRLF line terminators
Hash be05adb78174dff749e5b92802c2dfc4
7233f52dca0064507074952745a092ad2805f29e
55e6b20a1742d79f6ba9c4c60df8ccb94a50fc4d979fa92426358ed2ee959001
GET /wp-content/themes/CuscoInkasFeat/css/owl.theme.css HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Sat, 01 Apr 2017 00:49:18 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 618
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/scripts.min.js?ver=1.6.10
75.102.57.149200 OK 34 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/photo-gallery/js/scripts.min.js?ver=1.6.10
IP 75.102.57.149:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash be2c2053fdfd7be7c1397229113b86f6
aa10f2f5fc9b08af8531259eb3dd58fc84083d6e
27dd57dc30333fdf1b39ac264c2c41ed8f25f6bb3cc7e266ea885ff1ceb59cee
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/photo-gallery/js/scripts.min.js?ver=1.6.10 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 01:43:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 34050
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
75.102.57.149200 OK 12 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (43771)
Hash 9f76c05d4aec8a23bbb9131800060916
ba854132574f3add765c016ff6cef2a30bddc5e0
c73bcff8e403046219e8f9dfb99e029b8d58099b8c5fb5f6508127702fd1b275
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: text/css
last-modified: Sat, 16 Jul 2022 11:23:55 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 11658
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/wonderplugin-carousel/engine/wonderplugincarouselskins.js?ver=8.0
75.102.57.149200 OK 2.4 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/wonderplugin-carousel/engine/wonderplugincarouselskins.js?ver=8.0
IP 75.102.57.149:0
File type ASCII text, with very long lines (607)
Hash 1bf17989e27a159985bddf3baadbee4d
1fd282e63fc0dba67eabe92497a712223c277023
e95b22022a0c06f86efe380901dd17d8e8392d3ae0303dd069764343c204eddb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wonderplugin-carousel/engine/wonderplugincarouselskins.js?ver=8.0 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Fri, 14 Apr 2017 02:42:14 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2420
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
75.102.57.149200 OK 2.4 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP 75.102.57.149:0
File type ASCII text, with very long lines (6475), with no line terminators
Hash 9939da8da9b306b91ddc5c68ea402d66
4cd4ea5f2dcd09fec713c36cb1c1c31ace0373b5
63b97ebb1748143ca6093d63ccdb14b2748f002df4caddfaa15c1173cb2c4942
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Sat, 16 Jul 2022 11:24:02 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2439
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/wonderplugin-carousel/engine/wonderplugincarousel.js?ver=8.0
75.102.57.149200 OK 26 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/wonderplugin-carousel/engine/wonderplugincarousel.js?ver=8.0
IP 75.102.57.149:0
File type ASCII text, with very long lines (933)
Hash 50acfca5c0ab6e69e3035c830ff0cfff
757771b7ac6a46895a59da53ea64be56636ba6f8
dfe61957f73fc30e046ee8ad8f3a972056f763bb12c39a02a596b7deb42f6ab7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wonderplugin-carousel/engine/wonderplugincarousel.js?ver=8.0 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Fri, 14 Apr 2017 02:42:14 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 26310
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
75.102.57.149200 OK 7.1 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP 75.102.57.149:0
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash a0798e1907e23a55c0f4ffebabb1fd48
aae64554a44eb45ae03b497cacfbb56b30cedade
5eb6c2a3b9c101ee2806a07fbd9177c4480db87871bef7d6a760a26dff1bd12b
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Sat, 16 Jul 2022 11:24:02 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 7098
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.1
75.102.57.149200 OK 6.6 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.1
IP 75.102.57.149:0
File type ASCII text, with very long lines (21904), with no line terminators
Hash 72ab26b100c3586766c214248da059c5
db1bae298588d6b922d5cd2090bc437fa8cc91fc
501c4ff7a416e6c08bcdaa64942b1a24904d086c9aa8367199952fe85a4352e6
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.1 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Tue, 19 Jul 2022 22:18:03 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 6553
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/plugins//gmb-infobubble.min.js?ver=2.1.2
75.102.57.149200 OK 5.3 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/plugins//gmb-infobubble.min.js?ver=2.1.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (24526), with no line terminators
Hash 9e3ea9e65b8696d694c4aa2be512f9e3
f1bc43c89ebf3b12da3dac7ab95d8721aae4f2fa
51b765af54c8499264b6503ec2288a08b3753c48c416578e8808d0995a51183b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/plugins//gmb-infobubble.min.js?ver=2.1.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Fri, 14 Jul 2017 23:40:18 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 5261
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/frontend/google-maps-builder.min.js?ver=2.1.2
75.102.57.149200 OK 3.2 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/frontend/google-maps-builder.min.js?ver=2.1.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (10176), with no line terminators
Hash af08b9daf0e33a6d4b613a37f6890b49
8c073def5bdfe94cdf77f77a26c0e09bf545aef5
655666b9010be21ba292eb24761cf6cdeef3c60d81004635c5b4c2ff7aef94a9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/frontend/google-maps-builder.min.js?ver=2.1.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Fri, 14 Jul 2017 23:40:18 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 3212
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/js/map-icons.js?ver=2.1.2
75.102.57.149200 OK 2.1 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/js/map-icons.js?ver=2.1.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (976)
Hash 602b2b7cf51e177e013972c6396a71c4
876ddade634f82e62d1d4b916050537003d22693
3a2e3703291ac61af96c2590f239ffd36e888beb42d1980f8260b96cbce84857
GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/js/map-icons.js?ver=2.1.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Fri, 14 Jul 2017 23:40:18 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2113
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2
75.102.57.149200 OK 704 B URL HTTP/1.1 www.cuscoinkasfeat.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (1464)
Hash 8a17c6b2e72d8f5e956b6dc951cad954
5ab730e86399c4e5897248b6d45bc31a6cceb81a
54923b4fd0ecc397f9c1b6a40eab70315d82edc4f5cf8dc3343e76977317771a
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Sat, 16 Jul 2022 11:23:59 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 704
date: Thu, 15 Sep 2022 02:50:33 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c86fc6649c7c512abb52fcd62d51ee26
bf241d6c1779668447df444a239d715b6ed46f6d
822cb499ea058f2c40ce4942048528575fadc172d3669007f5f34fae41c7ea49
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.cuscoinkasfeat.com/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=2.9.7
75.102.57.149200 OK 4.9 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=2.9.7
IP 75.102.57.149:0
File type ASCII text, with very long lines (315)
Hash a727814cbe98e2de033d15a95b5f4a05
bf95933136346683f3c3b8c385d2e24a16a0599f
ce3d30da055056766c1e94a613af0ca495b1e3c40706019d20ea04957745b88d
GET /wp-content/plugins/megamenu/js/maxmegamenu.js?ver=2.9.7 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Mon, 11 Jul 2022 01:43:19 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4877
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/js/jquery.easing.min.js?ver=3.2.14
75.102.57.149200 OK 1.9 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/js/jquery.easing.min.js?ver=3.2.14
IP 75.102.57.149:0
File type Unicode text, UTF-8 text, with very long lines (3601)
Hash ac7e285d1c743f3e6f1fbf711db277cd
7c9069b68f67d20377fe2f2f19d7617addb027c3
e7f33bad76c63e9334177f862b3fad89269b6939b1dcf8a111c7319944bdc29e
GET /wp-content/plugins/masterslider/public/assets/js/jquery.easing.min.js?ver=3.2.14 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Wed, 17 Jun 2015 23:26:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1889
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/js/picker/zebra_datepicker.js
75.102.57.149200 OK 7.2 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/js/picker/zebra_datepicker.js
IP 75.102.57.149:0
File type ASCII text, with very long lines (22846), with no line terminators
Hash 7ab126a7797f68d1a10db36bab6dbb63
0fa83e09c783be5f5b3318924f1b168a2a8786ee
f1d206fdfb73a4ff2d6f4b43cdf9551afa66f312e36055267fdcd1f35277a2b7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/CuscoInkasFeat/js/picker/zebra_datepicker.js HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Mon, 17 Apr 2017 23:48:50 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 7152
date: Thu, 15 Sep 2022 02:50:33 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c86fc6649c7c512abb52fcd62d51ee26
bf241d6c1779668447df444a239d715b6ed46f6d
822cb499ea058f2c40ce4942048528575fadc172d3669007f5f34fae41c7ea49
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/js/owl.carousel.min.js
75.102.57.149200 OK 6.5 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/themes/CuscoInkasFeat/js/owl.carousel.min.js
IP 75.102.57.149:0
File type ASCII text, with very long lines (635)
Hash e3879a4994645e6dc119e8ba6e77b848
450bc4dd4fd45220d8197ebaed251d506ba3cdb1
1fbae09ccc00bc99dc6db037525215ba7d8db1521e3bcb696d5a40cb1cd1a0b0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/CuscoInkasFeat/js/owl.carousel.min.js HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Tue, 13 May 2014 08:48:58 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 6474
date: Thu, 15 Sep 2022 02:50:33 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c86fc6649c7c512abb52fcd62d51ee26
bf241d6c1779668447df444a239d715b6ed46f6d
822cb499ea058f2c40ce4942048528575fadc172d3669007f5f34fae41c7ea49
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 15 Sep 2022 02:03:23 GMT
Cache-Control: max-age=3600
Expires: Thu, 15 Sep 2022 02:46:14 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Kt48mN35F49Qf5IZsL_iHUD20IJW9FSXcedrukG2chVeMhwAzZZ1IA==
Age: 2832
www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/js/masterslider.min.js?ver=3.2.14
75.102.57.149200 OK 36 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/js/masterslider.min.js?ver=3.2.14
IP 75.102.57.149:0
File type Unicode text, UTF-8 text, with very long lines (32272)
Hash bf2a37b66fe58d7bf23426d2c314f846
65d47e11a23ad301b92167ad602952f3236271a2
f4044916606c6b9ed1165bd3d2dc6c7f35279ae555f26dff749fe689812cd058
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/masterslider/public/assets/js/masterslider.min.js?ver=3.2.14 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: application/javascript
last-modified: Sat, 11 May 2019 22:49:50 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 36007
date: Thu, 15 Sep 2022 02:50:33 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c86fc6649c7c512abb52fcd62d51ee26
bf241d6c1779668447df444a239d715b6ed46f6d
822cb499ea058f2c40ce4942048528575fadc172d3669007f5f34fae41c7ea49
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.jscache.com/wejs?wtype=selfserveprop&uniq=856&locationId=12660099&lang=es_PE&rating=true&nreviews=5&writereviewlink=true&popIdx=true&iswide=false&border=true&display_version=2
151.101.86.83301 Moved Permanently 0 B URL HTTP/2 www.jscache.com/wejs?wtype=selfserveprop&uniq=856&locationId=12660099&lang=es_PE&rating=true&nreviews=5&writereviewlink=true&popIdx=true&iswide=false&border=true&display_version=2
IP 151.101.86.83:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wejs?wtype=selfserveprop&uniq=856&locationId=12660099&lang=es_PE&rating=true&nreviews=5&writereviewlink=true&popIdx=true&iswide=false&border=true&display_version=2 HTTP/1.1
Host: www.jscache.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: envoy
location: https://www.tripadvisor.com/wejs?wtype=selfserveprop&uniq=856&locationId=12660099&lang=es_PE&rating=true&nreviews=5&writereviewlink=true&popIdx=true&iswide=false&border=true&display_version=2
expires: 0
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
cache-control: no-cache,no-store,must-revalidate
timing-allow-origin: https://www.tripadvisor.com
content-type: text/plain; charset=utf-8
accept-ranges: bytes
date: Thu, 15 Sep 2022 02:50:34 GMT
via: 1.1 varnish
x-served-by: cache-bma1663-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1663210235.848964,VS0,VE143
content-length: 0
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/plugins/social-media-widget/images/default/32/facebook.png
75.102.57.149200 OK 634 B URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/social-media-widget/images/default/32/facebook.png
IP 75.102.57.149:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 82378b10a9b16af6fc2e089037660e4b
3b41821a2c28b414a727e477484d6f8ab219705c
81480cebe2ddeedde1af2e2a6f9eab352094abd78c75464705be2bcbb6e91b54
GET /wp-content/plugins/social-media-widget/images/default/32/facebook.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: image/png
last-modified: Fri, 14 Jul 2017 20:47:54 GMT
accept-ranges: bytes
content-length: 634
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/social-media-widget/images/default/32/youtube.png
75.102.57.149200 OK 1.7 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/social-media-widget/images/default/32/youtube.png
IP 75.102.57.149:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash a7f629359e02e7f5486c0a3d0de2bc2d
62a7ebd75d59a0fa06341a51be2f0836e98ccb18
78b5e23c32c684bc9079e0cadb39fd15335ad90e2cca9b3109d6aed244a3ab97
GET /wp-content/plugins/social-media-widget/images/default/32/youtube.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: image/png
last-modified: Fri, 14 Jul 2017 20:47:54 GMT
accept-ranges: bytes
content-length: 1715
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/blank.gif
75.102.57.149200 OK 43 B URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/blank.gif
IP 75.102.57.149:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /wp-content/plugins/masterslider/public/assets/css/blank.gif HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: image/gif
last-modified: Sat, 11 May 2019 22:49:48 GMT
accept-ranges: bytes
content-length: 43
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/uploads/2017/09/trip-advisor.jpg
75.102.57.149200 OK 2.6 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2017/09/trip-advisor.jpg
IP 75.102.57.149:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3\012- data
Hash 4ed5d6af3878314350a450090de9802d
ae26d2163af2932df3e41d31de91f535241f3226
8e173e25b06b76550107fd691aeadc95726c2fe8127c67f2b40dfb3926ebe36f
GET /wp-content/uploads/2017/09/trip-advisor.jpg HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: image/jpeg
last-modified: Wed, 20 Sep 2017 18:28:10 GMT
accept-ranges: bytes
content-length: 2562
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-content/uploads/2017/05/inca-trail-en.png
75.102.57.149200 OK 8.3 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2017/05/inca-trail-en.png
IP 75.102.57.149:0
File type PNG image data, 308 x 111, 8-bit/color RGBA, non-interlaced\012- data
Hash a895ba90b383d4cade1d0dc5870afa8a
deeb1f6ba43f94ec48dbd295352efc4f5f92e101
e638bc2e73e1f721f743c6e731497f2846e4951748cce16618b5a40e451d21b0
GET /wp-content/uploads/2017/05/inca-trail-en.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: image/png
last-modified: Wed, 10 May 2017 18:48:04 GMT
accept-ranges: bytes
content-length: 8328
date: Thu, 15 Sep 2022 02:50:33 GMT
www.skynetcusco.com/images/skynetcusco.png
104.21.15.158301 Moved Permanently 0 B URL HTTP/1.1 www.skynetcusco.com/images/skynetcusco.png
IP 104.21.15.158:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/skynetcusco.png HTTP/1.1
Host: www.skynetcusco.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
HTTP/1.1 301 Moved Permanently
Date: Thu, 15 Sep 2022 02:50:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 15 Sep 2022 03:50:35 GMT
Location: https://www.skynetcusco.com/images/skynetcusco.png
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6gX0RNu6cfg6ltNBqaH7KLSG4JVfoDBXrb6cPnJr%2BtcyEFtXDH2oovJIma0fKIOoq%2Bfa1VArq6f5qGpjAzABoAtwTWBTJdR8NhQ%2BuPyhFISffjFc%2FZDxRpBynr63vS%2FNPk%2BPrm5O"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74ae0e40cef9b506-OSL
alt-svc: h2=":443"; ma=60
www.cuscoinkasfeat.com/wp-content/plugins/social-media-widget/images/default/32/instagram.png
75.102.57.149200 OK 1.8 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/social-media-widget/images/default/32/instagram.png
IP 75.102.57.149:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash a5c6fbcd9cb98158d0b0a724322e0af4
3f6cbd2b1c297c695918f60005f820c2d9f09dc2
c0a55b6bcc810d94bf80ca5be172b6df680e5a83d656da3281fa2f4fda95f1c6
GET /wp-content/plugins/social-media-widget/images/default/32/instagram.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: image/png
last-modified: Fri, 14 Jul 2017 20:47:54 GMT
accept-ranges: bytes
content-length: 1833
date: Thu, 15 Sep 2022 02:50:33 GMT
www.cuscoinkasfeat.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
75.102.57.149200 OK 5.0 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP 75.102.57.149:0
File type ASCII text, with very long lines (15660)
Hash 848f9aadf194f3d024a2a90dbd11e3b5
aecd4b03b5a7829c6ca015d926798dc95e4fa912
