clk.asia/9bkCq
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /9bkCq HTTP/1.1
Host: clk.asia
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 25 Nov 2022 04:21:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 25 Nov 2022 05:21:05 GMT
Location: https://enit.in/9bkCq
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BOIj72n1rqSQ5UsB8ojF9RpUVRiW5UnjWjW55KsJxN6ogc%2BypOftl6071kLVQugSiQ468xzynGzusbfxxKRINqqkWmyMvht2WuBCNNalhUE%2BuiHFH0HkqN9Anw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f79875389f0b69-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2643
Expires: Fri, 25 Nov 2022 05:05:08 GMT
Date: Fri, 25 Nov 2022 04:21:05 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6304
Cache-Control: max-age=114909
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:05 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 12:16:14 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9008
Expires: Fri, 25 Nov 2022 06:51:13 GMT
Date: Fri, 25 Nov 2022 04:21:05 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4b972e626f8dd1b315b0aa45cd5a481d
a6f038679dbecedb9e88c9a5aef59cee10dccd64
37242b7d76d9b933ee8dbe4e6cc8e5f0e528a87e2405d55c4972f654afe2601c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "37242B7D76D9B933EE8DBE4E6CC8E5F0E528A87E2405D55C4972F654AFE2601C"
Last-Modified: Wed, 23 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13468
Expires: Fri, 25 Nov 2022 08:05:33 GMT
Date: Fri, 25 Nov 2022 04:21:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 04:19:03 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 122
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GbQSV0jg1DdcuFgOfmC50V/x5GvCIRtoTy6NR0TmpldViYl8JX0clyggLEukiX/Qm892lo3v1rE=
x-amz-request-id: FG4W2XGC2BP8WVF1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 03:40:39 GMT
age: 2426
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 04:21:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 04:08:53 GMT
cache-control: public,max-age=3600
age: 733
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4b972e626f8dd1b315b0aa45cd5a481d
a6f038679dbecedb9e88c9a5aef59cee10dccd64
37242b7d76d9b933ee8dbe4e6cc8e5f0e528a87e2405d55c4972f654afe2601c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "37242B7D76D9B933EE8DBE4E6CC8E5F0E528A87E2405D55C4972F654AFE2601C"
Last-Modified: Wed, 23 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13467
Expires: Fri, 25 Nov 2022 08:05:33 GMT
Date: Fri, 25 Nov 2022 04:21:06 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6380
Cache-Control: max-age=109923
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:06 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:53:09 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 0f141a7442421b339785507b64371732
50a10da8ef8de57b44b905d7437b2340f66040e9
4d214c2dd06f93e23676c4383e2ae98e495828ce9a5ef3e38d6c9a35f468b1a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4929
Cache-Control: max-age=155634
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:06 GMT
Etag: "637fec63-117"
Expires: Sat, 26 Nov 2022 23:35:00 GMT
Last-Modified: Thu, 24 Nov 2022 22:12:51 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
i.imgur.com/Zm57T8a.png
200 OK 6.7 kB IP
File type PNG image data, 209 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash 77cc82df02e99141dbafcdac433b3b6a
47e0af5e3390578f5b49dcb41760ff924455db7a
906ee764e0c4fa542fa06304d3e88b4ac165f080f93fffe89a6c543481c6764d
GET /Zm57T8a.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sun, 14 Jan 2018 15:19:31 GMT
etag: "77cc82df02e99141dbafcdac433b3b6a"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Fri, 25 Nov 2022 04:21:06 GMT
age: 2061484
x-served-by: cache-iad-kiad7000040-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 8148, 4
x-timer: S1669350067.597032,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 6699
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62b4ddfbb9dcc21e93339a61a113dde0