36ff79b2f6827e46be1df95ff739e536718c0ee4fc09462678b32d7abd60fc6c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:34 GMT
content-type: application/javascript
last-modified: Sat, 16 Jul 2022 11:24:08 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 5021
date: Thu, 15 Sep 2022 02:50:34 GMT
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d3ac56507d17ffff5e8b486406985d68
17d26336cd8ea65af3f23db166945f1b3fbbfbab
e7e321340eed681c1269f715b0214e1511d5762fffbe930e7c157b800afa9a39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5018
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:35 GMT
Last-Modified: Thu, 15 Sep 2022 01:26:57 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ed1a966e9770807ef8b4f57a5113d29a
d843a3d371ee0424004f68ccc32ce06e6bc6e6c7
4932c01d3db39a9ac2f0f7e2693af95e5a334697edfd8d078fd52e421ba43721
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash d5a5d04d15c71a4e71821b6ddd4110e0
7c5495f9d4165a90ce681ddd1b330675e55a4993
545c765db5e55c1d89bc56d93a3cde1a3b6f5c9d741ad9b58253f9fd7ab24457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash d5a5d04d15c71a4e71821b6ddd4110e0
7c5495f9d4165a90ce681ddd1b330675e55a4993
545c765db5e55c1d89bc56d93a3cde1a3b6f5c9d741ad9b58253f9fd7ab24457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/rumraisin/v20/nwpRtKu3Ih8D5avB4h2uF3iCyg.woff2
142.250.74.163200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/rumraisin/v20/nwpRtKu3Ih8D5avB4h2uF3iCyg.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 20828, version 1.0\012- data
Hash 51a8a4f2ad817869f10e8e12202cdc97
6aa6c99ec888a67d00bc70b025389e5e92133a24
c814c2d531e514e01ef2b4edd286e00ebbda7b8caf87efbb894df83a0e706141
GET /s/rumraisin/v20/nwpRtKu3Ih8D5avB4h2uF3iCyg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 05:47:59 GMT
expires: Fri, 08 Sep 2023 05:47:59 GMT
cache-control: public, max-age=31536000
age: 594156
last-modified: Wed, 27 Apr 2022 16:28:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2
142.250.74.163200 OK 30 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 30480, version 1.0\012- data
Hash 0e7e5f9d3a8ef121149827180b790b5c
0e9f9333078e5df9245630ff6f68ba1d9da3c403
e8e147e15907f25cad69b2bcf060213efad4ed04e0d36374715cbca17b2afc1c
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30480
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:29:11 GMT
expires: Thu, 14 Sep 2023 19:29:11 GMT
cache-control: public, max-age=31536000
age: 26484
last-modified: Wed, 27 Apr 2022 16:04:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-KCWTMKC
142.250.74.72200 OK 58 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KCWTMKC
IP 142.250.74.72:0
File type ASCII text, with very long lines (1720)
Hash ab851467251097cd828ec9a3e04496f7
3a79267ead4acc88a3ffefd8f782171b4e16a1c3
fa32645b83143f4d6e90fac355275f840ad099d9a8a4b00be05c7dd0e0f25a33
GET /gtm.js?id=GTM-KCWTMKC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 Sep 2022 02:50:35 GMT
expires: Thu, 15 Sep 2022 02:50:35 GMT
cache-control: private, max-age=900
last-modified: Thu, 15 Sep 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 58404
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.tripadvisor.com/wejs?wtype=selfserveprop&uniq=856&locationId=12660099&lang=es_PE&rating=true&nreviews=5&writereviewlink=true&popIdx=true&iswide=false&border=true&display_version=2
151.101.86.40200 OK 756 B URL HTTP/2 www.tripadvisor.com/wejs?wtype=selfserveprop&uniq=856&locationId=12660099&lang=es_PE&rating=true&nreviews=5&writereviewlink=true&popIdx=true&iswide=false&border=true&display_version=2
IP 151.101.86.40:0
Hash de77bc887dacd49ddb00c567b95df536
524bc88e82bccd28c38f4d3d15107626117b387f
69f666dc5c533b08200ef1f37b314face517723ddca61564fbcc5dc9da774e1f
GET /wejs?wtype=selfserveprop&uniq=856&locationId=12660099&lang=es_PE&rating=true&nreviews=5&writereviewlink=true&popIdx=true&iswide=false&border=true&display_version=2 HTTP/1.1
Host: www.tripadvisor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cuscoinkasfeat.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
expires: 0
cache-control: no-cache,no-store,must-revalidate
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
set-cookie: TADCID=GLzcXjInAUkCUsEnABQCFdpBzzOuRA-9xvCxaMyI13AztwcksGzMUD96BnrkwXBgxLX_DQ-11CYYTQ4fU0XMB1DmKHgLEjJE-pI; Domain=www.tripadvisor.com; Expires=Sun, 12-Sep-2032 02:50:35 GMT; Path=/; Secure; HttpOnly
__vt=5KBYmMSnyv2Qg2AeABQCIf6-ytF7QiW7ovfhqc-AvSARVzEFP-ykT7lngAyknKLjKzgzBBgYCx4KzTWN1sZnAeKfVgWhCUAhpjkCbzmO_6I4uFM_COXoWadPPoUPzncN7HuYBnIKQOvJ5q3dcuQgsZbLhg; Domain=www.tripadvisor.com; Expires=Thu, 15-Sep-2022 03:50:35 GMT; Path=/; Secure; HttpOnly
timing-allow-origin: https://www.tripadvisor.com
content-type: application/x-javascript;charset=UTF-8
content-encoding: gzip
accept-ranges: bytes
date: Thu, 15 Sep 2022 02:50:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1663-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1663210235.116364,VS0,VE134
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/common/loading-2.gif
75.102.57.149200 OK 3.3 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/common/loading-2.gif
IP 75.102.57.149:0
File type gzip compressed data, max compression\012- data
Hash c2a9987ffa9e688f84d7d452bc1eaf5e
742baf2fc186e2877cd75a7a27e3d14d09dd9d5f
c2c040bf6ce706fd70c699671d0176f7a098fcb0022ae3569a1ab841b3a27f49
GET /wp-content/plugins/masterslider/public/assets/css/common/loading-2.gif HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.2.14
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:34 GMT
content-type: image/gif
last-modified: Sat, 11 May 2019 22:49:48 GMT
accept-ranges: bytes
content-length: 2707
date: Thu, 15 Sep 2022 02:50:34 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ed1a966e9770807ef8b4f57a5113d29a
d843a3d371ee0424004f68ccc32ce06e6bc6e6c7
4932c01d3db39a9ac2f0f7e2693af95e5a334697edfd8d078fd52e421ba43721
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
52.13.69.101101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.13.69.101:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DR/hZYcjp+GXCy9W/EMRbg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oniRuH/A+RmFAkdWHxxv/11h5j0=
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
142.250.74.163200 OK 35 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:28:55 GMT
expires: Thu, 14 Sep 2023 19:28:55 GMT
cache-control: public, max-age=31536000
age: 26500
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/skins/light-skin-1.png
75.102.57.149200 OK 1.1 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/skins/light-skin-1.png
IP 75.102.57.149:0
File type PNG image data, 152 x 225, 8-bit colormap, non-interlaced\012- data
Hash 039ea27b7f656c4cc6074f9f2abd6e02
9ecdfed048f103b61a6a786a43e5a2b2e5d1bab9
c0672a790b2a9eada03bc26b0eaf3d9aaeb0e627dd7bcf30d82cf9350e8c5282
GET /wp-content/plugins/masterslider/public/assets/css/skins/light-skin-1.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.2.14
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:34 GMT
content-type: image/png
last-modified: Sat, 11 May 2019 22:49:54 GMT
accept-ranges: bytes
content-length: 1082
date: Thu, 15 Sep 2022 02:50:34 GMT
use.fontawesome.com/releases/v5.15.4/webfonts/fa-regular-400.woff2
172.64.168.32200 OK 13 kB URL HTTP/2 use.fontawesome.com/releases/v5.15.4/webfonts/fa-regular-400.woff2
IP 172.64.168.32:0
File type Web Open Font Format (Version 2), TrueType, length 13224, version 331.-31196\012- data
Hash b91d376b8d7646d671cd820950d5f7f1
13517529affa39e2585c591acae6dc336b6aa917
e42a88444448ac3d60549cc7c1ff2c8a9cac721034c073d80a14a44e79730cca
GET /releases/v5.15.4/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 02:50:35 GMT
content-type: font/woff2
content-length: 13224
x-amz-id-2: hYbp4ZnyWGsLX7cybe7HEX75Z20RYgRIvdb/YdyvCDe2NX8+l9ndATOpm3TumdpKrVcHeAu5IGY=
x-amz-request-id: KYRR2H7EMRAS1DDN
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 04 Aug 2021 20:43:47 GMT
etag: "b91d376b8d7646d671cd820950d5f7f1"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZA9JHiT2p6I0WytaQxvyt6dwQo7baDsyMYKNW0b%2BzVXgvkxQpHWK7A1W%2Bg2pjgNG0moNoXayLl4ALYCSjPqaeI5M5WNftfkpqsAh8%2FhwejowuBW%2FRtzv7uZjrVS9LPvBlGWhLNnn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ae0e424c4472bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/common/grab.png
75.102.57.149200 OK 189 B URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/common/grab.png
IP 75.102.57.149:0
File type PNG image data, 16 x 16, 2-bit colormap, non-interlaced\012- data
Hash d717e2539bf1249f1cab65404f7dc8b9
3b096b6e5c09b0438ca6d38f34b754de3ae8c826
31eb6ff40a2336987e2e67319b0a130a8e48475f626f533ebd29fef1ef4b2599
GET /wp-content/plugins/masterslider/public/assets/css/common/grab.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.2.14
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:34 GMT
content-type: image/png
last-modified: Sat, 11 May 2019 22:49:54 GMT
accept-ranges: bytes
content-length: 189
date: Thu, 15 Sep 2022 02:50:34 GMT
use.fontawesome.com/releases/v5.15.4/webfonts/fa-brands-400.woff2
172.64.168.32200 OK 77 kB URL HTTP/2 use.fontawesome.com/releases/v5.15.4/webfonts/fa-brands-400.woff2
IP 172.64.168.32:0
File type Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196\012- data
Hash ed311c7a0ade9a75bb3ebf5a7670f31d
0613c7ebba55ee47ef302c0f7766324692f899a7
8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef
GET /releases/v5.15.4/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 02:50:35 GMT
content-type: font/woff2
content-length: 76736
x-amz-id-2: GOT7vIA9djql6bSzxdmTpuZ7UESCOg30AKtiQlOLw0oMMdtdIGNCgbWjAvR2r+/9btHHK5PfqeM=
x-amz-request-id: KYRT7VY5PP7YXV5D
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 04 Aug 2021 20:43:47 GMT
etag: "ed311c7a0ade9a75bb3ebf5a7670f31d"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tBriWNeT4J0TGnJz%2Ba23Bur0%2F%2FrZprqFRhCsAowFCsMHFL7B1lZ6t3RgW%2BAC18T1zWo%2F%2FKEmR4K%2B52KaslWMQDy4hNPD3GeO2ODnnvPWJzwAUXkCwXohd62KH%2BaGsOsJKSULB7hs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ae0e426c4c72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.15.4/webfonts/fa-solid-900.woff2
172.64.168.32200 OK 78 kB URL HTTP/2 use.fontawesome.com/releases/v5.15.4/webfonts/fa-solid-900.woff2
IP 172.64.168.32:0
File type Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196\012- data
Hash d824df7eb2e268626a2dd9a6a741ac4e
0ccb2c814a7e4ca12c4778821633809cb0361eaa
9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537
GET /releases/v5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 02:50:35 GMT
content-type: font/woff2
content-length: 78268
x-amz-id-2: ip9InAJOY3KlfUYpjdxTnAsvIsh+lQfnT7Cgf2beYA4xBqlwzbgsfRXaTAd0399IShHf5ArWrho=
x-amz-request-id: KYRHTMXYN07H6H4P
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 04 Aug 2021 20:43:47 GMT
etag: "d824df7eb2e268626a2dd9a6a741ac4e"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PW8qgKlF%2FcXknI%2BLR6Ptquhc0jEO8zip0mTYI%2B8WhUwQvIFSh8xJrM1kv2XD40nnfFtjjCVW1uE6svFO3f%2FLfGzhHd5SWr7SaMh%2F%2FmWYox1jbG6invRqBa6WQQoy%2B4Tv%2FmE8knpW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ae0e428c5072bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/uploads/2022/07/imagen4.png
75.102.57.149200 OK 2.6 MB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2022/07/imagen4.png
IP 75.102.57.149:0
File type PNG image data, 1920 x 699, 8-bit/color RGBA, non-interlaced\012- data
Size 2.6 MB (2593989 bytes)
Hash a73b7383de163edd818d3f8ce0524445
cb215948f6bc8c2ddbdadd5ab2feb853c6a9ec13
6e1149afca0d85f708594eec68b14afd22aec1d3ea1d8aeaf64defff0a9b7bb9
GET /wp-content/uploads/2022/07/imagen4.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:34 GMT
content-type: image/png
last-modified: Tue, 12 Jul 2022 05:09:40 GMT
accept-ranges: bytes
content-length: 2593989
date: Thu, 15 Sep 2022 02:50:34 GMT
www.cuscoinkasfeat.com/wp-content/uploads/2022/07/imagen2.png
75.102.57.149200 OK 2.3 MB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2022/07/imagen2.png
IP 75.102.57.149:0
File type PNG image data, 1920 x 699, 8-bit/color RGBA, non-interlaced\012- data
Size 2.3 MB (2339146 bytes)
Hash 3e91480491efc2171a4ad4fc8d696a4e
ffcc712a37fc08582b6f9857044c7f2e0fa574f6
0b628b4415d88a10cb6886ba31b88fa62fc3bd8af9a05b182b5a5805164d92e8
GET /wp-content/uploads/2022/07/imagen2.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0; _gcl_au=1.1.343753656.1663210221
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:34 GMT
content-type: image/png
last-modified: Tue, 12 Jul 2022 05:10:57 GMT
accept-ranges: bytes
content-length: 2339146
date: Thu, 15 Sep 2022 02:50:34 GMT
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 74cf77ca0dd7e4f96dfea6ceb4536e65
fa0492bed3fa3b15cc0380e3692320088aa7b217
94f64669694fa90640f8ee8c22f1cb792166c18bab72200a991bc6eaf8f09453
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3754
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Last-Modified: Thu, 15 Sep 2022 01:48:02 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 74cf77ca0dd7e4f96dfea6ceb4536e65
fa0492bed3fa3b15cc0380e3692320088aa7b217
94f64669694fa90640f8ee8c22f1cb792166c18bab72200a991bc6eaf8f09453
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3754
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Last-Modified: Thu, 15 Sep 2022 01:48:02 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Thu, 15 Sep 2022 02:41:12 GMT
expires: Thu, 15 Sep 2022 04:41:12 GMT
cache-control: public, max-age=7200
age: 564
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ed97a4b82680caefc4ffdebf786e12fc
a638a68f346844709bac57a92bf3d2c28043165e
b81ed44963f5d8b54c62e7fe18db301d3c8eeaf8fbbfb099270562156e12fdc9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.tripadvisor.com.pe/WidgetEmbed-selfserveprop?border=true&popIdx=true&iswide=false&locationId=12660099&display_version=2&uniq=856&rating=true&lang=es_PE&nreviews=5&writereviewlink=true
151.101.86.40200 OK 5.6 kB URL HTTP/2 www.tripadvisor.com.pe/WidgetEmbed-selfserveprop?border=true&popIdx=true&iswide=false&locationId=12660099&display_version=2&uniq=856&rating=true&lang=es_PE&nreviews=5&writereviewlink=true
IP 151.101.86.40:0
File type Unicode text, UTF-8 text, with very long lines (1961)
Hash 365437daee5e9c23f7b9d57497961103
2350a87984ac10bff5c249d0c39fe13dcfa14e59
11e214519a066fc887bfea7ffed0f52bea16471cd86ab166859522b1bd02cba3
GET /WidgetEmbed-selfserveprop?border=true&popIdx=true&iswide=false&locationId=12660099&display_version=2&uniq=856&rating=true&lang=es_PE&nreviews=5&writereviewlink=true HTTP/1.1
Host: www.tripadvisor.com.pe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
content-language: es-PE
expires: 0
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
pragma: no-cache
cache-control: no-cache,no-store,must-revalidate
set-cookie: TADCID=H_oxpm2xirShGCT8ABQCFdpBzzOuRA-9xvCxaMyI13Azt0IkOfBiNSdyNah9Tv7vtFvsgOjAimmcGLOQnRxD42Y8pWfH5zeGi3M; Domain=www.tripadvisor.com.pe; Expires=Sun, 12-Sep-2032 02:50:35 GMT; Path=/; Secure; HttpOnly
TAUnique=%1%enc%3AlCybFvJjx6Xk7nWhzVPS6vln53cgl0aylFq3cULC7Oc2jHwltRJPGQ%3D%3D; Domain=.tripadvisor.com.pe; Expires=Sat, 14-Sep-2024 02:50:35 GMT; Path=/; HttpOnly
__vt=T4-nnJudriHKLpceABQCIf6-ytF7QiW7ovfhqc-AvSARV1POMjha6OXJ1LDLp5_qWcT9rDyH7ZDoxHDG2VEklnvuk4w-LqbEHU_4aOiIQuwFX-LTBxYgsuJ67NuBkDUJAptFKgNEorT_DJ7of1zeDPee1w; Domain=www.tripadvisor.com.pe; Expires=Thu, 15-Sep-2022 03:50:35 GMT; Path=/; Secure; HttpOnly
TASSK=enc%3AAAKERC2Lzc4f5wH%2BmHxTU8Qyx%2FtA2ZvcZRbEYTJOKqqekJOFZyoZD6M5MUGzaGtxBmirK0oI1%2FmEvovhQTX217yXCH%2BEcbIf6Jnj7Dg1UxQEvAuj6V7EwKTTVZNH5PS56w%3D%3D; Domain=www.tripadvisor.com.pe; Expires=Tue, 14-Mar-2023 02:50:35 GMT; Path=/; HttpOnly
TASession=V2ID.AE11095FA9064B7E836EEEE4AE690980*SQ.1*LS.WidgetEmbed-selfserveprop*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*DF.0*TRA.true; Domain=.tripadvisor.com.pe; Path=/
SRT=TART_SYNC; Domain=www.tripadvisor.com.pe; Expires=Thu, 15-Sep-2022 03:20:35 GMT; Path=/
ServerPool=B; Domain=.tripadvisor.com.pe; Path=/
PMC=V2*MS.67*MD.20220914*LD.20220914; Domain=www.tripadvisor.com.pe; Expires=Sat, 14-Sep-2024 02:50:35 GMT; Path=/; Secure; HttpOnly
TART=%1%enc%3A5O51oc1T0upEsUz09K9tPNe1Q8ngI0zAaCPetLSXxcezVj0ohJ33kTUpcsHCwVsjfTM2Cx7kRNA%3D; Domain=www.tripadvisor.com.pe; Expires=Tue, 20-Sep-2022 02:50:35 GMT; Path=/; HttpOnly
TATravelInfo=V2*A.2*MG.-1*HP.2*FL.3*RS.1; Domain=.tripadvisor.com.pe; Expires=Thu, 29-Sep-2022 02:50:35 GMT; Path=/
TAUD=RDD-1663210235862-2022_09_14; Domain=.tripadvisor.com.pe; Expires=Thu, 29-Sep-2022 02:50:35 GMT; Path=/
TASID=AE11095FA9064B7E836EEEE4AE690980; Domain=www.tripadvisor.com.pe; Expires=Thu, 15-Sep-2022 03:20:35 GMT; Path=/; Secure
timing-allow-origin: https://www.tripadvisor.com
content-type: text/javascript;charset=UTF-8
content-encoding: gzip
accept-ranges: bytes
date: Thu, 15 Sep 2022 02:50:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1663-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1663210235.288037,VS0,VE680
vary: User-Agent,Accept-Encoding
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 22 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (28925)
Hash b8d1d30276ab8a6c31686d53f8d08ddc
21afd4d885f46e51d41be434d19f58ebc457f6b2
175d92b55f63e3fb9d27c717b99ab6b897aabf0644010b9c94ae18d209aee905
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: isZ0uH3NT9EcB2S5MQOOZbtO7Cp8QD3Bea4iC+ByyNEZcyIrB1yv4OI8nCT1QhaCD3YtCTfPl/eWYz4eCV6P/A==
content-length: 22471
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
216.58.207.202200 OK 23 B URL HTTP/2 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP 216.58.207.202:0
File type JSON data\012- , ASCII text
Hash e3981ca10169a319d5aa062bf43a5fa1
2c6ed584767b65688ce99b1ebe1a3b7448a67421
8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 15 Sep 2022 02:50:36 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: http://www.cuscoinkasfeat.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.tacdn.com/js3/build/concat/widget/cdswidgets_m-c-v22480917520a.js
151.101.86.83200 OK 4.9 kB URL HTTP/2 static.tacdn.com/js3/build/concat/widget/cdswidgets_m-c-v22480917520a.js
IP 151.101.86.83:0
File type ASCII text, with very long lines (13794)
Hash 6b5b20d72c899450ae89def8afda6dcf
dc7b92350e476c7a34b844681b97972b0639abae
31f92617fe2e93cb6ad7b054bb9db186464030b0d3dd000097a28f8600adb725
GET /js3/build/concat/widget/cdswidgets_m-c-v22480917520a.js HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
last-modified: Thu, 04 Nov 2021 09:27:29 GMT
cache-control: max-age=31536000, immutable
expires: Thu, 17 Nov 2022 23:42:11 GMT
timing-allow-origin: *
access-control-allow-origin: *
content-type: application/x-javascript
content-encoding: gzip
accept-ranges: bytes
date: Thu, 15 Sep 2022 02:50:36 GMT
via: 1.1 varnish
age: 26017703
x-served-by: cache-bma1663-BMA
x-cache: HIT
x-cache-hits: 18574
x-timer: S1663210236.061903,VS0,VE0
vary: Accept-Encoding
content-length: 4929
X-Firefox-Spdy: h2
static.tacdn.com/css2/build/concat/t4b_widget_self_serve_property-v24221562771a.css
151.101.86.83200 OK 6.3 kB URL HTTP/2 static.tacdn.com/css2/build/concat/t4b_widget_self_serve_property-v24221562771a.css
IP 151.101.86.83:0
File type ASCII text, with very long lines (35043)
Hash ce0aa4b6b02e969b79259507a1fbf1fd
e8879aec419a12d1ddc9ed1265022eb3ee693637
4eee5185fbf55f383bedb7256a428d631c3d96693f0b2f9d41d5616729ebebea
GET /css2/build/concat/t4b_widget_self_serve_property-v24221562771a.css HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
last-modified: Tue, 26 Jul 2022 11:32:24 GMT
cache-control: max-age=31536000, immutable
expires: Wed, 02 Aug 2023 01:58:14 GMT
timing-allow-origin: *
access-control-allow-origin: *
content-type: text/css
content-encoding: gzip
accept-ranges: bytes
date: Thu, 15 Sep 2022 02:50:36 GMT
via: 1.1 varnish
age: 3804741
x-served-by: cache-bma1663-BMA
x-cache: HIT
x-cache-hits: 3193
x-timer: S1663210236.061930,VS0,VE0
vary: Accept-Encoding
content-length: 6348
X-Firefox-Spdy: h2
www.google.com/pagead/conversion_async.js
142.250.74.164200 OK 16 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP 142.250.74.164:0
File type ASCII text, with very long lines (1623)
Hash 4738d969770682feba80f04bf171d65b
be0e0ceb91bf5ed0c64b0f3f2cc2c99c6d4cd6b7
1daca97cf9e8078299f94c50346e45fead45bf908ca97ded912f26986c1c4e9a
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 15 Sep 2022 02:50:36 GMT
expires: Thu, 15 Sep 2022 02:50:36 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15579141248118922429
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15687
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 74cf77ca0dd7e4f96dfea6ceb4536e65
fa0492bed3fa3b15cc0380e3692320088aa7b217
94f64669694fa90640f8ee8c22f1cb792166c18bab72200a991bc6eaf8f09453
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3754
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Last-Modified: Thu, 15 Sep 2022 01:48:02 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
www.cuscoinkasfeat.com/wp-content/uploads/2017/04/machu-picchu-cusco-inkas-feat.jpg
75.102.57.149200 OK 404 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2017/04/machu-picchu-cusco-inkas-feat.jpg
IP 75.102.57.149:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x700, components 3\012- data
Size 404 kB (403592 bytes)
Hash bda6b23011005269e4b694b9f025da48
9b0fb9a8f5d50ab1ff1ca0ee45094afa0704224c
4622214efb2d6221de8562f6678dceb79f30838736aa1c58b6c69d47824ec484
GET /wp-content/uploads/2017/04/machu-picchu-cusco-inkas-feat.jpg HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0; _gcl_au=1.1.343753656.1663210221
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:35 GMT
content-type: image/jpeg
last-modified: Thu, 13 Apr 2017 22:00:14 GMT
accept-ranges: bytes
content-length: 403592
date: Thu, 15 Sep 2022 02:50:35 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 39aa25d8411997d98f9093c19b0ccbca
3cb31e92d707cd561897042ed1a09de5a79e7108
f1b7b71241b580ec34281f5addc49d716eac9ecc46a3217e646c76e6dc8d4578
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-conversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4
142.250.74.164302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4
IP 142.250.74.164:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 02:50:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/es_LA/sdk.js?hash=51b8340459e0adc99e4c0b7097f37287
31.13.72.12200 OK 87 kB URL HTTP/2 connect.facebook.net/es_LA/sdk.js?hash=51b8340459e0adc99e4c0b7097f37287
IP 31.13.72.12:0
File type ASCII text, with very long lines (13196)
Hash fb3fcff0658f3a34ce4f140353504d52
fbc7131e00f417016d029b0609d5dcee81cc8305
9623c582716e11e40635ba7cc5ad2cd14b94228bb05e7e2533e7fa73c5b8b56a
GET /es_LA/sdk.js?hash=51b8340459e0adc99e4c0b7097f37287 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 19133c43dc907c6f9c1960a9e2168c07
etag: "55fd9c559b4e2ff1b8d309984270a4ad"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 14 Sep 2023 22:35:44 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: +z/P8GWPOjTOTxQDU1BNUg==
x-fb-debug: 9i3oYn66VzwsEIC14PeAlzu8eU6h6HGMGL8i4HD+0w6PYUBAtNTHiCxIzMZMQS18cRmEoX8FqnJCdPv7ssvW/Q==
priority: u=3,i
content-length: 86780
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4
142.250.74.164302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4
IP 142.250.74.164:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 02:50:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 0dfd060e0fb8dec42e8f52f8db247b61
d6f33b6390aa9a4b34375d58009977926bc1fff3
17e3d9698e2cd4caf0cbf66b71393b473300fb9a8a4b6f7b97f421e93d54ec44
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 0dfd060e0fb8dec42e8f52f8db247b61
d6f33b6390aa9a4b34375d58009977926bc1fff3
17e3d9698e2cd4caf0cbf66b71393b473300fb9a8a4b6f7b97f421e93d54ec44
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a8b2bb270d78a6dddeb5b7fa01bd896c
eee28c4dd10c090f100c6ed383392b67d9fb9200
5c929c1a5e85ed508916eda62cccedb3ef1a5f407468596fa2726c476e2a9340
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&fmt=3&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1
142.250.74.98200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&fmt=3&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1
IP 142.250.74.98:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&fmt=3&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 02:50:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 03:05:36 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&fmt=3&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1
142.250.74.98200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&fmt=3&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1
IP 142.250.74.98:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&fmt=3&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 02:50:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 03:05:36 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
142.250.74.3200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP 142.250.74.3:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/834862472/?random=1663210221471&cv=9&fst=1663210221471&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cuscoinkasfeat.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 02:50:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
142.250.74.3200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP 142.250.74.3:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/834862472/?random=1663210221477&cv=9&fst=1663210221477&num=1&value=1&label=mOgjCNXnj3UQiPuLjgM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&tiba=Page%20not%20found%20-%20Cusco%20Inkas%20Feat%20Cusco%20Inkas%20Feat&auid=343753656.1663210221&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cuscoinkasfeat.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 02:50:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/uploads/2022/07/imagen1.png
75.102.57.149200 OK 2.9 MB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2022/07/imagen1.png
IP 75.102.57.149:0
File type PNG image data, 1920 x 699, 8-bit/color RGBA, non-interlaced\012- data
Size 2.9 MB (2859627 bytes)
Hash 094a4545afe3cfdf433981878ef66d91
022f9c4d85cb9d125de6c3f29bd7df05672be270
d8c13e01418403656e45ef7c49edd909aeb8fbef634605f6a9280416e8567814
GET /wp-content/uploads/2022/07/imagen1.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0; _gcl_au=1.1.343753656.1663210221; _ga=GA1.2.1403550729.1663210221; _gid=GA1.2.317981968.1663210221; _gat_UA-104113785-37=1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:35 GMT
content-type: image/png
last-modified: Tue, 12 Jul 2022 05:11:41 GMT
accept-ranges: bytes
content-length: 2859627
date: Thu, 15 Sep 2022 02:50:35 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 0dfd060e0fb8dec42e8f52f8db247b61
d6f33b6390aa9a4b34375d58009977926bc1fff3
17e3d9698e2cd4caf0cbf66b71393b473300fb9a8a4b6f7b97f421e93d54ec44
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a8b2bb270d78a6dddeb5b7fa01bd896c
eee28c4dd10c090f100c6ed383392b67d9fb9200
5c929c1a5e85ed508916eda62cccedb3ef1a5f407468596fa2726c476e2a9340
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=776777652494694&ev=PageView&dl=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&rl=&if=false&ts=1663210221682&sw=1280&sh=1024&v=2.9.5&r=c2&ec=0&o=30&fbp=fb.1.1663210221681.865976036&it=1663210221449&coo=false&rqm=GET
31.13.72.36200 OK 87 kB URL HTTP/2 www.facebook.com/tr/?id=776777652494694&ev=PageView&dl=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&rl=&if=false&ts=1663210221682&sw=1280&sh=1024&v=2.9.5&r=c2&ec=0&o=30&fbp=fb.1.1663210221681.865976036&it=1663210221449&coo=false&rqm=GET
IP 31.13.72.36:0
File type gzip compressed data, from Unix\012- data
Hash d2c279efc9153b15701dbb0944e78638
2ce19269389d818a3ef62dbea7fa304a3c22fd78
1d9cba5f011c29fab8c07ca5a92822211116f5fe22b4ad979df328073266cdee
GET /tr/?id=776777652494694&ev=PageView&dl=http%3A%2F%2Fwww.cuscoinkasfeat.com%2Fsh%2FZS%2F589c3f8223e79caf05feaf3eb517bdbd%2Fenterpassword.php&rl=&if=false&ts=1663210221682&sw=1280&sh=1024&v=2.9.5&r=c2&ec=0&o=30&fbp=fb.1.1663210221681.865976036&it=1663210221449&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Thu, 15 Sep 2022 02:50:36 GMT
expires: Thu, 15 Sep 2022 02:50:36 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 20620ba615dba1de34528390492c3f53
2ca43d3a828682e10eb7638972b79b7136395e2b
12cf30cf1de58b4bab8af4a5d159b42909c554ae7b34e6f7361d9a49f1e861b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.tacdn.com/css2/webfonts/TripAdvisor/TripAdvisor_Regular.woff2?v004.023
151.101.86.83200 OK 26 kB URL HTTP/2 static.tacdn.com/css2/webfonts/TripAdvisor/TripAdvisor_Regular.woff2?v004.023
IP 151.101.86.83:0
File type Web Open Font Format (Version 2), TrueType, length 26252, version 1.0\012- data
Hash 2d0c909fe09ed8ef77056363d8963d2e
f81b7dc1acf5a2c25e46a893be5fe09622716d70
b182c7fce760e8851d7e91095237ff86a4f7036c78ddf4107ead869ff2f3502a
GET /css2/webfonts/TripAdvisor/TripAdvisor_Regular.woff2?v004.023 HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: https://static.tacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
last-modified: Mon, 15 Aug 2022 22:02:27 GMT
cache-control: max-age=2592000, immutable
expires: Wed, 28 Sep 2022 22:55:39 GMT
timing-allow-origin: *
access-control-allow-origin: *
content-type: application/font-woff2
accept-ranges: bytes
date: Thu, 15 Sep 2022 02:50:36 GMT
via: 1.1 varnish
age: 1396497
x-served-by: cache-bma1663-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1663210236.423238,VS0,VE0
vary: Accept-Encoding
content-length: 26252
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-104113785-37&cid=1403550729.1663210221&jid=1812672200&gjid=2071288810&_gid=317981968.1663210221&_u=YEBAAAAAAAAAAC~&z=352870543
142.251.1.157200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-104113785-37&cid=1403550729.1663210221&jid=1812672200&gjid=2071288810&_gid=317981968.1663210221&_u=YEBAAAAAAAAAAC~&z=352870543
IP 142.251.1.157:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-104113785-37&cid=1403550729.1663210221&jid=1812672200&gjid=2071288810&_gid=317981968.1663210221&_u=YEBAAAAAAAAAAC~&z=352870543 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.cuscoinkasfeat.com
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.cuscoinkasfeat.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 15 Sep 2022 02:50:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/uploads/2019/09/BANNER-PATA.jpg
75.102.57.149200 OK 1.0 MB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2019/09/BANNER-PATA.jpg
IP 75.102.57.149:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 1.0 MB (1048841 bytes)
Hash 80f4970acc83b51b21e545debf9ba77b
2285fda90c89b0d07bc8ca4b94bb898526d3e38e
e10c8b827c8dc0ce6486154fedd62dd80b1dc4fcf8b18430984ce467765295a5
GET /wp-content/uploads/2019/09/BANNER-PATA.jpg HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0; _gcl_au=1.1.343753656.1663210221; _ga=GA1.2.1403550729.1663210221; _gid=GA1.2.317981968.1663210221; _gat_UA-104113785-37=1; _fbp=fb.1.1663210221681.865976036
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:35 GMT
content-type: image/jpeg
last-modified: Wed, 04 Sep 2019 23:27:04 GMT
accept-ranges: bytes
content-length: 1048841
date: Thu, 15 Sep 2022 02:50:35 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 20620ba615dba1de34528390492c3f53
2ca43d3a828682e10eb7638972b79b7136395e2b
12cf30cf1de58b4bab8af4a5d159b42909c554ae7b34e6f7361d9a49f1e861b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 02:50:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18998
Expires: Thu, 15 Sep 2022 08:07:14 GMT
Date: Thu, 15 Sep 2022 02:50:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18998
Expires: Thu, 15 Sep 2022 08:07:14 GMT
Date: Thu, 15 Sep 2022 02:50:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18998
Expires: Thu, 15 Sep 2022 08:07:14 GMT
Date: Thu, 15 Sep 2022 02:50:36 GMT
Connection: keep-alive
static.xx.fbcdn.net/rsrc.php/v3/yy/l/0,cross/Hn2ofr8Wyub.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yy/l/0,cross/Hn2ofr8Wyub.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4093)
Hash 72b4d2c007df44c1e8ff843850d80bdc
80dfa41cd653a83484ce8e0b6a218f786bc737d3
b685f11f0274547d6ec9bd99a53da93f59601bb6d2c805befb9cdddc996c6c7b
GET /rsrc.php/v3/yy/l/0,cross/Hn2ofr8Wyub.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:45:51 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: crTSwAffRMHo/4Q4UNgL3A==
x-fb-debug: 0KToeXen4iKH7at0EvMZAdBCudp5ZyA1ivtK/9Y098kFvgc0lmedA4donGNhcgNXBKYS1QYEA50YE3esgk2agg==
priority: u=3,i
content-length: 5129
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 827 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (724)
Hash 29973cf3b0ef9f16fe31ed981b2f6573
f22eb80b89b5e0ae9ace854aab6676d56eaef6a1
476822c80e0a0ee078edb7a74db59378f8b1d43d2de844e28a9e9c2f68a4c8d8
GET /rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 08 Sep 2023 16:41:06 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KZc887Dvnxb+Me2YGy9lcw==
x-fb-debug: F/Ks6L/ODrGWpooL/ydi60V2ddMBtGP2Q6SkRGsN0DyBdQzqhFy78deSITTx40Qox5sSGo1JLYKucRRUBb7stQ==
priority: u=3,i
content-length: 827
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yH/r/Y88lOwaPq4F.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yH/r/Y88lOwaPq4F.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (18501)
Hash e712b0060a23b6c5ede3b67e0bb8639e
faf1f8ee5d679c27fb0fd418f63cf7d851344d26
0efe6b239b3fb45de4071c337078b2b43696cdccdf01024f527af941701239fd
GET /rsrc.php/v3/yH/r/Y88lOwaPq4F.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 06 Sep 2023 21:44:47 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 5xKwBgojtsXt47Z+C7hjng==
x-fb-debug: 43Vr6oEQ0M8c8YowjOVC7tAp6n1bN1BsMkcIKG7b/KgT2eOoSVVjbOxRijrM7dNBMWRzl0uHHCCQuV6LZwc9Uw==
content-length: 90711
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (1984)
Hash 16f083b23b565db9d2f20d1ad75933c1
6d74ad139c96b1e3fc9d541419788b5b4893ec9a
36b909cd9132a8996a1bbb221d05217c31506a6951bb408deeea6aa612dc4200
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 12 Sep 2023 21:51:17 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FvCDsjtWXbnS8g0a11kzwQ==
x-fb-debug: iBRuZTPxDWMf/lz/3vX3eBuqQdaQ3XZm/NeAYywJuNG7CCrYj4DSuPLoCweovZjJChdnFVSgbVhJEggjdF7hvw==
content-length: 1657
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yN/r/mXu1RunczE9.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yN/r/mXu1RunczE9.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5261)
Hash 6059f2908fc78af36d89f372311116ef
431905421a858f26f5624203b0ecae7b6d8c6c42
33ba2a807c3a7a85d489d24e1a843c4361a791492fdbe68e471d2064155467f0
GET /rsrc.php/v3/yN/r/mXu1RunczE9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 21:23:32 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: YFnykI/HivNtifNyMREW7w==
x-fb-debug: mZKePhMMdAYuiW6z+4CPZo2tEmKKS28lAmwT6Oy3QOfmq1DwRsipUqmnjRRknglOU1itNEmy9PwhTTZuq48a8w==
priority: u=3,i
content-length: 12179
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18998
Expires: Thu, 15 Sep 2022 08:07:14 GMT
Date: Thu, 15 Sep 2022 02:50:36 GMT
Connection: keep-alive
static.xx.fbcdn.net/rsrc.php/v3iLA-4/ys/l/es_LA/aNjKFj6YixL.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 8.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iLA-4/ys/l/es_LA/aNjKFj6YixL.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (2905)
Hash 8b19e36447a06b900196d55418712a46
7bb2611e33980c0e327609751489d65260caa29b
217ec85410cb61b22183a427ee322611eac701081aa5ba1eb4aa1c71f14ace8b