2ce7f74e7cb734069fdff43fcfe0cd882d01228b
7268e33ae9d4c637105744bd7d15559e743317c40c2d37d09a07747e35e0cd24
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7268E33AE9D4C637105744BD7D15559E743317C40C2D37D09A07747E35E0CD24"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1770
Expires: Fri, 25 Nov 2022 04:50:36 GMT
Date: Fri, 25 Nov 2022 04:21:06 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 0f141a7442421b339785507b64371732
50a10da8ef8de57b44b905d7437b2340f66040e9
4d214c2dd06f93e23676c4383e2ae98e495828ce9a5ef3e38d6c9a35f468b1a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4929
Cache-Control: max-age=155634
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:06 GMT
Etag: "637fec63-117"
Expires: Sat, 26 Nov 2022 23:35:00 GMT
Last-Modified: Thu, 24 Nov 2022 22:12:51 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 216d858ad02d0f9765e7844973400881
62a1fb9255bfc33b0fbc8960502272a42ecf73f6
f90483fc88bda7a012064641af0cf72c31d2ae7522097e4ac52f0b096b519f79
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/XixSUf8-F0k/hqdefault.jpg
200 OK 12 kB URL HTTP/2 i.ytimg.com/vi/XixSUf8-F0k/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash 1622f1bf3a222cdbb00402d2615b8a25
4849e88d0bbb946a2564561730cc604bd23d0860
ac2f1bb2790397162b648d07d637107d780af8d99419736653c09c4f4a91e4e1
GET /vi/XixSUf8-F0k/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 11719
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 02:38:12 GMT
expires: Fri, 25 Nov 2022 04:38:12 GMT
cache-control: public, max-age=7200
etag: "1667846379"
content-type: image/jpeg
age: 6174
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-M8H9XNQ
200 OK 46 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-M8H9XNQ
IP
File type ASCII text, with very long lines (1921)
Hash 69a9345fa64a3b556ee7804d225b708b
73174d6b20f1d4670bad90a58cf2afba76d35c19
bbf7b8bf06b2172d640c96f2a44d06a48c26fd8d79f6e519399b5756a909940c
GET /gtm.js?id=GTM-M8H9XNQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 04:21:06 GMT
expires: Fri, 25 Nov 2022 04:21:06 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46041
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: C/vuOLoOURKl4vu1z/EP3w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: LsZqwBRPtui5MaT7DdzQYyxkPPY=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 216d858ad02d0f9765e7844973400881
62a1fb9255bfc33b0fbc8960502272a42ecf73f6
f90483fc88bda7a012064641af0cf72c31d2ae7522097e4ac52f0b096b519f79
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
system-notify.app/event?z=737225
200 OK 0 B URL HTTP/2 system-notify.app/event?z=737225
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event?z=737225 HTTP/1.1
Host: system-notify.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 82
Origin: https://enit.in
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 04:21:06 GMT
content-length: 0
access-control-allow-origin: https://enit.in
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token
access-control-expose-headers: Authorization
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
pragma: no-cache
expires: Tue, 11 Jan 1994 00:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-PMDXVPR38M&l=dataLayer&cx=c
200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-PMDXVPR38M&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (27334)
Hash 030a63321a5648af986852b64de57146
3f36118b62b0aa2dcea40bd9596910389ed18861
c3632d340f263c40f7d05a3e226490052f55301bafcd10adcd8554988d3f533f
GET /gtag/js?id=G-PMDXVPR38M&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 04:21:06 GMT
expires: Fri, 25 Nov 2022 04:21:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78305
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 02:41:08 GMT
expires: Fri, 25 Nov 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 5998
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 82 kB IP