GET /rsrc.php/v3iLA-4/ys/l/es_LA/aNjKFj6YixL.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 02:10:34 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: ixnjZEega5ABltVUGHEqRg==
x-fb-debug: K8+MKNu20OVA5PlL26RZB4SODVdDc/HqUgEosi4e5GThCLxMgZPmv9DaRi2N7VrmLX7QSLdLO/kKNGA7d4Idog==
priority: u=3,i
content-length: 8364
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/uploads/2019/09/BANNER-P2.jpg
75.102.57.149200 OK 1.2 MB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2019/09/BANNER-P2.jpg
IP 75.102.57.149:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 1.2 MB (1240096 bytes)
Hash c7804551bf2130787e5069afd54b6c36
8572281d733250123a6db27c0f257405d901607d
1744999069a6acdf3b9f79a2e14fd05062141e329cd799bc38331f1e22aeb51b
GET /wp-content/uploads/2019/09/BANNER-P2.jpg HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0; _gcl_au=1.1.343753656.1663210221; _ga=GA1.2.1403550729.1663210221; _gid=GA1.2.317981968.1663210221; _gat_UA-104113785-37=1; _fbp=fb.1.1663210221681.865976036
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:35 GMT
content-type: image/jpeg
last-modified: Tue, 03 Sep 2019 23:46:32 GMT
accept-ranges: bytes
content-length: 1240096
date: Thu, 15 Sep 2022 02:50:35 GMT
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5754e945-dac1-48d0-8300-12286ffe02b4.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5754e945-dac1-48d0-8300-12286ffe02b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d62d6861a80946a4cf3ba7e2a1cb0638
c096bfad52996315c174183644db3cc2c77d5f2c
693968cf7b76de9afb3440fe18800c02832daf3dd8a5de547e6dd9b6e4096b53
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5754e945-dac1-48d0-8300-12286ffe02b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10188
x-amzn-requestid: 48b5c3c4-d155-4e66-949e-ed631bf43890
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeB3VFE7IAMFcnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632249c8-2c5c452071eddd8e23dd6393;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 21:38:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: lV7xI9zbmNkxxItOZkSiVHwQRl4FnvJYqtNfuXJKFfrDiRuUC28oNQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:48:12 GMT
age: 18144
etag: "c096bfad52996315c174183644db3cc2c77d5f2c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.tripadvisor.com.pe/img/cdsi/img2/branding/v2/Tripadvisor_lockup_horizontal_secondary_registered-11900-2.svg
151.101.86.40200 OK 6.4 kB URL HTTP/2 www.tripadvisor.com.pe/img/cdsi/img2/branding/v2/Tripadvisor_lockup_horizontal_secondary_registered-11900-2.svg
IP 151.101.86.40:0
Hash b0b4730e3590cfe5984a0ce2c3756eae
0ab72b61a46b21fb7438cb06d3c4304cf4e55431
b9a03ca25e1b0ab0e87d0f0072c22254d9072e09fe08782ce793f4409e12a6f7
GET /img/cdsi/img2/branding/v2/Tripadvisor_lockup_horizontal_secondary_registered-11900-2.svg HTTP/1.1
Host: www.tripadvisor.com.pe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
cache-control: private, max-age=43200
expires: Thu, 15 Sep 2022 14:50:36 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
set-cookie: TADCID=NLmdUCTwDVvngpe8ABQCFdpBzzOuRA-9xvCxaMyI13Azt7D1uagZiLctYDu-xSF-nei9fwzr1cOWCgRGu2IL3pq2o8qy0-FYNIQ; Domain=www.tripadvisor.com.pe; Expires=Sun, 12-Sep-2032 02:50:36 GMT; Path=/; Secure; HttpOnly
TAUnique=%1%enc%3AJM5Epk9runXk7nWhzVPS6vln53cgl0ayOBkmPAkXLEc2jHwltRJPGQ%3D%3D; Domain=.tripadvisor.com.pe; Expires=Sat, 14-Sep-2024 02:50:36 GMT; Path=/; HttpOnly
__vt=i5TknQ5yeLrEWyb4ABQCIf6-ytF7QiW7ovfhqc-AvSARVwa1VTo621UL1GNkZ_vO8XKlnsv0tJTw3JHfoGyi6L4M8FDaPAOu44PeV3xYW_DWZ0qBb3f1JVSTAuFhg-7j3Cht5eJ8q41vAdoH0JOuP0VVkA; Domain=www.tripadvisor.com.pe; Expires=Thu, 15-Sep-2022 03:50:36 GMT; Path=/; Secure; HttpOnly
TASession=V2ID.5F03FCE29FF3DDB9163364A54488F199*SQ.1*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*TRA.true; Domain=.tripadvisor.com.pe; Path=/
ServerPool=X; Domain=.tripadvisor.com.pe; Path=/
TACds=A.1.11900.2.2022-09-14; Domain=.tripadvisor.com.pe; Expires=Mon, 14-Nov-2022 02:50:36 GMT; Path=/
timing-allow-origin: https://www.tripadvisor.com
content-type: image/svg+xml
content-encoding: gzip
accept-ranges: bytes
date: Thu, 15 Sep 2022 02:50:36 GMT
via: 1.1 varnish
x-served-by: cache-bma1663-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1663210236.399840,VS0,VE121
vary: Accept-Encoding
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y9/r/JGf8H9KH1mW.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 9.0 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y9/r/JGf8H9KH1mW.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (9886)
Hash 12ee8cecac4344f91112c41bde25523c
ac8ea8f8b40bbaf2cf932ffdf67abb8b14d7ce0d
0558ee7b9742c0bdede937d19d585eec41b4011b9989f47264464eecb46caaa2
GET /rsrc.php/v3/y9/r/JGf8H9KH1mW.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 06 Sep 2023 18:00:12 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: Eu6M7KxDRPkREsQb3iVSPA==
x-fb-debug: MqAc4Jp2+8aL7LZlKJAbraCvKcEURp0q0RsSoBmKe7jjHyjMKuyfxH5p3qVBk2tTZvsov5TzFb7/BV4lJ40llw==
priority: u=3,i
content-length: 9040
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5a6939786c9343412c9af87efd3f44e0
14131148fda4e8d85b582fd20e76bcc814341bf1
8412c50f0fdc131d9c4422f2d7307fc1ee062c3580a1d754ef71cf84f9727d49
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8447
x-amzn-requestid: 3237c2fa-bc17-4b8d-8afd-bacfaa90ca71
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FypF7KIAMFd7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63145010-7052273b184685c83569c712;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:13:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wzi_WnjJW5XjIfj8kyVL4LcQEjcuw1_zwrDiJegEZ2r8GOZcQahPEw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:46:45 GMT
age: 18231
etag: "14131148fda4e8d85b582fd20e76bcc814341bf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 338 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (327)
Hash 76f593e842677f73cd0a06232874b2c3
25a13f79478d5a0e286a2299dca2f3b296463079
74dcbe026002f10b703960a500b50dabe518862e568a9e689dec7afa243fa44d
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 05 Sep 2023 14:02:48 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dvWT6EJnf3PNCgYjKHSyww==
x-fb-debug: 5mxlJKEHRVzOPZRd5dc5NdCwXfRS09Pae23JDC5s9/9yssNrwALql8EjtqKvYEotu6WgKtF/UubK6hmu+7OaYg==
priority: u=3,i
content-length: 338
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e5f57ba37fac4e6047a9a321a8ec084
f6b742549ea35a4b1345cffb937a8bbcceee08ef
f8c67c54806e47089b9ba297599e3e4cde1fd2e2e38b76acc9e8de0e99d7b77e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6770
x-amzn-requestid: b7c9513c-b8ba-41c7-9f9a-0a9d2266172d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FlpEVRIAMFygA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144fbd-7a4408363cdc46c9355a9f47;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fqj5PljprRruE1jwYAVwKoHkjys-RakUjzuV67_Ued6T4et99JPxPg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:45:05 GMT
age: 18331
etag: "f6b742549ea35a4b1345cffb937a8bbcceee08ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iWO94/yF/l/es_LA/oRoYJ5VcosS.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 23 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iWO94/yF/l/es_LA/oRoYJ5VcosS.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (42054)
Hash 8afb83618592c39162f05a908b7fac22
89ea40626c81508c741c4fe59d0346ca66a3185c
28dc50907864cfad11beaccfd95d97f300898b47a2f5037173686d0dd5095f1c
GET /rsrc.php/v3iWO94/yF/l/es_LA/oRoYJ5VcosS.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:46:58 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: ivuDYYWSw5Fi8FqQi3+sIg==
x-fb-debug: VDCIjekM/pk4mAJOb1JWteF7aVBQg1FpNEjMfTRRFotlGYVjlF0mKLCOGSnGEfIawS+yUmX8vEisNSVP6mKX2A==
content-length: 23374
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5392f754-e2f9-4a41-bd41-e281b109c83d.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5392f754-e2f9-4a41-bd41-e281b109c83d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6fcd0641757ecb9061e0272fc9377b8a
96afd6daa0d13f8a05ceb77880f967d539f37702
8af5e3c3e524a5e3661e50a36403a5cc6c95521e77984ce954ceefd5a542abfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5392f754-e2f9-4a41-bd41-e281b109c83d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5097
x-amzn-requestid: 7d0072f1-0832-4b01-9f5a-081c7d193420
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YaGbEGDiIAMFqGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320b779-2ee57a3e5641f70c00116156;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 17:01:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5TMIu7RzFcpyWKH_HSAd4LDal3PFMAa37n0SVEVDFGyz5RJeqJq5Rw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:46:45 GMT
age: 18231
etag: "96afd6daa0d13f8a05ceb77880f967d539f37702"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yV/r/oDVETVg4GJv.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yV/r/oDVETVg4GJv.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4061)
Hash d1ba68f146b01f4aef60d79aadb926ea
c6b4703c25d07fd2363e5d67d11e4846d9979b26
abbff04acf96f39a3121ed97505b5a23cbeee9057dd7040c58c4e423c899805d
GET /rsrc.php/v3/yV/r/oDVETVg4GJv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 02 Sep 2023 10:34:01 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 0bpo8UawH0rvYNearbkm6g==
x-fb-debug: 86y3i3sy9jjDaSwZdKwWDNfT0jhSZgIC/wO/r6UsDn/zT5AA7hVmL+J1eWzgzylntf4RiG+L/nvUQSjPsoquGQ==
priority: u=3,i
content-length: 7236
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaa65c72-7c91-4c77-a8d5-ff1616735614.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaa65c72-7c91-4c77-a8d5-ff1616735614.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d3507225fbae159e0d4225dc60769af
2220cf9725452aa89070063038064596b03bb808
b19d7250778b93eed58347332f0fa8c2e4c8ca7a2b30e9d605d39d51e981255e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaa65c72-7c91-4c77-a8d5-ff1616735614.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4527
x-amzn-requestid: a3fb26b2-9090-483d-9f41-ca3032b51262
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIQp3G_6oAMF5Jg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631994a5-300b56f13864ff1b16b85eb8;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:07:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: d33zVonEQST3V4997c3mKpqhIVtXgAMVzxbFArOQvC12sCGFrTAl8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:16:29 GMT
age: 16447
etag: "2220cf9725452aa89070063038064596b03bb808"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/uploads/2017/11/lago-titicaca.jpg
75.102.57.149200 OK 279 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2017/11/lago-titicaca.jpg
IP 75.102.57.149:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 279 kB (279124 bytes)
Hash 63f2c026cbd47e9f430eeff06fdf0d97
1d61080a5e0146b572a2233f258e8bfa45a5ed0b
d1692282cd4a1981a9bce12c69433589a7617a1fb88002b93efb93a42e2a1c46
GET /wp-content/uploads/2017/11/lago-titicaca.jpg HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0; _gcl_au=1.1.343753656.1663210221; _ga=GA1.2.1403550729.1663210221; _gid=GA1.2.317981968.1663210221; _gat_UA-104113785-37=1; _fbp=fb.1.1663210221681.865976036
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:35 GMT
content-type: image/jpeg
last-modified: Tue, 14 Nov 2017 00:18:36 GMT
accept-ranges: bytes
content-length: 279124
date: Thu, 15 Sep 2022 02:50:35 GMT
static.xx.fbcdn.net/rsrc.php/v3/yH/r/xgVgalBG80z.png
31.13.72.12200 OK 1.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yH/r/xgVgalBG80z.png
IP 31.13.72.12:0
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash ac1e1c4d6f16359701b059ed4e8246b4
ff19b30a3b3d8d1765c239b25dbc98cb3263786a
45444d590a67d30e8b2fde01bb6482f829383b64bf14a4b19b86e22fdc319fbb
GET /rsrc.php/v3/yH/r/xgVgalBG80z.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yy/l/0,cross/Hn2ofr8Wyub.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: rB4cTW8WNZcBsFntToJGtA==
expires: Sun, 10 Sep 2023 21:19:40 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: F9eFeIGBCit24CyeXfDQ3DEn75Xd+08jJCP6LHApHxLdKbq4JZYtt7TYCd9oerZ6gjGaiEo74NYU/v93KZGj2Q==
priority: u=3,i
content-length: 1315
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:36 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/uploads/2017/11/inka-jungle-web.jpg
75.102.57.149200 OK 258 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2017/11/inka-jungle-web.jpg
IP 75.102.57.149:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 258 kB (257789 bytes)
Hash 2b56b3a6679a561fbd26a93e18f20b47
7a6ca01aa7786d28a2bad0e5897d15a3e22a49fc
7a980749c98592a82be729fc4e8f3e8f7b672cb37df368262d9c82b051bbc19d
GET /wp-content/uploads/2017/11/inka-jungle-web.jpg HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0; _gcl_au=1.1.343753656.1663210221; _ga=GA1.2.1403550729.1663210221; _gid=GA1.2.317981968.1663210221; _gat_UA-104113785-37=1; _fbp=fb.1.1663210221681.865976036
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:35 GMT
content-type: image/jpeg
last-modified: Sat, 18 Nov 2017 19:12:56 GMT
accept-ranges: bytes
content-length: 257789
date: Thu, 15 Sep 2022 02:50:35 GMT
www.cuscoinkasfeat.com/wp-content/uploads/2022/07/imagen3.png
75.102.57.149200 OK 3.3 MB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2022/07/imagen3.png
IP 75.102.57.149:0
File type PNG image data, 1920 x 699, 8-bit/color RGBA, non-interlaced\012- data
Size 3.3 MB (3283218 bytes)
Hash 08d38600a587d4055afb6120091624eb
4a5a70d3432915eacf92e7ea30ebbb97069ed22e
ecae9d9828ae54c6261c3354197ca4bcc2be8c8427c8ee50754f2f19b0fc9c7b
GET /wp-content/uploads/2022/07/imagen3.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0; _gcl_au=1.1.343753656.1663210221; _ga=GA1.2.1403550729.1663210221; _gid=GA1.2.317981968.1663210221; _gat_UA-104113785-37=1; _fbp=fb.1.1663210221681.865976036
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:36 GMT
content-type: image/png
last-modified: Tue, 12 Jul 2022 05:12:30 GMT
accept-ranges: bytes
content-length: 3283218
date: Thu, 15 Sep 2022 02:50:36 GMT
www.cuscoinkasfeat.com/wp-content/uploads/2019/09/BANNER-5.jpg
75.102.57.149200 OK 973 kB URL HTTP/1.1 www.cuscoinkasfeat.com/wp-content/uploads/2019/09/BANNER-5.jpg
IP 75.102.57.149:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3\012- data
Size 973 kB (972623 bytes)
Hash 07fca4131c5034f82a551b711db98e84
128003efeaffed84df168307997ef4994fb2d9fb
fcff4508c04b71a418824d3e35d71b421d45a4aac1f5ce17886aaf84272d6175
GET /wp-content/uploads/2019/09/BANNER-5.jpg HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/sh/ZS/589c3f8223e79caf05feaf3eb517bdbd/enterpassword.php
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-09-15T02:50:20.753Z"}]; activechatyWidgets=0; _gcl_au=1.1.343753656.1663210221; _ga=GA1.2.1403550729.1663210221; _gid=GA1.2.317981968.1663210221; _gat_UA-104113785-37=1; _fbp=fb.1.1663210221681.865976036
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:36 GMT
content-type: image/jpeg
last-modified: Tue, 03 Sep 2019 23:55:26 GMT
accept-ranges: bytes
content-length: 972623
date: Thu, 15 Sep 2022 02:50:36 GMT
static.xx.fbcdn.net/rsrc.php/v3/yL/l/0,cross/hrRp0avPc6e.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 4.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yL/l/0,cross/hrRp0avPc6e.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type assembler source, ASCII text, with very long lines (2642)
Hash d16827354454e330066e656102e88194
da9f552969159c3c0f7aeec4ffc039c74fa44328
808ed7679f388bf0c3d1b94b89404f68e0377cd3fc19ad3387be526ebde29d5a
GET /rsrc.php/v3/yL/l/0,cross/hrRp0avPc6e.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 16:47:47 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 0WgnNURU4zAGbmVhAuiBlA==
x-fb-debug: M2iHV2M/5MTHbMivXJ/BybqTmphMeY4z3L+FRWYDVIGjh9Hwy0xCdzyTPUnEqBdm1a9kDabJspMFiy/lBkOmTw==
content-length: 4690
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/BG1HP4rcPmD.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 61 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/BG1HP4rcPmD.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 811715610965955580500b2212ca5a3d
254db7884ae3fcd9ef5ce000ab70f1eaa4e6308d
916dfacf83101f42dc9d35f4d39688be67bde3cd80e160352ff7914e3ff7b15b
GET /rsrc.php/v3/y6/r/BG1HP4rcPmD.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 02 Sep 2023 15:01:32 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: OSSjYd80jgGTSnHltCF1sg==
x-fb-debug: 37V43sRDPMWn2yD9RZi827TaGZugB6BKNrtuFRjYgn/ls4k1O3fzk+BkNAT8vjCUYXH88cpxv7tfk1Mv0Y2iTQ==
content-length: 5229
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yK/l/0,cross/HKHlfAAktap.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 684 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yK/l/0,cross/HKHlfAAktap.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (452)
Hash cadbd134911c794a13e6de6884a2914a
ee0c45cf0f016a8d95ee287b7ffc36a67d1d8ac1
b8be2c36736dc5a90d4d030e35603401dea0c4a59e095613e54b102b46d4fb60
GET /rsrc.php/v3/yK/l/0,cross/HKHlfAAktap.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 16:48:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: ytvRNJEceUoT5t5ohKKRSg==
x-fb-debug: Es0SjBg2zf73Ojuqu+CIASMDMBDHtkR8Lg3oLb2qYYZ+kXpQ85HidwaWIZyhvOEmQXs3/KpI3OTptwbFc3pO5Q==
priority: u=3,i
content-length: 684
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/cwBc1FhMd71.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 4.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/cwBc1FhMd71.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (10262)
Hash 42a4a3e1cf28058bc22eb837b4f7d394
94a1e3b3ef7b5b78bc4212044f67677eb3b91c48
4b8a4e5210ff0605bf57f43ea41b0ca2af6ca9aac060626a5457150810db8f2a
GET /rsrc.php/v3/yb/l/0,cross/cwBc1FhMd71.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 02:05:40 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: QqSj4c8oBYvCLrg3tPfTlA==
x-fb-debug: vQKj1tCGDKJN0jHjTVndy4I12pv2bLeiZrB40fS2LPB9f3pwDh6ieE1eJ2PgHU2deNc13aKmvOeAiID1sY/FTw==
content-length: 4392
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yJ/l/0,cross/yqagpLrUw2K.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 2.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yJ/l/0,cross/yqagpLrUw2K.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (2490)
Hash bf6b51e9c64831e1c4dd5baa2736ffc0
f9e98435fb19420c9fbc511ed14b23389f47b24a
25e4401419fb68014bdf996d1dc2f413c456c5b4dd3555c7b194a0befb048118
GET /rsrc.php/v3/yJ/l/0,cross/yqagpLrUw2K.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 18:10:27 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: v2tR6cZIMeHE3VuqJzb/wA==
x-fb-debug: j/WBbCLPMFmBgR58Aj3hSOclcpVKSKSPKxgE0hyCnjihc3utHN8AmNzpeD3x8hD+ZzDF4+5Bn7x3N1DrwFV4Yg==
priority: u=3,i
content-length: 2259
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yg/l/0,cross/0OGNjDXome_.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 8.8 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yg/l/0,cross/0OGNjDXome_.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (14180)
Hash daa7fbf16a0496796e81f1a2f2c99fb9
35aa7925b82d6a1c82ee476e3a6c6934c3e24247
4be62c6ac3aab9d563bf3d80b7f6373b3911c42d4110bc426877b3842ec60bb9
GET /rsrc.php/v3/yg/l/0,cross/0OGNjDXome_.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 18:46:19 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 2qf78WoElnlugfGi8smfuQ==
x-fb-debug: wVu9Tsse8w8+s4vI1xJUNf2sHU8XH1aWxI5vWP64oHPNC7aAq6KHpbdBTZqPfyTGnqPiYZ1r8sIBTO6YOq9VGA==
content-length: 8770
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y_/r/Jz7TLQ52Rf3.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 7.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y_/r/Jz7TLQ52Rf3.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (9262)
Hash 6c7799256879e23a0ffe340583e89e8f
56cd72c8a442dda6d066594addf86b7d3adef762
91de10cad8242b575b71f9d01293275921798cf3550782b251ce73c7d15bc7b1
GET /rsrc.php/v3/y_/r/Jz7TLQ52Rf3.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 18:28:54 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: bHeZJWh54joP/jQFg+iejw==
x-fb-debug: UNkvJ/WKhIPjzQubx7j9P+NjtU9/RkZlC/HN3y4bwDOSTwvh1MP+y5zibhabJAdl8TZdSz07ekIrnYF7YlGnKw==
content-length: 7705
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yU/l/0,cross/pb0uaoDmugs.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 4.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yU/l/0,cross/pb0uaoDmugs.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4583)
Hash 532139c811f5f71f1fbc02097dfaff1a
7854f00f2cc8dc5da6e551ee0383afca91d012b3
46415f783cabb826561bd1ff2745666c9a0669a3e9f229dd3c4228de06a9b97d
GET /rsrc.php/v3/yU/l/0,cross/pb0uaoDmugs.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 16:47:47 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: UyE5yBH19x8fvAIJffr/Gg==
x-fb-debug: FMQQU4vkEe7SuLm6bVDejgLbrCUx+YKTK2YQCol/QtkQh5a0cAqLdEbUL+apsqulu+zxUe2uLmIt1w3TugzkkA==
content-length: 4658
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y9/r/Y4zsaALXxZb.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 48 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y9/r/Y4zsaALXxZb.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (5068)
Hash e9d0bdd1945699afa3faddb5eddedceb
6fa9c88b67bcc19ce67ae23736d1ee2dfaee5d84
1d70e1135d866ef5644b80ad7e7ef5155d27098bcd24889346ef31d1bb0b2353
GET /rsrc.php/v3/y9/r/Y4zsaALXxZb.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 20:36:25 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 6dC90ZRWma+j+t217d7c6w==
x-fb-debug: sKA3FH5uZKVfLmKXsLlWtETCmdtohSwkd01uL2ytQUmtzT1222VaWjrSbeZ0HQHmaLh994GU2o5hmRgcokBGEQ==
content-length: 47885
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/l/0,cross/af7RGl7UScC.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 6.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/l/0,cross/af7RGl7UScC.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (8976)
Hash 15106e76fd6a34c25ad1748d23627685
80cf381b8549495689f2fc5735e24f7b5dd3d41e
f91d4e9d86a2d290a9bc500e2bf3723b524a497b7c3eec83f03a60e4dff8367e
GET /rsrc.php/v3/yF/l/0,cross/af7RGl7UScC.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 18:31:18 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FRBudv1qNMJa0XSNI2J2hQ==
x-fb-debug: YB8wBWdHW3XrNcc4hVZVb9r/5XQrDSWg1aJS2f47phn9UElCwNusXnHN91EKseKGUDRjq+6EbrswQdm6IKDKCg==
priority: u=3,i
content-length: 6428
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yi/r/-WCD4L74Xdr.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yi/r/-WCD4L74Xdr.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (15785)
Hash 881628e8b0db5fccb83939551d7676a7
a9b13872c226ef0f44eab1b01b745ce51caa7b34
7f519398066c90a770163798bf118a948187f2e7f968a18895328a0bccfa2c73
GET /rsrc.php/v3/yi/r/-WCD4L74Xdr.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 18:28:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: iBYo6LDbX8y4OTlVHXZ2pw==
x-fb-debug: jd3gHkFMjJT6jv/gvYefELdEImS9ySFoH43RtvcZyrH9z7Rh6kbMKRDoitHFM0k7MOpCUGVbeokj3soICjA9xQ==
content-length: 16311
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3imfL4/yg/l/es_LA/iEMHfAOQ2w3.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 8.5 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3imfL4/yg/l/es_LA/iEMHfAOQ2w3.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5962)
Hash 86c9dd37fc9c75b55c990e367991b185
56591caaae4e78bc190325c0cb692c93999d65ef
711ad9e6d9dc30480d8ed58d90020e0c4b4c1343b9e217038b7544608a1e2310
GET /rsrc.php/v3imfL4/yg/l/es_LA/iEMHfAOQ2w3.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 20:00:17 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: hsndN/ycdbVcmQ42eZGxhQ==
x-fb-debug: mYVlL1L0KQ7G6srAO1tHEoXtQI5yZUJmVHFtfGUlOFGbd+bK/Ecp4hwqNLTZn8rD31An8q6y7FHdHRU4cdpBjA==
content-length: 8450
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yz/r/k2W5R_CjK9I.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yz/r/k2W5R_CjK9I.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (4651)
Hash f00a59f3df4bb293c1060ca5745fbcce
194c67334b17982fda21c8a781881202bf727ede
3abd591cc06ac6fd136b116247de12eb92e6ffe757d48b56ac7c841f9942a253
GET /rsrc.php/v3/yz/r/k2W5R_CjK9I.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 18:27:46 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 8ApZ899LspPBBgyldF+8zg==
x-fb-debug: 6hsKk1VCnM/0s0v4r4/5WVsYKVQVU3/wmEPiviV4M19NIo47+wsuRGKr4WEcJG/DNqOw+N+6CCDfdW+MSd3Mag==
content-length: 5176
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yW/r/fv01GgFyHvv.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yW/r/fv01GgFyHvv.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (1336)
Hash 90e090bf994bd10c85c30eaa2402717f
2ebc3faa6e16268d1b7ac955aa714726daffdee6
69fcc662bcd86aae71f2ff6d483f112bdb264581e39c7bf101c48dc86c7cd522
GET /rsrc.php/v3/yW/r/fv01GgFyHvv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 10 Sep 2023 21:19:13 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: kOCQv5lL0QyFww6qJAJxfw==
x-fb-debug: KT6OsV+Kk2+q4idaMTwl8lqW74PHMgPJ6OR5uzCH5TL7tX2E2BYnyPT+j/tS+ni04UcuTJ2IqDfCfattNO3nEw==
priority: u=3,i
content-length: 1208
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yn/r/1-TcVj_NjFJ.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.9 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yn/r/1-TcVj_NjFJ.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4488)
Hash 875f9baf2ffab5f04921888523e47712
1d69bc1803b0e9149c5cb03f4991c22b8aa1e0ea
c249afdba8116ccd96100afc04aba37284787d54dc5e2e7c4ad0ca2cc7497697
GET /rsrc.php/v3/yn/r/1-TcVj_NjFJ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 16:42:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: h1+bry/6tfBJIYiFI+R3Eg==
x-fb-debug: EHPBzduEBGC9zIhv6MuOGFDcovW836W3qW1HJauDDhu8k74rfAgV/z+IRuVn9x3x+O6z8DeC+fOPVugFtg+O3A==
priority: u=3,i
content-length: 5942
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yr/r/d_59dXhTMjC.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yr/r/d_59dXhTMjC.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (12693)
Hash d294f8f12835c98823caddb2ced68ee1
89e31ca3fcab981489e33c02e1a792b64ea9598a
88a8aa96f1ec4dbd73f4817e95d702568d3bd18b829938bc750ad780e605b5c3
GET /rsrc.php/v3/yr/r/d_59dXhTMjC.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 18:28:54 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 0pT48Sg1yYgjyt2yztaO4Q==
x-fb-debug: zixsf0AEyG52JjqvX2KGKXo3GT3Qq0kMiP0iPwzmyPe5Yrmw5on+ylgRLjFffVPcec1ie5uRGASJA9iwjkuSEg==
content-length: 15919
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y0/r/9VJLu0MdQ5z.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y0/r/9VJLu0MdQ5z.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (8940)
Hash 9573707727eb104c66acab74a2ac7ce5
87d65d6c7ff42c885fa9beccf44b3256d8fa360f
5829f4bfa575707825f6c76a2e16dd5a212eb4b917693312161d32760dd1cf25
GET /rsrc.php/v3/y0/r/9VJLu0MdQ5z.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 18:26:44 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: lXNwdyfrEExmrKt0oqx85Q==
x-fb-debug: czP6Mx6VaUJkR+n8xgfWYh1vl7EOU06kVZGKAdCoF8mcctNTExhNk7w0Py6V1zf2JU6g0HVqQurCnrzrtJyyJA==
priority: u=3,i
content-length: 15612
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yX/r/xUHegR21Qgm.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 19 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yX/r/xUHegR21Qgm.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (8610)
Hash 3bd806b2fb28098cbcdaece642b7a037
121c64a76a440bac603ac6d4c7d4202bb098d033
7638a66e886f91cf83ebd7260a1205cc42759f8908fc1a5e0b91b4a38da35c5b
GET /rsrc.php/v3/yX/r/xUHegR21Qgm.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 18:58:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: O9gGsvsoCYy82uzmQregNw==
x-fb-debug: eY6slxrfQJ+kzC3Ux1oG3W8wVBjS9PogASnVrVVjv/Xfo6eEwwYvO/sWBTrIvX9k/ONsStH8PvhbyNAxPCa0CA==
priority: u=3,i
content-length: 18558
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3i1MJ4/yk/l/es_LA/MhvbrChYtYh.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.5 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3i1MJ4/yk/l/es_LA/MhvbrChYtYh.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4073)
Hash 056177d479efeb5bb36df61529bb855d
2a2a84aae87ef004b92414bf79d2acc407f43f01
5c05dbc5570f1ce21b48bbfc28f20ce824b9501c606fc6751ea057defac5d304
GET /rsrc.php/v3i1MJ4/yk/l/es_LA/MhvbrChYtYh.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 17:03:42 GMT
cache-control: public,max-age=31536000,immutable
timing-allow-origin: *
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-fb-rlafr: 0
content-md5: BWF31Hnv61uzbfYVKbuFXQ==
x-fb-debug: 8TDoi98JWVSLEIMzdKaFohF2OLoChUL045eGMMoFWokeTAMd7Kq4gAi09o/men+XkanIRQFoemRJDRzvGyU9fg==
priority: u=3,i
content-length: 5452
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iNV64/y_/l/es_LA/JVkTKpL_wGL.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 42 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iNV64/y_/l/es_LA/JVkTKpL_wGL.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (10798)
Hash dafe9f6fadf5b173f91b4fef3e982459
7719d39ce53edf9a0c6e68496960b5402f92b688
fcde98b4c0263bc013fe097a6ee9bebd0d95333f0c0d5d36d28b83fed57f8fc5
GET /rsrc.php/v3iNV64/y_/l/es_LA/JVkTKpL_wGL.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 20:00:17 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 2v6fb631sXP5G0/vPpgkWQ==
x-fb-debug: Xngzt7bjwFnyrhQWgcDZYCoquQGSnp8JGw8xlJKpziachxUUdEz44Ftk2+zkYiRKd3jNbcm3NWZvjTNVlUizyA==
content-length: 42324
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3imbZ4/yA/l/es_LA/TH9iNZyDEMR.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 80 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3imbZ4/yA/l/es_LA/TH9iNZyDEMR.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5723)
Hash 7031ad44f13dc1de6c3e232e9b7e6e68
456e8172e4dc212aa8d8ffa90a585f5853aad22a
bd42df054cb370230c032a4b8c7e6760521cfa6af7d5ee1b36f80a4da338b091
GET /rsrc.php/v3imbZ4/yA/l/es_LA/TH9iNZyDEMR.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 21:40:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: cDGtRPE9wd5sPiMum35uaA==
x-fb-debug: hElFQVp7E/nlYNou3Evst+SsFb1iFv43uLDoV7gFGVUEMZePK1p9hzORpktUKvS4Gq/4wtpdjpUItQYlkBuC4g==
priority: u=3,i
content-length: 80186
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yp/r/LX36CWpneoh.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yp/r/LX36CWpneoh.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4438)
Hash 1ff2cc6c7010b7ecec73a83b53bd50b3
53cbbea3987235cfac28af23fc39335d940afe73
5c33e3a36914f7d06bca666d5762237775701bd37a9a5c1c4cf6372b239264c2
GET /rsrc.php/v3/yp/r/LX36CWpneoh.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 18:35:30 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: H/LMbHAQt+zsc6g7U71Qsw==
x-fb-debug: RlKSi1Tmjob3XtPVOLiUwujDaO756Oe0gq3oTRPncVehGbj9wOya759lGT3rxR57z8ToxVrehD6TCHCghPAp+w==
priority: u=3,i
content-length: 11660
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yc/r/eLSlH3RNnyF.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 81 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yc/r/eLSlH3RNnyF.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (10821)
Hash 20772e784536ac791ac69e55a90e1e51
018e66a90b0ff5649891183e8ccba823addd622c
d9a49b0540e182c423957ed3a958a071573bd126885ac93af1560ca28e70adfa
GET /rsrc.php/v3/yc/r/eLSlH3RNnyF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 08 Sep 2023 23:07:05 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: IHcueEU2rHkaxp5VqQ4eUQ==
x-fb-debug: fLN9o7KekvVMi4cCGLV3fxkO4NQ6o3rxU/7KpJTX7+JlJkcCHZ9RUHHV0ItSODbW4zKeQJWwUBoSgDUjdqPqJw==
content-length: 80673
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ye/r/VRzSVH5iU-V.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 2.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ye/r/VRzSVH5iU-V.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (7602)
Hash bb969a3e89152328ac0e126afe513998
37d3118b58be6d25d6efa7f5d4ab429f4f5815b8
35917558247e50335e0193a29bf91d02f73dd15960fe087ce270fdb36cde88dd
GET /rsrc.php/v3/ye/r/VRzSVH5iU-V.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 01 Sep 2023 12:05:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: u5aaPokVIyisDhJq/lE5mA==
x-fb-debug: f5UjApPa5MP+m7qvjPDChhTC5E8KX18EyydGkrEDC0vY0orlRjaXOs8hpsA1R6T4lYYndwe4hEQV9CihwcXvJA==
content-length: 2083
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yf/r/FLvtonlSna1.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 15 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yf/r/FLvtonlSna1.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (56534)
Hash e266a3ccc2395fbcb9ddc3e5cf3fe8a4
eb22fd1e27291f601742a4da697539e046b72de5
ea280deb9b1274ac87adf23d5b5f523079d776271b910ee945d0127a2dea806d
GET /rsrc.php/v3/yf/r/FLvtonlSna1.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 12:35:59 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 4majzMI5X7y53cPlzz/opA==
x-fb-debug: +HIRpAtnA4d4vUjQgXzWfGRl9dW3fpWamIxoGFSIikGnmh4+N0283lOSxjQ4ZtwyRocHaWThTIigDO4jOU8LDg==
priority: u=3,i
content-length: 15209
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yK/r/Sn-_BbYnlN4.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 13 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yK/r/Sn-_BbYnlN4.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (7676)
Hash cc8ed36058335e83ca562e3a1b05da82
ea35fcc5d5df0351d3c19c064df8156c8b64c536
a3fc8cf0b8d4e0116d0a51e706735875996c0fb20f155e01c1ccdebab5a953bb
GET /rsrc.php/v3/yK/r/Sn-_BbYnlN4.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 08 Sep 2023 03:33:39 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: zI7TYFgzXoPKVi46GwXagg==
x-fb-debug: kMPgn9FR5xSU3qKEFidB6ildZog0+GFTDHifayjlwcjXipyW/9AtFk8OqvQi9YWY1CkoTElbC76lkriZNlsYrw==
priority: u=3,i
content-length: 12883
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yH/r/IH3p_-Fitg9.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 41 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yH/r/IH3p_-Fitg9.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5099)
Hash 0a2df418661ecb232f6f9683c246d69a
ea67c6fa3b4bd96e966fc502a21301bb88508b33
8cf23a88dbbab1d771a6e97da38de19d5d961a43dd537d056d17f2e535057b95
GET /rsrc.php/v3/yH/r/IH3p_-Fitg9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 09 Sep 2023 17:03:44 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: Ci30GGYeyyMvb5aDwkbWmg==
x-fb-debug: 4nEFpHrMKshB3L9wBKF7XzR8KzYVrYgCcyLr7lKNXOzT4VUN3BZFVMOkoXkx48rP/iGVHtcihkUDuIVdXh/5ZA==
priority: u=3,i
content-length: 41107
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/r/-QN-nzq60hS.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 46 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/-QN-nzq60hS.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (1239)
Hash 647969c60c161b968196d05ff89a3ed7
10f9c8af1d12e82f5ed2f5fa23f5bf1d353b0b16
83231bc020d201666f70aae00b6c2dace46ebe5ba51c058ccb2df1834f32c902
GET /rsrc.php/v3/yR/r/-QN-nzq60hS.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 23:06:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: ZHlpxgwWG5aBltBf+Jo+1w==
x-fb-debug: 5gRbZ3YnSZu9BK3NeLva/nmyJ2kod3tT0ZKnRQ8B2JDUnMh8nOkxMoIstC7if+lamJbuTwwAHKXr+fq5quhG/A==
priority: u=3,i
content-length: 46273
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y4/r/-PAXP-deijE.gif
31.13.72.12200 OK 43 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y4/r/-PAXP-deijE.gif
IP 31.13.72.12:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 611c916c9a3847b08d104d57f24ec97e
4f8158af13b19123f1492b96287149fc08ccbd21
5a52dbaf980be015c37ea658dc83e753f345ecb7c48a7dafd71bf1ed67e8b4bd