File type gzip compressed data, from Unix\012- data
Hash 88efca05131e74ed59321fbec6f7bfd3
ccd3102c0a3e64a77e2453a25e844be3513df976
54bd0266a00043644b54affbb37933b0d8eece312c994c6154f764dcb2fe1b2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (38393)
Hash ef2ca45c9e49b233616d7162a46e8085
c6fee4fa440667fb9a73ee678d3bc90d9c003509
4fa070d2dc3a1260d7ca892ba28bf24bbb3383771e43f07cb45520736911f1e6
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27210
date: Fri, 25 Nov 2022 04:21:06 GMT
expires: Fri, 25 Nov 2022 04:21:06 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1402 / 710 of 1000 / last-modified: 1669244741"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&a=2092600813&t=pageview&_s=1&dl=https%3A%2F%2Fenit.in%2F9bkCq&ul=en-us&de=UTF-8&dt=Clicksfly%20Dynamic%20Link&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEABAAAAACAAI~&jid=676603541&gjid=1745743560&cid=1717541344.1669350066&tid=UA-110155808-1&_gid=674365154.1669350067&_r=1>m=2wgb90M8H9XNQ&z=1993039663
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=2092600813&t=pageview&_s=1&dl=https%3A%2F%2Fenit.in%2F9bkCq&ul=en-us&de=UTF-8&dt=Clicksfly%20Dynamic%20Link&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEABAAAAACAAI~&jid=676603541&gjid=1745743560&cid=1717541344.1669350066&tid=UA-110155808-1&_gid=674365154.1669350067&_r=1>m=2wgb90M8H9XNQ&z=1993039663
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j98&a=2092600813&t=pageview&_s=1&dl=https%3A%2F%2Fenit.in%2F9bkCq&ul=en-us&de=UTF-8&dt=Clicksfly%20Dynamic%20Link&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEABAAAAACAAI~&jid=676603541&gjid=1745743560&cid=1717541344.1669350066&tid=UA-110155808-1&_gid=674365154.1669350067&_r=1>m=2wgb90M8H9XNQ&z=1993039663 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://enit.in
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://enit.in
date: Fri, 25 Nov 2022 04:21:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.hcaptcha.com/1/api.js
200 OK 82 kB IP
Hash 060b32a5bc5d8c5c99865fd3210608b7
322ff5810a4f65a8ed5746a79147a6478637420e
7561a2e24a287cf61497e087ee16f77a554459eb05f8ca9494516fb668db8701
GET /1/api.js HTTP/1.1
Host: js.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 04:21:06 GMT
content-type: application/javascript
cf-ray: 76f7987c389c0b55-OSL
age: 0
cache-control: max-age=120
etag: W/"8df1a5bd964ef63bb59c99633bc5d1e6"
last-modified: Wed, 23 Nov 2022 05:54:43 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: AQdt0XIKP8YD2tyvALwTlUvvnkXq3YODE2oEVcZMz8mI6mxe7gRRXg==
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 668ae1589554a0164efb90d0ade13af2
d7cd3e26e2fe8141efc5de4e561e4f9fe15ecb8b
f640fae0699a9ebbd77b31ab3def65a4e3f6c478cb086f610d9eba2b78c2cfcc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F640FAE0699A9EBBD77B31AB3DEF65A4E3F6C478CB086F610D9EBA2B78C2CFCC"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3632
Expires: Fri, 25 Nov 2022 05:21:39 GMT
Date: Fri, 25 Nov 2022 04:21:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e4187a43946d8ea5337bb1347757b7a6
05dd65dd513f85c93974052ac7fa227aaf250fe4
495169482368a285ec3b8581b00365be1dd6c011d0278437bc55be18a6231adf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "495169482368A285EC3B8581B00365BE1DD6C011D0278437BC55BE18A6231ADF"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12677
Expires: Fri, 25 Nov 2022 07:52:24 GMT
Date: Fri, 25 Nov 2022 04:21:07 GMT
Connection: keep-alive
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-110155808-1&cid=1717541344.1669350066&jid=676603541&gjid=1745743560&_gid=674365154.1669350067&_u=YADAAEAAAAAAACAAI~&z=1457707405
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-110155808-1&cid=1717541344.1669350066&jid=676603541&gjid=1745743560&_gid=674365154.1669350067&_u=YADAAEAAAAAAACAAI~&z=1457707405
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-110155808-1&cid=1717541344.1669350066&jid=676603541&gjid=1745743560&_gid=674365154.1669350067&_u=YADAAEAAAAAAACAAI~&z=1457707405 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://enit.in
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://enit.in
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 04:21:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bringsconserve.com/f5714487e6057988b1d2804f1f8fef0c/invoke.js
200 OK 9.3 kB URL HTTP/1.1 bringsconserve.com/f5714487e6057988b1d2804f1f8fef0c/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25112), with no line terminators
Hash 343ec91c7d57cdaac86b310bb2fea4cc
5625f9bc77905f763325047c88d8b4a3441f813b
1564c929d4ee0efff0e5c6224ea2c94363e97e7ac357a015ea2887cf6ed6c84e
Analyzer Verdict Alert quad9 Sinkholed
GET /f5714487e6057988b1d2804f1f8fef0c/invoke.js HTTP/1.1
Host: bringsconserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Fri, 25 Nov 2022 04:21:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 03da98d37df9c5785520c9b407865519
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
s4.histats.com/stats/0.php?3963887&@f16&@g1&@h1&@i1&@j1669350066094&@k0&@l1&@mClicksfly%20Dynamic%20Link&@n0User=275717|Plan=Minimum&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:136124007&@b3:1669350066&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fenit.in%2F9bkCq%23&@w
200 OK 64 B URL HTTP/1.1 s4.histats.com/stats/0.php?3963887&@f16&@g1&@h1&@i1&@j1669350066094&@k0&@l1&@mClicksfly%20Dynamic%20Link&@n0User=275717|Plan=Minimum&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:136124007&@b3:1669350066&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fenit.in%2F9bkCq%23&@w
IP
File type ASCII text, with no line terminators
Hash 1c1259c66dcd0d314175c00c85adb37c
61615016c8795be283fb5bb3d95666f168ddde70
519006393afd9294a019bf66e76faa1515cb0b49abd3227745a855c67908f2f4
GET /stats/0.php?3963887&@f16&@g1&@h1&@i1&@j1669350066094&@k0&@l1&@mClicksfly%20Dynamic%20Link&@n0User=275717|Plan=Minimum&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:136124007&@b3:1669350066&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fenit.in%2F9bkCq%23&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 04:21:07 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 64
Connection: close
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6fe23ae41ec0cbb3d702b1c64028cd13
e0e4d852454a5eae80a797aaa6f0991834dcc19a
47a12f27ec1ec271d17295d822c69d1b49c6a24107f3f7ce06a320688fae7f3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6a795cdfedb5c954b3000dbb2dc7f90
b17bb97d224d89bc8227cddf5a8386e100751cda
78c411d16c1be2d8da51fc409cb45ec2aca8d32b77ab4d1a1a1fe5d1a33552e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=enit.in
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=enit.in
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=enit.in HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 25 Nov 2022 04:21:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=enit.in
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=enit.in
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=enit.in HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 25 Nov 2022 04:21:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5348b4ee74a9c894db836c2b61cc7086
9a65195ea94f2f7326007ad86ca1675010f4c00e
d2c786795613bca9a9bee9143dc278307b828a07b40880cfa20e087895aa359a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=124861
Date: Fri, 25 Nov 2022 04:21:07 GMT
Etag: "637f7219-1d7"
Expires: Sat, 26 Nov 2022 15:02:08 GMT
Last-Modified: Thu, 24 Nov 2022 13:31:05 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Iuw0u5jy5Anr9anbFm6OZljeiyEV7lX49yeuqVitXVA7yFCsGjuL0Q==
Age: 5463
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ffeec706cf04ce887b2b29162d94d708
084166ca91c5974b37e2e0ae797a21f05b40b8f5
776a52216dc85ee65125aafd819951fbb465cefb6cdc497c7df7608bd0a5b567
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enit.in