GET /rsrc.php/v3/y4/r/-PAXP-deijE.gif HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: YRyRbJo4R7CNEE1X8k7Jfg==
expires: Fri, 08 Sep 2023 16:40:45 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: aQFKUJCLNDo5bR7vw0T96inb1diovEwMycGRZJG06eQRSsZbqaQG/uiEp54Fj0imUHd2xpwMLkYLLCpJjiCSwQ==
priority: u=3,i
content-length: 43
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iAQn4/yM/l/es_LA/dk2rC4nR1Wv.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iAQn4/yM/l/es_LA/dk2rC4nR1Wv.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
Hash 17889d6e41c3bfab60055e84e8eea7c9
4df0932cc6c70480213da5da5cd25ed3d635397b
c22cb57b398d1759b973737e5933436a0ecd8f2d3ff3dfd4f24cbe01a0cca99a
GET /rsrc.php/v3iAQn4/yM/l/es_LA/dk2rC4nR1Wv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 18:19:34 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: BUvHPkzr3ToGt5alvMq9bg==
x-fb-debug: UHvNIZ6etAPUrLxiOrIBGAuyyNhVeRZj9xSOJLGi4CHLe6W9TcUQ6+Zp3tvDpomV5ThrkU5dAeBxeLzzuDiZgQ==
content-length: 157841
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yD/r/MKQzjVd1bVq.png
31.13.72.12200 OK 548 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yD/r/MKQzjVd1bVq.png
IP 31.13.72.12:0
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 976d05eb572dff7402dab33e7868d1a3
6de347f502856325e90de1fd137382cc2f61dc75
83b7d2afe243941c2527b2d875836ad2cb864290690dd1b253389de3f7bc7da4
GET /rsrc.php/v3/yD/r/MKQzjVd1bVq.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yy/l/0,cross/Hn2ofr8Wyub.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: l20F61ct/3QC2rM+eGjRow==
expires: Wed, 13 Sep 2023 05:55:57 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: EJlCejw0BCePHvjgLCbLR0JzcdrMDPbCENS9rG+nXiTO8xETeM9OBxZArTrKWQ3VNa6eOKAz+BUy0uRyTzOWKQ==
content-length: 548
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yx/r/re1hPxQECWj.png
31.13.72.12200 OK 2.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yx/r/re1hPxQECWj.png
IP 31.13.72.12:0
File type PNG image data, 25 x 281, 8-bit colormap, non-interlaced\012- data
Hash 8bb456647dce20d407811b3ddcae0999
c4df3fb38a35fd018a2f0f7a7009fa9aacac40db
fcdaa4a9116d5ab88233e3349fea2428f2a4c46b3538900117cef9c8c1d31f0c
GET /rsrc.php/v3/yx/r/re1hPxQECWj.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yL/l/0,cross/hrRp0avPc6e.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: i7RWZH3OINQHgRs93K4JmQ==
expires: Tue, 12 Sep 2023 21:51:26 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: U1EtgGxK7O53hn6SFMRS3qOtavL5L1ZkUGDgizezoSfECpBQLpnm7AI5XIFp43r5nqnduvK1hA2wr794mmCvRA==
content-length: 2674
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/tb9/1/16/1f1ee_1f1f9.png
31.13.72.12200 OK 468 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/tb9/1/16/1f1ee_1f1f9.png
IP 31.13.72.12:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 61de71c5c26778afebca9ef706f1f905
1c9a0233d52daa8dcc8256169ae19b6974815ee5
6b27f32425dfa404efcde70a87d11f6e0ffbf4b21cc53a22b3e2f5e7473dedc5
GET /images/emoji.php/v9/tb9/1/16/1f1ee_1f1f9.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: Yd5xxcJneK/ryp73BvH5BQ==
expires: Wed, 13 Sep 2023 03:06:41 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: +hDxtmbmUleIW3czY3lt0IzpXQH/ebSNbzRLeYiE3Vj45t7reeicYhNAorEs79CkNm6v7ELwo+/OlTl5RloDjw==
content-length: 468
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/t71/1/16/1f1f5_1f1ea.png
31.13.72.12200 OK 465 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/t71/1/16/1f1f5_1f1ea.png
IP 31.13.72.12:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash f08126bde00077c0f5d6532708d13c3a
e4ee311818a4175c0b2edec562e74eaab563cf89
8c1cbead0f9b2ebfe28b701af7c9c5b3f59c1abe71451906493b52faac87b641
GET /images/emoji.php/v9/t71/1/16/1f1f5_1f1ea.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: 8IEmveAAd8D11lMnCNE8Og==
expires: Thu, 14 Sep 2023 02:17:10 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 8ULtxPQcs9rIZKcDSTe0wQP8dBnvXxz3mUc4G3O28owjaRfKCjv272qMLKjeb0KCUpiYC79OPX2a5rGp4Hjafw==
priority: u=3,i
content-length: 465
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/t51/1/16/1f603.png
31.13.72.12200 OK 505 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/t51/1/16/1f603.png
IP 31.13.72.12:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash d2150a7921d060cb771e7707111778b0
3c2d0019a91698c6ecc22a54df40e76d7210feb9
7c8a69481a93d4998851e516683a3bc1afbb7164bc18a903230a0eed3c16d88d
GET /images/emoji.php/v9/t51/1/16/1f603.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: 0hUKeSHQYMt3HncHERd4sA==
expires: Thu, 14 Sep 2023 03:26:27 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: J0LqbI3oTENCIuWHrb6NEEFCMGzVTDrxPg0DzCuc8wWVXDzgPiej6FPu8OQ7/UR4Bhf7yiRXU0ob2cVOuwd56Q==
priority: u=3,i
content-length: 505
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/3dl2SsY1JNJ.png
31.13.72.12200 OK 6.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/3dl2SsY1JNJ.png
IP 31.13.72.12:0
File type PNG image data, 81 x 378, 8-bit colormap, non-interlaced\012- data
Hash 2a20e3ba9e9a85929a6dfa870520a13d
f397977b86474eebd387a5635aa00af63c406b6d
2d6ced6860996067641161251dbe7809500fd0f666d41a18412f89053e7fd55a
GET /rsrc.php/v3/yF/r/3dl2SsY1JNJ.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yg/l/0,cross/0OGNjDXome_.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: KiDjup6ahZKabfqHBSChPQ==
expires: Thu, 14 Sep 2023 00:04:35 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: 8UguY21FCVK5TK2TDJTenmPN4K65op55bPnwsDVKakELxMer8Te/8YEl7Yi3TML/CGe11/QXV97x3KnZB7TtXA==
priority: u=3,i
content-length: 6255
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/taa/1/16/1f1e8_1f1e6.png
31.13.72.12200 OK 481 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/taa/1/16/1f1e8_1f1e6.png
IP 31.13.72.12:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash c5b3881ec36ee500072aefe23bc53fa3
40283581ddd7e54572c7e8916ed6190380b12c2a
829a26d9c6e0f62fb3c2894893c07520680455cf21f601b94ca58a411f116423
GET /images/emoji.php/v9/taa/1/16/1f1e8_1f1e6.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: xbOIHsNu5QAHKu/iO8U/ow==
expires: Thu, 14 Sep 2023 00:57:39 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 1fwHRETqriSiN8Ui+shSJ/c0ZDZzfyemePeRrXcXTY0r/Rbdbgpju+eX9PfoB5yGPeNSh46m9rWt/bfvudIWNQ==
content-length: 481
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/t6f/1/16/1f1ed_1f1f0.png
31.13.72.12200 OK 522 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/t6f/1/16/1f1ed_1f1f0.png
IP 31.13.72.12:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash b10d8a7fa614e30fe660bc5c9224e022
ba509f669b0d780d439c18987ce052051fd32700
b87d031f12d9719180ab4de55ad46b428450b230bb957d0fc1e8743c2aed3baf
GET /images/emoji.php/v9/t6f/1/16/1f1ed_1f1f0.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: sQ2Kf6YU4w/mYLxckiTgIg==
expires: Wed, 13 Sep 2023 06:13:59 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 1ovLO6n98VB4f13bwnKWyWTM9Ta1ol21+wqnEyzcLtJXFPy9CzwN+O1PXhe8xWOyjRex7kc6Oz62PI9/aeh7sQ==
content-length: 522
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yh/r/awNhlZqlD7D.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 3.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yh/r/awNhlZqlD7D.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (2313)
Hash 6dc12e7ea7c55dbb8926ed4808666863
9cff1cf4a2d50599a268ea1c5d25e753956074d5
00cbef999e9b5b07e73d86b86ecc7f56f617b88231cf132aa2bf8d1f373bd2a9
GET /rsrc.php/v3/yh/r/awNhlZqlD7D.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:18:46 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: bcEufqfFXbuJJu1ICGZoYw==
x-fb-debug: WP5oA5AaWiaHjKOK3UC9RyimrXw2j9mWSpUGmyBQ7p3XE/gbAmwPS1oPwYmlMcijia8cwrX7XT4GLUgpUuG6tw==
priority: u=3,i
content-length: 3401
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yJ/r/wtsIquTMg_n.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 601 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yJ/r/wtsIquTMg_n.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (1238)
Hash 536320f9617a4bb079787f26048a983a
0d5c607706ce8eab95413095e3c5427303df47af
41b8b418331c4da5c54324249c7b3fce6f3e53197c3595395cd1b11e9d00239b
GET /rsrc.php/v3/yJ/r/wtsIquTMg_n.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 02:39:32 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: U2Mg+WF6S7B5eH8mBIqYOg==
x-fb-debug: yqNwx7MB2OiaL64dPJg1b0PrOclk9e6ZSxwL2TNOQWDXUd8hRTYym6Zs+XNANHJA+eA82nVt6vEPvQCHWeyglA==
content-length: 601
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/306605629_519265533531958_1827113209778065583_n.jpg?stp=dst-jpg_s235x350&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=dwQrBxO7pLkAX-3TlxS&_nc_ht=scontent-arn2-2.xx&oh=00_AT8zLsHDlKi94zHhm-0dysgNrYWXE0IaeE4o8HhZaeMjag&oe=6327B851
157.240.194.27200 OK 16 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/306605629_519265533531958_1827113209778065583_n.jpg?stp=dst-jpg_s235x350&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=dwQrBxO7pLkAX-3TlxS&_nc_ht=scontent-arn2-2.xx&oh=00_AT8zLsHDlKi94zHhm-0dysgNrYWXE0IaeE4o8HhZaeMjag&oe=6327B851
IP 157.240.194.27:0
Hash 3f5909001b23f1fd7fdafe169716cb65
925f33805dcb2953d2c72bd45b21db1386f24c7c
032e1abb8636592d1f56b58d44f528f80f699af93877e77a28a7cbe063041cf4
GET /v/t39.30808-6/306605629_519265533531958_1827113209778065583_n.jpg?stp=dst-jpg_s235x350&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=dwQrBxO7pLkAX-3TlxS&_nc_ht=scontent-arn2-2.xx&oh=00_AT8zLsHDlKi94zHhm-0dysgNrYWXE0IaeE4o8HhZaeMjag&oe=6327B851 HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Tue, 13 Sep 2022 21:46:54 GMT
x-haystack-needlechecksum: 851596180
x-needle-checksum: 2995626852
content-type: image/jpeg
content-length: 15599
content-digest: adler32=1943551901
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
x-fb-edge-debug: DilB_uTyIiRqp3FwJsyV6rckVyIiGmK90zXi8vxuR3piffgYxxf5rOBCOyL2XgmZsszkXYwW6bMqYEhRQuuVNA
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/302854423_3194789064168449_8657378660702157458_n.jpg?stp=dst-jpg_p235x165&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=ql7ZI9CIIRQAX8f7kqD&_nc_ht=scontent-arn2-2.xx&oh=00_AT81hvscYl7-9u6IN0QyaPxhUYdBy-zr1JtTR3c9GWXINg&oe=632761ED
157.240.194.27200 OK 11 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/302854423_3194789064168449_8657378660702157458_n.jpg?stp=dst-jpg_p235x165&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=ql7ZI9CIIRQAX8f7kqD&_nc_ht=scontent-arn2-2.xx&oh=00_AT81hvscYl7-9u6IN0QyaPxhUYdBy-zr1JtTR3c9GWXINg&oe=632761ED
IP 157.240.194.27:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 293x165, components 3\012- data
Hash 9ce9086239d80c71facb458c8af7f4f6
fc6037790d9180fcd5b326ae46caf43d36cde0ec
3a4cb10d9dfca70f9113c106b28f918e0d011e97b849014b5c2ac54de0bc9658
GET /v/t39.30808-6/302854423_3194789064168449_8657378660702157458_n.jpg?stp=dst-jpg_p235x165&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=ql7ZI9CIIRQAX8f7kqD&_nc_ht=scontent-arn2-2.xx&oh=00_AT81hvscYl7-9u6IN0QyaPxhUYdBy-zr1JtTR3c9GWXINg&oe=632761ED HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET
last-modified: Wed, 31 Aug 2022 17:50:45 GMT
x-needle-checksum: 1248420033
content-type: image/jpeg
content-length: 10750
content-digest: adler32=2315556460
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
x-fb-edge-debug: VygdBomWAsZo1JAfhcqyec23tDgojE--WMItBpo7V5i1XPmQiXmrUCqCPOOZYYyxSugt1O_uHgXgPCA2SZU8eA
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3i3y04/y0/l/es_LA/jmtG_N-W_X8.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 69 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3i3y04/y0/l/es_LA/jmtG_N-W_X8.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (6588)
Hash 7e70e82343a22ef8cb8e7b89d279dc6d
999c9eff8b6ad87655bf5de9408f1317455a51d2
500f494d67a3ddc2082a0d910990e2ae22bf50443dee49db933095376202edbc
GET /rsrc.php/v3i3y04/y0/l/es_LA/jmtG_N-W_X8.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 02:05:21 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: fnDoI0OiLvjLjnuJ0nncbQ==
x-fb-debug: 7W722syFULgw1oMSzRD946FspYheZCIkjPjueJVhU7+lgIoqqPhon8tNgKtmmVVgx3ix1Oen9RCfAw72k08bdA==
priority: u=3,i
content-length: 68770
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/l/0,cross/DG7U0M2cyIn.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 711 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/l/0,cross/DG7U0M2cyIn.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (967)
Hash ad02c7c15cbd2a0d1f8c23237321648e
9d551ad3749b64e23e304d70662adaaf4b15c394
e01ca7596c7ee939b33d03b84633dfe01e81620e1e0ddabf36a6f3bbb19c568d
GET /rsrc.php/v3/yv/l/0,cross/DG7U0M2cyIn.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 02:23:10 GMT
cache-control: public,max-age=31536000,immutable
timing-allow-origin: *
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-fb-rlafr: 0
content-md5: rQLHwVy9Kg0fjCMjcyFkjg==
x-fb-debug: b4pp5ztzQ7vWCNQKbyraEV1MeG40Iosv9KxuNrMDwBdTvg60KcJ1mB/1yTKYJumlA/f30ODWMKWuI9hHF8o0zg==
content-length: 711
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iKxN4/ym/l/es_LA/QonnpnxNro9.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 23 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iKxN4/ym/l/es_LA/QonnpnxNro9.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5588)
Hash 9cbcd22e306993ce31f097738c9e3290
f8fc44aed653629fa479adc2cec4df32b48b245e
f05c9464954e443b174ae88a568d60c5fc71904767f2d5620e4643e7dc7107fb
GET /rsrc.php/v3iKxN4/ym/l/es_LA/QonnpnxNro9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 20:46:04 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: nLzSLjBpk84x8JdzjJ4ykA==
x-fb-debug: V/FdxlEVW+WJEGdsyrkgKnhTm0ip843X73awQBwDj/zCSxkFtLbPo5Ve3LiLzcO2EKsN1Mk/vp3G+lAI/1nQlQ==
priority: u=3,i
content-length: 23023
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iny84/yC/l/es_LA/DQDs6tlVqJj.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 4.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iny84/yC/l/es_LA/DQDs6tlVqJj.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (8366)
Hash 44505879c8b36c272e769f8ad446987a
2a1bf59d1f9fd1921c54de35db56bdc1aa278ad8
6f25a1ca6827cbb951e12400b73cfdefba9a3bb739b2ac582f08df42e3807d35
GET /rsrc.php/v3iny84/yC/l/es_LA/DQDs6tlVqJj.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 00:48:08 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: RFBYecizbCcudp+K1EaYeg==
x-fb-debug: VF4pA5pXVDUsz5A7Kj8oDjjS63IMPEhoknA0HFwLE666SS+5WK1UM76wmMZjd2PedkQJmq5fW/I7rKL47IXTkQ==
content-length: 4142
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iAoH4/y2/l/es_LA/rdXJPCHfBjQ.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 11 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iAoH4/y2/l/es_LA/rdXJPCHfBjQ.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (16965)
Hash 588b0db14e17c4de3e0b95561fa8ab91
e416ccd90ad62a9f0756835d6c9baa585bf7bd59
479ea12cc6a47ca18c0c8c0d85522f40a5b037ec32c0bd44465e33f11e7ebe67
GET /rsrc.php/v3iAoH4/y2/l/es_LA/rdXJPCHfBjQ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Sep 2023 20:18:22 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: WIsNsU4XxN4+C5VWH6irkQ==
x-fb-debug: uYbZv2PquNii6q4+3VOUOPdTOusQ8ROScOxC8zoBZHSuLHCfrV5UIqL2f61p7QIk2e4ueGefR/rvbHwCuh3Clg==
content-length: 10881
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3i3cM4/y2/l/es_LA/iIK9TPxucgv.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 329 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3i3cM4/y2/l/es_LA/iIK9TPxucgv.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (9573)
Size 329 kB (329039 bytes)
Hash 38179ccca030efa02f1b0dc8aed5c524
3d558241b1f09ee46e7f35b37674149c255b5ffc
5f30b4ef144921e3f117ab18f544f9d4d7838e5b65f6685376164cbabfe4f085
GET /rsrc.php/v3i3cM4/y2/l/es_LA/iIK9TPxucgv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 01:43:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: OBeczKAw76AvGw3IrtXFJA==
x-fb-debug: zynkCTMHI1I7g/OUd8F9sj7R4jADo7ddMEJ6gUF7RjrCW4FlCJNe9VbR0waDbSM0hMzRf6A37G5WyxqQ1nGsJg==
content-length: 329039
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yg/r/aUyitxdRfft.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yg/r/aUyitxdRfft.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (2855)
Hash 589a43b2070312ee5c94900404ac6075
9c8ef2bfbba1cf5a76ee0e97eb8077fba5bdaab3
67ac4ccca14878687dad279762407b255a5f84afa66ef91dc5673a565e4f66ba
GET /rsrc.php/v3/yg/r/aUyitxdRfft.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 05 Sep 2023 14:03:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: WJpDsgcDEu5clJAEBKxgdQ==
x-fb-debug: sJ07vu7/7P1+PYQUR2JAUyy9FL8mAyvZn5pEcCr76+lThweICu4bTiYTnBasIqJbypXaK+eOPPdexhzErDQQBA==
content-length: 1429
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yg/l/0,cross/WEacipI_7hd.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yg/l/0,cross/WEacipI_7hd.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (2225)
Hash c14b22ca8ceccaa8c259ccf7a5a1bcd4
bab037763cc1e31f71363779a8fb98817e63f44e
7ce418e73b7abb4dab723a8f34f177337d6b5cc3426590cfb18adc6d7c735273
GET /rsrc.php/v3/yg/l/0,cross/WEacipI_7hd.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 09 Sep 2023 16:16:13 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: wUsiyozsyqjCWcz3paG81A==
x-fb-debug: ifHHQdCpt58ENcIKPuDE89qVLuS9LwCNtWuaAxuaFO9l2gyO8OlwYlniD5wNlQ12Y5asciTHQyE6eO7YU4AY0A==
priority: u=3,i
content-length: 1671
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yH/l/0,cross/OuwSWuuEoPE.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 3.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yH/l/0,cross/OuwSWuuEoPE.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4938)
Hash b691910b783ba0c5f328f02c157269af
747f1a28f260ec239dd19fba301658ff16eade95
e704275664fedabb516e863a59dee209a45181f6160f5fe138820518e90bf013