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 04:21:07 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://enit.in
access-control-allow-credentials: true
set-cookie: uid_id2=48861513-b5a0-4978-98d5-bf53a67bcc59:1:1; expires=Mon, 22 Nov 2032 04:21:07 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-PMDXVPR38M>m=2oeb90&_p=2092600813&cid=1717541344.1669350066&ul=en-us&sr=1280x1024&_s=1&sid=1669350066&sct=1&seg=0&dl=https%3A%2F%2Fenit.in%2F9bkCq&dt=Clicksfly%20Dynamic%20Link&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-PMDXVPR38M>m=2oeb90&_p=2092600813&cid=1717541344.1669350066&ul=en-us&sr=1280x1024&_s=1&sid=1669350066&sct=1&seg=0&dl=https%3A%2F%2Fenit.in%2F9bkCq&dt=Clicksfly%20Dynamic%20Link&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-PMDXVPR38M>m=2oeb90&_p=2092600813&cid=1717541344.1669350066&ul=en-us&sr=1280x1024&_s=1&sid=1669350066&sct=1&seg=0&dl=https%3A%2F%2Fenit.in%2F9bkCq&dt=Clicksfly%20Dynamic%20Link&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enit.in
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://enit.in
date: Fri, 25 Nov 2022 04:21:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e48017be02b261f556d0faafa991f4e3.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
200 OK 2.7 kB URL HTTP/2 e48017be02b261f556d0faafa991f4e3.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash e8ee9c011ff8e1f464e74c37113119ee
64ad72134ea05877de0f2b6503f5c0d8c3f78197
09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
GET /safeframe/1-0-40/html/container.html HTTP/1.1
Host: e48017be02b261f556d0faafa991f4e3.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Fri, 25 Nov 2022 04:21:07 GMT
expires: Sat, 25 Nov 2023 04:21:07 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59ea8f913c9385f85b63452a66844173
56504ffc6c52d717869646f91a5a6c2ac0cc0754
e0b038b77dcf1a97a15863fa55c4fe4f8e06086aef759639b779af1619b7634f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0B038B77DCF1A97A15863FA55C4FE4F8E06086AEF759639B779AF1619B7634F"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7501
Expires: Fri, 25 Nov 2022 06:26:08 GMT
Date: Fri, 25 Nov 2022 04:21:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2352
Expires: Fri, 25 Nov 2022 05:00:19 GMT
Date: Fri, 25 Nov 2022 04:21:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2352
Expires: Fri, 25 Nov 2022 05:00:19 GMT
Date: Fri, 25 Nov 2022 04:21:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2352
Expires: Fri, 25 Nov 2022 05:00:19 GMT
Date: Fri, 25 Nov 2022 04:21:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2352
Expires: Fri, 25 Nov 2022 05:00:19 GMT
Date: Fri, 25 Nov 2022 04:21:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ba10698-9bc6-45a1-b97d-7209a0a31f7c.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ba10698-9bc6-45a1-b97d-7209a0a31f7c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d0105e45becaf777227cac49e320321
d279a0b70061fe3d8268f1e69c515c0c4439dc80
ea9571213d9a57318cde036c108d4c973c627ce4cd225534ee246349ed4ba3a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ba10698-9bc6-45a1-b97d-7209a0a31f7c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5211
x-amzn-requestid: 706d0037-bbff-417a-9fa3-8ebbbf7b4df1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wFOToAMF12Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-01b6908212b2ab9c5caa34a0;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JbjUiHcVu2ytN848RqI8Ygkd0R9YCnq_OeFdc5Y5JTymA2k9HN4lZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:01 GMT
etag: "d279a0b70061fe3d8268f1e69c515c0c4439dc80"
content-type: image/jpeg
age: 24366
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 05:04:28 GMT
age: 83799
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 648677a7e7bab1896a190d2e5fb7243c
6217a262002244ef3f2e8034076a735cafd9888a
72f2913f7c0770ebab0f2683bdc1ec5a5db8872e8f2c62a8fd5c9178b95dbb06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4270