GET /rsrc.php/v3/yH/l/0,cross/OuwSWuuEoPE.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Sep 2023 16:42:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: tpGRC3g7oMXzKPAsFXJprw==
x-fb-debug: PhVD8rM6TfhPvv85NyX2OT9R7E8toLA4LuB/aLAaAzg4G7hvWruTFNU34BGPsnkqcGh/0gPczxH1wHD5e1Ekhw==
content-length: 3250
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/304518113_3194789034168452_7808893748297006244_n.jpg?stp=dst-jpg_p235x165&_nc_cat=100&ccb=1-7&_nc_sid=110474&_nc_ohc=4MHJKBCQbCcAX9301qj&_nc_ht=scontent-arn2-2.xx&oh=00_AT9DOxGEvXDGMdrMxSx-4SdqrULS9kSogU3p6cAef7Zj4Q&oe=6326EA5F
157.240.194.27200 OK 10 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/304518113_3194789034168452_7808893748297006244_n.jpg?stp=dst-jpg_p235x165&_nc_cat=100&ccb=1-7&_nc_sid=110474&_nc_ohc=4MHJKBCQbCcAX9301qj&_nc_ht=scontent-arn2-2.xx&oh=00_AT9DOxGEvXDGMdrMxSx-4SdqrULS9kSogU3p6cAef7Zj4Q&oe=6326EA5F
IP 157.240.194.27:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 293x165, components 3\012- data
Hash 80c7085d63d48a69064580728fdf87f9
8868e4ec47b6257509abed45181ee2f27efe7f84
506c9ddb562b6200890b415bc5d6bcc4aa6aacf989c962aceff37f0bc5ef93ab
GET /v/t39.30808-6/304518113_3194789034168452_7808893748297006244_n.jpg?stp=dst-jpg_p235x165&_nc_cat=100&ccb=1-7&_nc_sid=110474&_nc_ohc=4MHJKBCQbCcAX9301qj&_nc_ht=scontent-arn2-2.xx&oh=00_AT9DOxGEvXDGMdrMxSx-4SdqrULS9kSogU3p6cAef7Zj4Q&oe=6326EA5F HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 31 Aug 2022 17:50:42 GMT
x-haystack-needlechecksum: 3087779680
x-needle-checksum: 3679096715
content-type: image/jpeg
content-length: 10215
content-digest: adler32=1468774831
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
x-fb-edge-debug: YRUVCW0GNG4gnxvy2kTg9c2vE5m8CTUTKqj2O3-CgB4lFX5IgrJPirDqdAv41ZZumlBHB3oFitYyiKsOSYGpgg
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yt/r/ag-Kz-WMvnK.png
31.13.72.12200 OK 330 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yt/r/ag-Kz-WMvnK.png
IP 31.13.72.12:0
File type PNG image data, 2 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 78015dd21035d3df926aad822b1c038b
a41bd785fd1c0c320d82c02e758acac5fc95a41c
45445cdb742ba713feadbb749a2328f90698cc052372bb736682afcb5e7c6345
GET /rsrc.php/v3/yt/r/ag-Kz-WMvnK.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yg/l/0,cross/0OGNjDXome_.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: eAFd0hA109+Saq2CKxwDiw==
expires: Fri, 08 Sep 2023 16:40:58 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: xWDN3PFjBMmvTsqBHc84NIPlnjtZUBFUC9TT+7HUAlQlo73P/XEhhLIzq1yOWhjU6AXc2i6pCTsXH3kuRWlfIg==
content-length: 330
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yN/r/LW0MdURtWli.png
31.13.72.12200 OK 17 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yN/r/LW0MdURtWli.png
IP 31.13.72.12:0
File type PNG image data, 49 x 605, 8-bit/color RGBA, non-interlaced\012- data
Hash 14772b13b0b7e7b4906f782861d9f59d
33527aeeef006a787f88ac299dc1e5d8c8a342c8
4598e542af21a4851e6d529a0441077c56e1edbcb2d4e05f2b33eb40f89c6b9d
GET /rsrc.php/v3/yN/r/LW0MdURtWli.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yg/l/0,cross/0OGNjDXome_.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: FHcrE7C357SQb3goYdn1nQ==
expires: Tue, 12 Sep 2023 23:55:55 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: WAHW/rR351y3D/OQul1s27WPVXznWfzjENqfQad3SvdQsG+nyPnrCYFbQWXxF0/RnMZZiELet3q0tiDhp2w2TQ==
content-length: 16804
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:38 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-1.xx.fbcdn.net/v/t42.1790-2/306771484_1674253166287965_3617212718848828723_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=64AlD6gnGzEAX_kDsy9&_nc_ht=video-arn2-1.xx&oh=00_AT-lr-f7TnLGnuF6bISyGm_Mdjp_Ab5PbxJUvkUQOm7kNQ&oe=6322B502&bytestart=863&byteend=17124
31.13.72.14200 OK 16 kB URL HTTP/2 video-arn2-1.xx.fbcdn.net/v/t42.1790-2/306771484_1674253166287965_3617212718848828723_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=64AlD6gnGzEAX_kDsy9&_nc_ht=video-arn2-1.xx&oh=00_AT-lr-f7TnLGnuF6bISyGm_Mdjp_Ab5PbxJUvkUQOm7kNQ&oe=6322B502&bytestart=863&byteend=17124
IP 31.13.72.14:0
Hash 465b7da3dfd78f6a787200203abe1b3a
df8a2bf1d169f8ffa85f365041a75a399f4eb419
85ffffc252d522533d333c9d3d5daf8082fa1c4621d333fc4deb2926141318f2
GET /v/t42.1790-2/306771484_1674253166287965_3617212718848828723_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=64AlD6gnGzEAX_kDsy9&_nc_ht=video-arn2-1.xx&oh=00_AT-lr-f7TnLGnuF6bISyGm_Mdjp_Ab5PbxJUvkUQOm7kNQ&oe=6322B502&bytestart=863&byteend=17124 HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ESUCCESS
last-modified: Tue, 13 Sep 2022 22:50:03 GMT
content-type: video/mp4
x-haystack-needlechecksum: 3188314992
x-needle-checksum: 2768310837
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2768310837
content-length: 16262
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:38 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: fkE4ieVvw3y79RuS7ntCTrTOfpUfmqvHbAnAZi4UfjBDJ4rdYxNf3IWprS6LRhnZBynB5eaLfwVVGm3kOSSOCA
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-1.xx.fbcdn.net/v/t42.1790-2/306771484_1674253166287965_3617212718848828723_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=64AlD6gnGzEAX_kDsy9&_nc_ht=video-arn2-1.xx&oh=00_AT-lr-f7TnLGnuF6bISyGm_Mdjp_Ab5PbxJUvkUQOm7kNQ&oe=6322B502&bytestart=783&byteend=862
31.13.72.14200 OK 80 B URL HTTP/2 video-arn2-1.xx.fbcdn.net/v/t42.1790-2/306771484_1674253166287965_3617212718848828723_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=64AlD6gnGzEAX_kDsy9&_nc_ht=video-arn2-1.xx&oh=00_AT-lr-f7TnLGnuF6bISyGm_Mdjp_Ab5PbxJUvkUQOm7kNQ&oe=6322B502&bytestart=783&byteend=862
IP 31.13.72.14:0
Hash 0217e50509c3fbe3bad6dcb23f132eb6
7119934c4112894115fac5e7ae43ac6ca32c35b7
40a8f6cde3192efcceee78db38049d21c3566f79a4f1b43096ed2b2297e0ece2
GET /v/t42.1790-2/306771484_1674253166287965_3617212718848828723_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=64AlD6gnGzEAX_kDsy9&_nc_ht=video-arn2-1.xx&oh=00_AT-lr-f7TnLGnuF6bISyGm_Mdjp_Ab5PbxJUvkUQOm7kNQ&oe=6322B502&bytestart=783&byteend=862 HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ESUCCESS
last-modified: Tue, 13 Sep 2022 22:50:03 GMT
content-type: video/mp4
x-haystack-needlechecksum: 3188314992
x-needle-checksum: 2768310837
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2768310837
content-length: 80
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:38 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-1.xx.fbcdn.net/v/t42.1790-2/306771484_1674253166287965_3617212718848828723_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=64AlD6gnGzEAX_kDsy9&_nc_ht=video-arn2-1.xx&oh=00_AT-lr-f7TnLGnuF6bISyGm_Mdjp_Ab5PbxJUvkUQOm7kNQ&oe=6322B502&bytestart=0&byteend=782
31.13.72.14200 OK 783 B URL HTTP/2 video-arn2-1.xx.fbcdn.net/v/t42.1790-2/306771484_1674253166287965_3617212718848828723_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=64AlD6gnGzEAX_kDsy9&_nc_ht=video-arn2-1.xx&oh=00_AT-lr-f7TnLGnuF6bISyGm_Mdjp_Ab5PbxJUvkUQOm7kNQ&oe=6322B502&bytestart=0&byteend=782
IP 31.13.72.14:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash ef4d5ea2fb03b38ea40e89fa75e4820b
00332114087e018b4c962a73cac566eaaf89b280
6960343bfef14ae1c9787cec72b4f491196bb7159ec90fbc4c15d6ddbdbc4b29
GET /v/t42.1790-2/306771484_1674253166287965_3617212718848828723_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=64AlD6gnGzEAX_kDsy9&_nc_ht=video-arn2-1.xx&oh=00_AT-lr-f7TnLGnuF6bISyGm_Mdjp_Ab5PbxJUvkUQOm7kNQ&oe=6322B502&bytestart=0&byteend=782 HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ESUCCESS
last-modified: Tue, 13 Sep 2022 22:50:03 GMT
content-type: video/mp4
x-haystack-needlechecksum: 3188314992
x-needle-checksum: 2768310837
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2768310837
content-length: 783
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:38 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306948595_194858292975893_9033449713430701629_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTFfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=2j042Gv-rQ0AX_Dp97A&_nc_ht=video-arn2-2.xx&oh=00_AT9FzTEwg-f_a7TH7QWxrcrKBgKR1bDlOYojXbYdQgQHYw&oe=6327C9E3&bytestart=0&byteend=839
157.240.194.21200 OK 840 B URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306948595_194858292975893_9033449713430701629_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTFfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=2j042Gv-rQ0AX_Dp97A&_nc_ht=video-arn2-2.xx&oh=00_AT9FzTEwg-f_a7TH7QWxrcrKBgKR1bDlOYojXbYdQgQHYw&oe=6327C9E3&bytestart=0&byteend=839
IP 157.240.194.21:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash 97a802e4aeadb318bd2b5b05fa80d752
b3f7f8a81c87195a792adafa5ae42440da064d3e
2856435df0077a8b8c83fbd163ace93016e3dcd65d9a7bb59f333c1313df78bf
GET /v/t39.25447-2/306948595_194858292975893_9033449713430701629_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTFfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=2j042Gv-rQ0AX_Dp97A&_nc_ht=video-arn2-2.xx&oh=00_AT9FzTEwg-f_a7TH7QWxrcrKBgKR1bDlOYojXbYdQgQHYw&oe=6327C9E3&bytestart=0&byteend=839 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 13 Sep 2022 22:50:02 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2206377880
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2206377880
content-length: 840
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:38 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306948595_194858292975893_9033449713430701629_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTFfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=2j042Gv-rQ0AX_Dp97A&_nc_ht=video-arn2-2.xx&oh=00_AT9FzTEwg-f_a7TH7QWxrcrKBgKR1bDlOYojXbYdQgQHYw&oe=6327C9E3&bytestart=840&byteend=895
157.240.194.21200 OK 56 B URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306948595_194858292975893_9033449713430701629_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTFfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=2j042Gv-rQ0AX_Dp97A&_nc_ht=video-arn2-2.xx&oh=00_AT9FzTEwg-f_a7TH7QWxrcrKBgKR1bDlOYojXbYdQgQHYw&oe=6327C9E3&bytestart=840&byteend=895
IP 157.240.194.21:0
File type BS image, Version 30820, Quantization 26995, (Decompresses to 0 words)\012- data
Hash a71cfb9bc8be7a12b987e88bc4bfdf53
ce70d5044d1926257660be7d233851855b9272a4
da8300ac2eba9854f0a6ceecc284c1b742fafe7b0449786a35e61825c5b09f2f
GET /v/t39.25447-2/306948595_194858292975893_9033449713430701629_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTFfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=2j042Gv-rQ0AX_Dp97A&_nc_ht=video-arn2-2.xx&oh=00_AT9FzTEwg-f_a7TH7QWxrcrKBgKR1bDlOYojXbYdQgQHYw&oe=6327C9E3&bytestart=840&byteend=895 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 13 Sep 2022 22:50:02 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2206377880
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2206377880
content-length: 56
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:38 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306787141_445837230846184_7604065602342991477_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF80MjZfY3JmXzMzX21haW5fMy4wX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=n3nSPPDlfLkAX-px2YR&_nc_ht=video-arn2-2.xx&oh=00_AT9JWXVA7pc3r0jSSJ2BK5GBQZgCFDWyIFxqsTYGsjzVpA&oe=63269A11&bytestart=0&byteend=841
157.240.194.21200 OK 941 B URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306787141_445837230846184_7604065602342991477_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF80MjZfY3JmXzMzX21haW5fMy4wX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=n3nSPPDlfLkAX-px2YR&_nc_ht=video-arn2-2.xx&oh=00_AT9JWXVA7pc3r0jSSJ2BK5GBQZgCFDWyIFxqsTYGsjzVpA&oe=63269A11&bytestart=0&byteend=841
IP 157.240.194.21:0
Hash 4686fa04027ff16c1192918f6f763bfc
7a63fa2db6e9f1f278587a7cb44c14a78927c559
879938db287695bc59dcdf147a5733370544bce6d121f44b70b063e50f955a55
GET /v/t39.25447-2/306787141_445837230846184_7604065602342991477_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF80MjZfY3JmXzMzX21haW5fMy4wX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=n3nSPPDlfLkAX-px2YR&_nc_ht=video-arn2-2.xx&oh=00_AT9JWXVA7pc3r0jSSJ2BK5GBQZgCFDWyIFxqsTYGsjzVpA&oe=63269A11&bytestart=0&byteend=841 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 13 Sep 2022 22:49:59 GMT
content-type: video/mp4
x-haystack-needlechecksum: 1851571500
x-needle-checksum: 4247862822
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=4247862822
content-length: 842
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: _MwAR2Zb7XdtiW7S3laxrBgI4x24TFjxe2_GCxriY7S6PY9BG5eiyBSaSujrLHcaUm_847aTR-nJ4zmAx7TsNA
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t39.25447-2/300376913_1077569276452011_3163627742602509555_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=eg85p_wDBEYAX9vjT52&_nc_ht=video-arn2-2.xx&oh=00_AT8MVol1TkOXkictsSjedJPllNZjj5afiwEDlcXKFTiPTQ&oe=6328214E&bytestart=0&byteend=843
157.240.194.21200 OK 844 B URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t39.25447-2/300376913_1077569276452011_3163627742602509555_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=eg85p_wDBEYAX9vjT52&_nc_ht=video-arn2-2.xx&oh=00_AT8MVol1TkOXkictsSjedJPllNZjj5afiwEDlcXKFTiPTQ&oe=6328214E&bytestart=0&byteend=843
IP 157.240.194.21:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash 54d210135e9a5dfedd28c5dc1291d793
b12b54b138afabb7c7b34aaa2a47eb6444fc075a
e4930a2a09635ea95ac114923c2856edf0e78b4d9ae04d92d3195c6abc1a21df
GET /v/t39.25447-2/300376913_1077569276452011_3163627742602509555_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=eg85p_wDBEYAX9vjT52&_nc_ht=video-arn2-2.xx&oh=00_AT8MVol1TkOXkictsSjedJPllNZjj5afiwEDlcXKFTiPTQ&oe=6328214E&bytestart=0&byteend=843 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 31 Aug 2022 17:50:10 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2319417413
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2319417413
content-length: 844
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: FoY9rCb8JCPnTqonCpPdwRHBkQpAuvtS_0zxnp896sEdfGtn3jAvBG-b1obvaRQnGRpP65jqgewGs8sOwO-AhQ
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t39.25447-2/300376913_1077569276452011_3163627742602509555_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=eg85p_wDBEYAX9vjT52&_nc_ht=video-arn2-2.xx&oh=00_AT8MVol1TkOXkictsSjedJPllNZjj5afiwEDlcXKFTiPTQ&oe=6328214E&bytestart=844&byteend=959
157.240.194.21200 OK 116 B URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t39.25447-2/300376913_1077569276452011_3163627742602509555_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=eg85p_wDBEYAX9vjT52&_nc_ht=video-arn2-2.xx&oh=00_AT8MVol1TkOXkictsSjedJPllNZjj5afiwEDlcXKFTiPTQ&oe=6328214E&bytestart=844&byteend=959
IP 157.240.194.21:0
Hash 08f0c0eb400545f5e1a8b38630a319f0
7fe795592a7588330b47b6613fb9f85e0caca631
bc207760aaa5edfd3d2a8b7ab8ddc77ec39e5985255913bf87ba4df95576b419
GET /v/t39.25447-2/300376913_1077569276452011_3163627742602509555_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=eg85p_wDBEYAX9vjT52&_nc_ht=video-arn2-2.xx&oh=00_AT8MVol1TkOXkictsSjedJPllNZjj5afiwEDlcXKFTiPTQ&oe=6328214E&bytestart=844&byteend=959 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 31 Aug 2022 17:50:10 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2319417413
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2319417413
content-length: 116
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306787141_445837230846184_7604065602342991477_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF80MjZfY3JmXzMzX21haW5fMy4wX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=n3nSPPDlfLkAX-px2YR&_nc_ht=video-arn2-2.xx&oh=00_AT9JWXVA7pc3r0jSSJ2BK5GBQZgCFDWyIFxqsTYGsjzVpA&oe=63269A11&bytestart=842&byteend=885
157.240.194.21200 OK 44 B URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306787141_445837230846184_7604065602342991477_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF80MjZfY3JmXzMzX21haW5fMy4wX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=n3nSPPDlfLkAX-px2YR&_nc_ht=video-arn2-2.xx&oh=00_AT9JWXVA7pc3r0jSSJ2BK5GBQZgCFDWyIFxqsTYGsjzVpA&oe=63269A11&bytestart=842&byteend=885
IP 157.240.194.21:0
Hash 83a567a5a44af8b255591baa900d9b26
c2df7a66b12af8b273e12354179ea97bfa8bae9b
3403533e3cc3d96412b9b08323f142a8f7d9d3fc6959093abf2d530f20f22d0d
GET /v/t39.25447-2/306787141_445837230846184_7604065602342991477_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF80MjZfY3JmXzMzX21haW5fMy4wX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=n3nSPPDlfLkAX-px2YR&_nc_ht=video-arn2-2.xx&oh=00_AT9JWXVA7pc3r0jSSJ2BK5GBQZgCFDWyIFxqsTYGsjzVpA&oe=63269A11&bytestart=842&byteend=885 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 13 Sep 2022 22:49:59 GMT
content-type: video/mp4
x-haystack-needlechecksum: 1851571500
x-needle-checksum: 4247862822
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=4247862822
content-length: 44
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-1.xx.fbcdn.net/v/t42.1790-2/302492985_1463355417460693_1342518168980883249_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=OsZu1rSABlEAX_5Hg6K&_nc_ht=video-arn2-1.xx&oh=00_AT9Qc3EbzVhGZF0ZAnwWbyTrYmoPKFurR-_31FSUhK_vNw&oe=6322BCAB&bytestart=0&byteend=782
31.13.72.14200 OK 783 B URL HTTP/2 video-arn2-1.xx.fbcdn.net/v/t42.1790-2/302492985_1463355417460693_1342518168980883249_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=OsZu1rSABlEAX_5Hg6K&_nc_ht=video-arn2-1.xx&oh=00_AT9Qc3EbzVhGZF0ZAnwWbyTrYmoPKFurR-_31FSUhK_vNw&oe=6322BCAB&bytestart=0&byteend=782
IP 31.13.72.14:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash d7832ce7264cab72b1a38c26e742df49
7355d8f1779e147be104150d0ac58bd765737021
f43036e44f300e0e7ef386287c3e06dde45c68d087d7319514f550e017350526