x-amzn-requestid: 7327f8fb-804b-4d09-83dc-628e35ffa74b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8xFwXoAMFkqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-33f83cea2c585279140f4f59;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rKROwsZ-X8yDd4iVaYBaNFe6bgHaThxafIt76PBgLoOTrPMqAVQ9iQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:22:43 GMT
age: 21504
etag: "6217a262002244ef3f2e8034076a735cafd9888a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b6ee13d43732f7c764a49500d092865
5d15fd672e968d59b541e4d5d0d01cd5e69f4075
fc3623d527147e1c6aab399251ed8d527e6eefdee6ad7183f00df2613498bfe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8006
x-amzn-requestid: 78aab013-df11-464b-a1c7-ee41b7e77b40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-AHSrIAMFvKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38c-4d795f410a57fc2c21d7075d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NntLZ3wUdcX9kEo-afFLU0TPKgqAlSK3bToNh2mmoqoyLBJINNk7ow==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:54:39 GMT
age: 23188
etag: "5d15fd672e968d59b541e4d5d0d01cd5e69f4075"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bd50a26-dc90-4a0f-9ac7-e2950f1e9d5f.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bd50a26-dc90-4a0f-9ac7-e2950f1e9d5f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c67bf2eb6ca2d7e2b34df1dbe8e7b36
cdacea802c72450973140387aafacae9df78b0aa
52c1b293ec45c98077953699dcc48d77d4aee2bb12f38ef21c692af9171b6db2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bd50a26-dc90-4a0f-9ac7-e2950f1e9d5f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8275
x-amzn-requestid: 350ffdb7-723f-4dfc-95e8-e76364d1313d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8xGPAoAMFbWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-10d4c566779b9b9f4bb9112d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nJ7Ppbn5tLf-PIzvOMM-JK3paiWilTRRs5f93VzR0dZ5XDeIGwWonw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:55:55 GMT
age: 23112
etag: "cdacea802c72450973140387aafacae9df78b0aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d60bb22-4a30-4570-8561-eb3a2833a058.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d60bb22-4a30-4570-8561-eb3a2833a058.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f59a591b222397ff0f01c22a0786e660
6a8504212141af411a18ce58960c8bb52e8116ac
624847cfdfcd770d2dee8a2b85f3c7c480cda58ba2aef1135184f3dffc30d1f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d60bb22-4a30-4570-8561-eb3a2833a058.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8277
x-amzn-requestid: e84a5668-cd91-42af-b6de-5eb694ea56e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-KFtmIAMF00Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38d-64513fb257d83b9847c82929;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: O4PtH20kVWgH-Jf_TivPqMqjnwrZB_8XvZAkDDzLLFPXVjqzkz1YJw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:59:22 GMT
age: 22905
etag: "6a8504212141af411a18ce58960c8bb52e8116ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-110155808-1&cid=1717541344.1669350066&jid=676603541&_u=YADAAEAAAAAAACAAI~&z=1110057309
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-110155808-1&cid=1717541344.1669350066&jid=676603541&_u=YADAAEAAAAAAACAAI~&z=1110057309
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-110155808-1&cid=1717541344.1669350066&jid=676603541&_u=YADAAEAAAAAAACAAI~&z=1110057309 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 04:21:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/gen_204?id=gpt_paw&pvsid=4404230501634422&vrg=2022111501&nw_id=211182487%5C%2C22695258558&nslots=2&pub_url=https%3A%2F%2Fenit.in%2F9bkCq%23&sig=0&req=0&req_cnt=2&dm=-1