GET /v/t42.1790-2/302492985_1463355417460693_1342518168980883249_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=OsZu1rSABlEAX_5Hg6K&_nc_ht=video-arn2-1.xx&oh=00_AT9Qc3EbzVhGZF0ZAnwWbyTrYmoPKFurR-_31FSUhK_vNw&oe=6322BCAB&bytestart=0&byteend=782 HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 31 Aug 2022 17:50:36 GMT
content-type: video/mp4
x-haystack-needlechecksum: 3721679922
x-needle-checksum: 294803275
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=294803275
content-length: 783
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: qhXph47PykgKXQZn4-eFTN6ZchfXF713wBPNApz_v0j9-GBdDafLkXyamK89Dmm9Q1U2ltcpH_-VVv7il6o96A
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-1.xx.fbcdn.net/v/t42.1790-2/302492985_1463355417460693_1342518168980883249_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=OsZu1rSABlEAX_5Hg6K&_nc_ht=video-arn2-1.xx&oh=00_AT9Qc3EbzVhGZF0ZAnwWbyTrYmoPKFurR-_31FSUhK_vNw&oe=6322BCAB&bytestart=1019&byteend=17366
31.13.72.14200 OK 16 kB URL HTTP/2 video-arn2-1.xx.fbcdn.net/v/t42.1790-2/302492985_1463355417460693_1342518168980883249_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=OsZu1rSABlEAX_5Hg6K&_nc_ht=video-arn2-1.xx&oh=00_AT9Qc3EbzVhGZF0ZAnwWbyTrYmoPKFurR-_31FSUhK_vNw&oe=6322BCAB&bytestart=1019&byteend=17366
IP 31.13.72.14:0
Hash 22744ed3c7b0a05ec9f09bb32efb512a
d38fcecfa7ab70b9d84ef7c0a80a7b85c73750b6
153f0804d1b4f6da8db857583e722a97757a60457a0b474d0c24a64dec869812
GET /v/t42.1790-2/302492985_1463355417460693_1342518168980883249_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=OsZu1rSABlEAX_5Hg6K&_nc_ht=video-arn2-1.xx&oh=00_AT9Qc3EbzVhGZF0ZAnwWbyTrYmoPKFurR-_31FSUhK_vNw&oe=6322BCAB&bytestart=1019&byteend=17366 HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 31 Aug 2022 17:50:36 GMT
content-type: video/mp4
x-haystack-needlechecksum: 3721679922
x-needle-checksum: 294803275
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=294803275
content-length: 16348
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-1.xx.fbcdn.net/v/t42.1790-2/302492985_1463355417460693_1342518168980883249_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=OsZu1rSABlEAX_5Hg6K&_nc_ht=video-arn2-1.xx&oh=00_AT9Qc3EbzVhGZF0ZAnwWbyTrYmoPKFurR-_31FSUhK_vNw&oe=6322BCAB&bytestart=783&byteend=1018
31.13.72.14200 OK 236 B URL HTTP/2 video-arn2-1.xx.fbcdn.net/v/t42.1790-2/302492985_1463355417460693_1342518168980883249_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=OsZu1rSABlEAX_5Hg6K&_nc_ht=video-arn2-1.xx&oh=00_AT9Qc3EbzVhGZF0ZAnwWbyTrYmoPKFurR-_31FSUhK_vNw&oe=6322BCAB&bytestart=783&byteend=1018
IP 31.13.72.14:0
Hash 42ba4594f0aaf2d4f735e4ef1ff082d2
af299508f325942baa8dc4065d254416d265c475
013c47661eb223f0b664758e68a5638c98ea77c23da80f24f6189f620ada72ea
GET /v/t42.1790-2/302492985_1463355417460693_1342518168980883249_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=OsZu1rSABlEAX_5Hg6K&_nc_ht=video-arn2-1.xx&oh=00_AT9Qc3EbzVhGZF0ZAnwWbyTrYmoPKFurR-_31FSUhK_vNw&oe=6322BCAB&bytestart=783&byteend=1018 HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 31 Aug 2022 17:50:36 GMT
content-type: video/mp4
x-haystack-needlechecksum: 3721679922
x-needle-checksum: 294803275
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=294803275
content-length: 236
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t42.1790-2/306942375_832076178161182_1758939539167202056_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=7p9GwXDjPk4AX96tbud&_nc_ht=video-arn2-2.xx&oh=00_AT_HXwwZyMdZGBrFFmB_r0yaaWNtRP0fukpLM6t85d8pPg&oe=6322AF37&bytestart=0&byteend=782
157.240.194.21200 OK 783 B URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t42.1790-2/306942375_832076178161182_1758939539167202056_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=7p9GwXDjPk4AX96tbud&_nc_ht=video-arn2-2.xx&oh=00_AT_HXwwZyMdZGBrFFmB_r0yaaWNtRP0fukpLM6t85d8pPg&oe=6322AF37&bytestart=0&byteend=782
IP 157.240.194.21:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash da3ffd8ed346fde884801aaed9085c0a
5535e4f60d00626a30f3c7d895e79248a31896c5
a9efa33305be5368ec6a3a58764557f3237a8df6542d02c776464d09fce2f3c3
GET /v/t42.1790-2/306942375_832076178161182_1758939539167202056_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=7p9GwXDjPk4AX96tbud&_nc_ht=video-arn2-2.xx&oh=00_AT_HXwwZyMdZGBrFFmB_r0yaaWNtRP0fukpLM6t85d8pPg&oe=6322AF37&bytestart=0&byteend=782 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 13 Sep 2022 22:50:05 GMT
content-type: video/mp4
x-haystack-needlechecksum: 3996236260
x-needle-checksum: 3315071128
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3315071128
content-length: 783
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: ntlUzyWHVgjGXjST-GXdCCwTb7tGXv7Gujsz98wfXpcCp2Pa6kzHN9w0DBZMeLXHVJ4rmnEH-8UnmBcgjTX4Tg
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yj/r/PkV8_5hF_8w.png
31.13.72.12200 OK 6.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yj/r/PkV8_5hF_8w.png
IP 31.13.72.12:0
Hash b4d4e168b843ac1d70bab58978b9016d
e5998e5deaa90c86f11c353caf9da2e0166260af
3c67f73bdf75bc65b2af962f120de6628fb71c198cf55a680cc4b7c7ccc16766
GET /rsrc.php/v3/yj/r/PkV8_5hF_8w.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yv/l/0,cross/DG7U0M2cyIn.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: XeD3C/Pc3B/XurE3OdpfzA==
expires: Fri, 08 Sep 2023 16:41:00 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: nkihQYzuly7gIXyPKVW4CiwO+oUsi/YGMcCvzdZbR/S3LPxISxvjMeDLBYZ9sSWzv691vOgzEyM00tNsNdiVkg==
priority: u=3,i
content-length: 1706
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:39 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t42.1790-2/306942375_832076178161182_1758939539167202056_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=7p9GwXDjPk4AX96tbud&_nc_ht=video-arn2-2.xx&oh=00_AT_HXwwZyMdZGBrFFmB_r0yaaWNtRP0fukpLM6t85d8pPg&oe=6322AF37&bytestart=783&byteend=886
157.240.194.21200 OK 104 B URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t42.1790-2/306942375_832076178161182_1758939539167202056_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=7p9GwXDjPk4AX96tbud&_nc_ht=video-arn2-2.xx&oh=00_AT_HXwwZyMdZGBrFFmB_r0yaaWNtRP0fukpLM6t85d8pPg&oe=6322AF37&bytestart=783&byteend=886
IP 157.240.194.21:0
Hash f2decf05d43f39d692db9d0d664378b6
315022429626b00000ef7e8fdb750d9b99f8ec9a
d24fac3408a71d8d34be6a750d705d9e9fc189862b5c7ce474db8fce4fe0124b
GET /v/t42.1790-2/306942375_832076178161182_1758939539167202056_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=7p9GwXDjPk4AX96tbud&_nc_ht=video-arn2-2.xx&oh=00_AT_HXwwZyMdZGBrFFmB_r0yaaWNtRP0fukpLM6t85d8pPg&oe=6322AF37&bytestart=783&byteend=886 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 13 Sep 2022 22:50:05 GMT
content-type: video/mp4
x-haystack-needlechecksum: 3996236260
x-needle-checksum: 3315071128
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3315071128
content-length: 104
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306787141_445837230846184_7604065602342991477_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF80MjZfY3JmXzMzX21haW5fMy4wX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=n3nSPPDlfLkAX-px2YR&_nc_ht=video-arn2-2.xx&oh=00_AT9JWXVA7pc3r0jSSJ2BK5GBQZgCFDWyIFxqsTYGsjzVpA&oe=63269A11&bytestart=886&byteend=89265
157.240.194.21200 OK 88 kB URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t39.25447-2/306787141_445837230846184_7604065602342991477_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF80MjZfY3JmXzMzX21haW5fMy4wX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=n3nSPPDlfLkAX-px2YR&_nc_ht=video-arn2-2.xx&oh=00_AT9JWXVA7pc3r0jSSJ2BK5GBQZgCFDWyIFxqsTYGsjzVpA&oe=63269A11&bytestart=886&byteend=89265
IP 157.240.194.21:0
Hash 32c8a83a9f239e07870c3354d4cb10e2
b178689973a84cec2fbbb99dc99660e4062ccba4
d6e4d8c614aa84eaf0950e0dc5cae7528bad4c9d8cc428302e10c03029b708eb
GET /v/t39.25447-2/306787141_445837230846184_7604065602342991477_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF80MjZfY3JmXzMzX21haW5fMy4wX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=n3nSPPDlfLkAX-px2YR&_nc_ht=video-arn2-2.xx&oh=00_AT9JWXVA7pc3r0jSSJ2BK5GBQZgCFDWyIFxqsTYGsjzVpA&oe=63269A11&bytestart=886&byteend=89265 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 13 Sep 2022 22:49:59 GMT
content-type: video/mp4
x-haystack-needlechecksum: 1851571500
x-needle-checksum: 4247862822
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=4247862822
content-length: 88380
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t39.25447-2/300376913_1077569276452011_3163627742602509555_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=eg85p_wDBEYAX9vjT52&_nc_ht=video-arn2-2.xx&oh=00_AT8MVol1TkOXkictsSjedJPllNZjj5afiwEDlcXKFTiPTQ&oe=6328214E&bytestart=960&byteend=994543
157.240.194.21200 OK 994 kB URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t39.25447-2/300376913_1077569276452011_3163627742602509555_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=eg85p_wDBEYAX9vjT52&_nc_ht=video-arn2-2.xx&oh=00_AT8MVol1TkOXkictsSjedJPllNZjj5afiwEDlcXKFTiPTQ&oe=6328214E&bytestart=960&byteend=994543
IP 157.240.194.21:0
Size 994 kB (993584 bytes)
Hash d493fe0e6d7d62608c2bc66f94db1090
1e6c33e42b918c5d461640ab23bda0333093e6c5
700b8fa2e6d682a896a6d992a890a2bbfa76d841e09a1268378fd59b38cbfcf7
GET /v/t39.25447-2/300376913_1077569276452011_3163627742602509555_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=eg85p_wDBEYAX9vjT52&_nc_ht=video-arn2-2.xx&oh=00_AT8MVol1TkOXkictsSjedJPllNZjj5afiwEDlcXKFTiPTQ&oe=6328214E&bytestart=960&byteend=994543 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 31 Aug 2022 17:50:10 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2319417413
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2319417413
content-length: 993584
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
video-arn2-2.xx.fbcdn.net/v/t42.1790-2/306942375_832076178161182_1758939539167202056_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=7p9GwXDjPk4AX96tbud&_nc_ht=video-arn2-2.xx&oh=00_AT_HXwwZyMdZGBrFFmB_r0yaaWNtRP0fukpLM6t85d8pPg&oe=6322AF37&bytestart=887&byteend=17342
157.240.194.21200 OK 16 kB URL HTTP/2 video-arn2-2.xx.fbcdn.net/v/t42.1790-2/306942375_832076178161182_1758939539167202056_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=7p9GwXDjPk4AX96tbud&_nc_ht=video-arn2-2.xx&oh=00_AT_HXwwZyMdZGBrFFmB_r0yaaWNtRP0fukpLM6t85d8pPg&oe=6322AF37&bytestart=887&byteend=17342
IP 157.240.194.21:0
Hash 160b803d4cdf308e73f9bf042a79f800
ea66c620f9dd2305eb623e69aa650248654d899d
3c0646d59c2264b97d1825e7aa6c25e031cd97147dbebfb8320254881068748f
GET /v/t42.1790-2/306942375_832076178161182_1758939539167202056_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=7p9GwXDjPk4AX96tbud&_nc_ht=video-arn2-2.xx&oh=00_AT_HXwwZyMdZGBrFFmB_r0yaaWNtRP0fukpLM6t85d8pPg&oe=6322AF37&bytestart=887&byteend=17342 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 13 Sep 2022 22:50:05 GMT
content-type: video/mp4
x-haystack-needlechecksum: 3996236260
x-needle-checksum: 3315071128
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3315071128
content-length: 16456
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Thu, 15 Sep 2022 02:50:39 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: Ld6GbaQDxpDpiaRTYtjG3VfnHR5m82QXflHPAIFCmiEGTanODbPZCHCDfIwhKYism8ngOUg07TRfyGkWl4efDQ
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.skynetcusco.com/images/skynetcusco.png
104.21.15.158404 Not Found 0 B URL HTTP/2 www.skynetcusco.com/images/skynetcusco.png
IP 104.21.15.158:0
GET /images/skynetcusco.png HTTP/1.1
Host: www.skynetcusco.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cuscoinkasfeat.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Thu, 15 Sep 2022 02:50:35 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://www.skynetcusco.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1qHf8WrwZzUKFsq%2FnyfzVBokK0lt4zbC6ZiBYgreMmcMD4GekMntttyRxjDU72wWxKtu%2B81FfJF6McX1gYTCPKHwySyR5clkyET1b9EaRji9brJpukQ3yf5Xp7MjVXI7B8ZLZcC9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ae0e416db20b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.15.4/css/all.css?ver=2.0.1
172.64.168.32200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.15.4/css/all.css?ver=2.0.1
IP 172.64.168.32:0
GET /releases/v5.15.4/css/all.css?ver=2.0.1 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 02:50:34 GMT
content-type: text/css
x-amz-id-2: nE6GTaWMCFhFpHVRA16nYx1+8UJfdxXhrq2oRZP5mE7fh8kmFB93vsxV3n+v0wvNRPobK8senrU=
x-amz-request-id: F0PZBVW0J1S1NA76
last-modified: Wed, 04 Aug 2021 20:43:22 GMT
etag: W/"ecd507b3125edc4d2a03aa6ae5d07da9"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 27977256
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1CzD3J4Eng%2FvAR5MPx0aKF9nMTDzF5r8hy6Whed2ZldZiQl7JyD4E8WP%2FpLxDoRguGpqFOqDTzljbcj5RLWOD6Zwv4RoQ8cSNVMA2SVRcPxi0mD8z4ofDrKUMc%2FKhPnPKExhl3wM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74ae0e3ea94d7321-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Ubuntu:300,400,500
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Ubuntu:300,400,500
IP 142.250.74.10:0
GET /css?family=Ubuntu:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Sep 2022 02:50:34 GMT
date: Thu, 15 Sep 2022 02:50:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Rum+Raisin
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Rum+Raisin
IP 142.250.74.10:0
GET /css?family=Rum+Raisin HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Sep 2022 02:50:34 GMT
date: Thu, 15 Sep 2022 02:50:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js?v=3.exp&libraries=places&ver=6.0.2
216.58.207.202200 OK 0 B URL HTTP/2 maps.googleapis.com/maps/api/js?v=3.exp&libraries=places&ver=6.0.2
IP 216.58.207.202:0
GET /maps/api/js?v=3.exp&libraries=places&ver=6.0.2 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Thu, 15 Sep 2022 02:50:34 GMT
expires: Thu, 15 Sep 2022 03:20:34 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 56295
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=13
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iLAB4/y7/l/es_LA/os-5rQsb0ZO.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 0 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iLAB4/y7/l/es_LA/os-5rQsb0ZO.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
GET /rsrc.php/v3iLAB4/y7/l/es_LA/os-5rQsb0ZO.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Sep 2023 02:37:01 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FexWMFHk+taAU5IrtH6n9Q==
x-fb-debug: 2QmyEbHgz0+kTtZ18iGcA+x14DZQSCyn4IDku1Pb93vnFuhHzlAlBv+FV3VEaeatSWIpzq4jEtiq5nTlxWsFtA==
content-length: 18716
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 02:50:37 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.tripadvisor.com.pe/img/cdsi/img2/branding/150_logo-11900-2.png
151.101.86.40200 OK 0 B URL HTTP/2 www.tripadvisor.com.pe/img/cdsi/img2/branding/150_logo-11900-2.png
IP 151.101.86.40:0
GET /img/cdsi/img2/branding/150_logo-11900-2.png HTTP/1.1
Host: www.tripadvisor.com.pe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: envoy
cache-control: private, max-age=43200
expires: Thu, 15 Sep 2022 14:50:35 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
set-cookie: TADCID=AfxeeCYQByt06Y5kABQCFdpBzzOuRA-9xvCxaMyI13Azt7PWSKY85nABAtO_WTGvL11kgM2g8Sif7bvgu4VbYf67OGcwvMEz7u0; Domain=www.tripadvisor.com.pe; Expires=Sun, 12-Sep-2032 02:50:35 GMT; Path=/; Secure; HttpOnly
TAUnique=%1%enc%3A2So9wtYnBk%2Fk7nWhzVPS6vln53cgl0ayCd3DwuZi7RI2jHwltRJPGQ%3D%3D; Domain=.tripadvisor.com.pe; Expires=Sat, 14-Sep-2024 02:50:35 GMT; Path=/; HttpOnly
__vt=wubt-5qkb1GbU6tHABQCIf6-ytF7QiW7ovfhqc-AvSARV0MHT3IlpkPhJH80LhzsZkxAVCdTR_shavMrlZCdwXJ6x0oF_3pOhy5RIbGlnDwFdcGgzNFCsaLFzYvAcy74Sj-rKkYo0O3sMRQLqMsrxFHxAQ; Domain=www.tripadvisor.com.pe; Expires=Thu, 15-Sep-2022 03:50:35 GMT; Path=/; Secure; HttpOnly
TASession=V2ID.53A9137B7600BB102E5C990E8286DA32*SQ.1*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*TRA.true; Domain=.tripadvisor.com.pe; Path=/
ServerPool=X; Domain=.tripadvisor.com.pe; Path=/
TACds=A.1.11900.2.2022-09-14; Domain=.tripadvisor.com.pe; Expires=Mon, 14-Nov-2022 02:50:35 GMT; Path=/
timing-allow-origin: https://www.tripadvisor.com
content-type: image/png
accept-ranges: bytes
date: Thu, 15 Sep 2022 02:50:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1663-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1663210235.924643,VS0,VE351
X-Firefox-Spdy: h2
www.cuscoinkasfeat.com/wp-content/uploads/2017/04/LOGOINCAS2.png
75.102.57.149200 OK 0 B URL HTTP/2 www.cuscoinkasfeat.com/wp-content/uploads/2017/04/LOGOINCAS2.png
IP 75.102.57.149:0
GET /wp-content/uploads/2017/04/LOGOINCAS2.png HTTP/1.1
Host: www.cuscoinkasfeat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 22 Sep 2022 02:50:33 GMT
content-type: image/png
last-modified: Thu, 08 Feb 2018 18:21:28 GMT
accept-ranges: bytes
content-length: 92024
date: Thu, 15 Sep 2022 02:50:33 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.15.4/css/v4-shims.css?ver=2.0.1
172.64.168.32200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.15.4/css/v4-shims.css?ver=2.0.1
IP 172.64.168.32:0
GET /releases/v5.15.4/css/v4-shims.css?ver=2.0.1 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cuscoinkasfeat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 02:50:34 GMT
content-type: text/css
x-amz-id-2: 8gVMALk6soBb3Gp4gPDkQ7sGryWl0HBr7HMbfOIi8xsl2vXJOXbEfIemMAo//M2nsg9rEs2nIAk=
x-amz-request-id: 2GD0QGZ81MKE65QM
last-modified: Wed, 04 Aug 2021 20:43:22 GMT
etag: W/"a034d3c71bee546f625877d7932917f8"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 23743400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MFAtObStp1bQ8ZwxrLD7PbPuQYbwfH1uIh6SnFdl%2BDYOZCg3VT3ISQE4R%2FYn6FhPeg6l959N%2BjiFk%2Bf2Z%2Bmfkk1UDpnr1NqJYhi0JcmOaAiYNX0jYecotYfc18DQ4OzgzFt35XLC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74ae0e3ea9577321-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2