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=gpt_paw&pvsid=4404230501634422&vrg=2022111501&nw_id=211182487%5C%2C22695258558&nslots=2&pub_url=https%3A%2F%2Fenit.in%2F9bkCq%23&sig=0&req=0&req_cnt=2&dm=-1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=gpt_paw&pvsid=4404230501634422&vrg=2022111501&nw_id=211182487%5C%2C22695258558&nslots=2&pub_url=https%3A%2F%2Fenit.in%2F9bkCq%23&sig=0&req=0&req_cnt=2&dm=-1 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 04:21:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-110155808-1&cid=1717541344.1669350066&jid=676603541&_u=YADAAEAAAAAAACAAI~&z=1110057309
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-110155808-1&cid=1717541344.1669350066&jid=676603541&_u=YADAAEAAAAAAACAAI~&z=1110057309
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-110155808-1&cid=1717541344.1669350066&jid=676603541&_u=YADAAEAAAAAAACAAI~&z=1110057309 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 04:21:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hopefullyapricot.com/ntv.json?key=f5714487e6057988b1d2804f1f8fef0c&vstc=3
200 OK 12 kB URL HTTP/1.1 hopefullyapricot.com/ntv.json?key=f5714487e6057988b1d2804f1f8fef0c&vstc=3
IP
File type JSON data\012- , ASCII text, with very long lines (12460), with no line terminators
Hash 1b11d6c611a32636da1aff6df2598c2d
8d919dad6f5aeccc11087558b0b1e850c5f48a32
836e7067837acdd88acdeda899c7c87b7824aca51476f51c0fdfb1dc0f693e0f
GET /ntv.json?key=f5714487e6057988b1d2804f1f8fef0c&vstc=3 HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enit.in
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 25 Nov 2022 04:21:08 GMT
Content-Type: application/json
Content-Length: 12460
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://enit.in
Access-Control-Allow-Origin: https://enit.in
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=14860822; expires=Sat, 26 Nov 2022 04:21:07 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 26 Nov 2022 04:21:08 GMT; secure; SameSite=None
uncs=1; expires=Sat, 26 Nov 2022 04:21:08 GMT; secure; SameSite=None
pdhtkv49=true; expires=Sat, 26 Nov 2022 04:21:08 GMT; secure; SameSite=None
uncs49=1; expires=Sat, 26 Nov 2022 04:21:08 GMT; secure; SameSite=None
nlecf5714487e6057988b1d2804f1f8fef0c=[2229214,2106764,2229212]; expires=Fri, 25 Nov 2022 04:21:13 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e3836e530a514466201d08b502902e0b
Strict-Transport-Security: max-age=0; includeSubdomains
hopefullyapricot.com/88/ce/cd/88cecd8375b0917a15dbebb389d2385f.js
200 OK 29 kB URL HTTP/1.1 hopefullyapricot.com/88/ce/cd/88cecd8375b0917a15dbebb389d2385f.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 1f990510ee54a9f67d37d0f9097b0970
f066b80e6ca053158089723a6ea76dc87f6b9648
1dd19b478d7e6b04fa1d03057fce1c19213dd8e5eac433c42d1046f0b22531c4
GET /88/ce/cd/88cecd8375b0917a15dbebb389d2385f.js HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 25 Nov 2022 04:21:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d92dd1e0cf605e61ae75a29c478d54d0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f77ee08c588d427b057eff8c9680d8c
26f765e4563acb057df4a3e49f50346567cafaea
bf75efdaa7e228686b2c4ea1167a30e234af14e0a8389f4542d1ecd1d83a2ec2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20221110/r20110914/abg_lite_fy2021.js
200 OK 9.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221110/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1596)
Hash 6b277303de172776fc303dfc195982ef
fe6c6af5791742485ae21c4dc02edbee2b426886
c536ada7aa8f4679e0e4f0b99703aab79f6fe32659d777f9c01a7785aa06a36d
GET /pagead/js/r20221110/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 9428
x-xss-protection: 0
date: Thu, 24 Nov 2022 15:59:24 GMT
expires: Thu, 08 Dec 2022 15:59:24 GMT
cache-control: public, max-age=1209600
age: 44504
etag: 246362764157784863
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 48 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3502)
Hash 297e24828abaf97fb29460fd75369140
e9e02d737f1bcf9874a55562edff5f795a1c170c
cdbe4e689ca060e94f00f0aa4c45a89efacddac90df42929ff42a3bff44a9d3e
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 48265
date: Fri, 25 Nov 2022 04:21:08 GMT
expires: Fri, 25 Nov 2022 04:21:08 GMT
cache-control: private, max-age=3000
etag: "1668095300071091"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3uQHP%2FQgigiCh2ZBUdBJ9fzZmXEPizFGgjGJuys5V1dVT8qp7mqquqcnOUUXZA8eBryop843yQbXuLjgVdGJlyUg7FwkoDl48%2BJFWDzKzA6MPqh636vvHb7vvfr4IL8gFDk733rX7Cmt2VKjQv2Xt1UiTOH8jZt%2BQCv0qr%2Btkiv1q35%2Fctne6wFtVOgr%2FtuSd81SlQaUBjTwV5WVkekvTVmo9KQdVNq0Uq9WgkYdffvf2uUeHPMgehfkGSgx%2Ft%2FOg%2FtQfIQk%2FmZFum5m0lffinPNMmPRE8fvJ93EFAniOYyshyg5nnXDuDEhn12CSY5nDmB6hxMHCNWYeL8ECJPjmUyEvaPHSkMNmSAUT6LojSD1CIqNwM0tKPGQAFxgYxNJfGfD2ILtPmbZhB2TxUd%2FQRVjsvjbs0jie8ta9f0bRueZMolDPyqh%2BiOozghpfopsz4MqTsGzj6DEz2Tp0TqS%2BHDTaQMlyql7pUZQ0QhaDsCch3xylIc88pCnHmJx7rNGO6K0GYVRrdaqc85rNc4brSuiIWr1VkSR84m8AbJ0AK4H4HYfqd1HVw1g8x%2Fgdko44cFlY%2BK9t4%2BeKFFIgsIRFIygUARFRlD0yiOhXdWVd4R2eRjMcnWWa%2BXQZJ0DdmSyjkzIQXpBnp7O5ffRc%2BjKcz9qNIN6vdWUV2ij2W61wkBUW7QeBVErkhHlcKqEcpemVvcmS1r5EakaE%2FLnawjZKZw%2BBVeXwfIArBg2qxRsZ1hvUewlX3OteNdFerfCTQxhSqTZIrJd70BfkOenQvwXP4HkZ9fuvnDy%2F%2BClP8BtidSW%2BED9RNDRt4fXTUEOr5vCkfubaaZitccmy7uRsUwu3H1H7hbGirUVN%2FjyDT4hJvDkpnTZOkuESjqOfLWshJB21VguyXdrbluGW7nbWc5tkqfrW2%2BursWplc4pk4zA1MPNv8HVmCx%2B%2BP30Wz41vgdlR7B5iTg%2FI7OAMqfg6T5cOlfvDIHV854wvYQiL4e2Gs4ftSLQcl6zsIT7Vx3O8YG7jY5dAMtuIYlL9GyJni7B9AAuf2KYpfbs2oPPJ%2FEFQr0wDLVdOAy11Z%2BOyeWFi%2Bl8J%2BhXOHXuy0ZEI0mrMozaYdRkVLSjejtk7UA2wwYLkLkx31%2F%2B9h8AAAD%2F%2FwEAAP%2F%2FtRazv3gEAAA%3D
200 OK 7 B URL HTTP/1.1 hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3uQHP%2FQgigiCh2ZBUdBJ9fzZmXEPizFGgjGJuys5V1dVT8qp7mqquqcnOUUXZA8eBryop843yQbXuLjgVdGJlyUg7FwkoDl48%2BJFWDzKzA6MPqh636vvHb7vvfr4IL8gFDk733rX7Cmt2VKjQv2Xt1UiTOH8jZt%2BQCv0qr%2Btkiv1q35%2Fctne6wFtVOgr%2FtuSd81SlQaUBjTwV5WVkekvTVmo9KQdVNq0Uq9WgkYdffvf2uUeHPMgehfkGSgx%2Ft%2FOg%2FtQfIQk%2FmZFum5m0lffinPNMmPRE8fvJ93EFAniOYyshyg5nnXDuDEhn12CSY5nDmB6hxMHCNWYeL8ECJPjmUyEvaPHSkMNmSAUT6LojSD1CIqNwM0tKPGQAFxgYxNJfGfD2ILtPmbZhB2TxUd%2FQRVjsvjbs0jie8ta9f0bRueZMolDPyqh%2BiOozghpfopsz4MqTsGzj6DEz2Tp0TqS%2BHDTaQMlyql7pUZQ0QhaDsCch3xylIc88pCnHmJx7rNGO6K0GYVRrdaqc85rNc4brSuiIWr1VkSR84m8AbJ0AK4H4HYfqd1HVw1g8x%2Fgdko44cFlY%2BK9t4%2BeKFFIgsIRFIygUARFRlD0yiOhXdWVd4R2eRjMcnWWa%2BXQZJ0DdmSyjkzIQXpBnp7O5ffRc%2BjKcz9qNIN6vdWUV2ij2W61wkBUW7QeBVErkhHlcKqEcpemVvcmS1r5EakaE%2FLnawjZKZw%2BBVeXwfIArBg2qxRsZ1hvUewlX3OteNdFerfCTQxhSqTZIrJd70BfkOenQvwXP4HkZ9fuvnDy%2F%2BClP8BtidSW%2BED9RNDRt4fXTUEOr5vCkfubaaZitccmy7uRsUwu3H1H7hbGirUVN%2FjyDT4hJvDkpnTZOkuESjqOfLWshJB21VguyXdrbluGW7nbWc5tkqfrW2%2BursWplc4pk4zA1MPNv8HVmCx%2B%2BP30Wz41vgdlR7B5iTg%2FI7OAMqfg6T5cOlfvDIHV854wvYQiL4e2Gs4ftSLQcl6zsIT7Vx3O8YG7jY5dAMtuIYlL9GyJni7B9AAuf2KYpfbs2oPPJ%2FEFQr0wDLVdOAy11Z%2BOyeWFi%2Bl8J%2BhXOHXuy0ZEI0mrMozaYdRkVLSjejtk7UA2wwYLkLkx31%2F%2B9h8AAAD%2F%2FwEAAP%2F%2FtRazv3gEAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3uQHP%2FQgigiCh2ZBUdBJ9fzZmXEPizFGgjGJuys5V1dVT8qp7mqquqcnOUUXZA8eBryop843yQbXuLjgVdGJlyUg7FwkoDl48%2BJFWDzKzA6MPqh636vvHb7vvfr4IL8gFDk733rX7Cmt2VKjQv2Xt1UiTOH8jZt%2BQCv0qr%2Btkiv1q35%2Fctne6wFtVOgr%2FtuSd81SlQaUBjTwV5WVkekvTVmo9KQdVNq0Uq9WgkYdffvf2uUeHPMgehfkGSgx%2Ft%2FOg%2FtQfIQk%2FmZFum5m0lffinPNMmPRE8fvJ93EFAniOYyshyg5nnXDuDEhn12CSY5nDmB6hxMHCNWYeL8ECJPjmUyEvaPHSkMNmSAUT6LojSD1CIqNwM0tKPGQAFxgYxNJfGfD2ILtPmbZhB2TxUd%2FQRVjsvjbs0jie8ta9f0bRueZMolDPyqh%2BiOozghpfopsz4MqTsGzj6DEz2Tp0TqS%2BHDTaQMlyql7pUZQ0QhaDsCch3xylIc88pCnHmJx7rNGO6K0GYVRrdaqc85rNc4brSuiIWr1VkSR84m8AbJ0AK4H4HYfqd1HVw1g8x%2Fgdko44cFlY%2BK9t4%2BeKFFIgsIRFIygUARFRlD0yiOhXdWVd4R2eRjMcnWWa%2BXQZJ0DdmSyjkzIQXpBnp7O5ffRc%2BjKcz9qNIN6vdWUV2ij2W61wkBUW7QeBVErkhHlcKqEcpemVvcmS1r5EakaE%2FLnawjZKZw%2BBVeXwfIArBg2qxRsZ1hvUewlX3OteNdFerfCTQxhSqTZIrJd70BfkOenQvwXP4HkZ9fuvnDy%2F%2BClP8BtidSW%2BED9RNDRt4fXTUEOr5vCkfubaaZitccmy7uRsUwu3H1H7hbGirUVN%2FjyDT4hJvDkpnTZOkuESjqOfLWshJB21VguyXdrbluGW7nbWc5tkqfrW2%2BursWplc4pk4zA1MPNv8HVmCx%2B%2BP30Wz41vgdlR7B5iTg%2FI7OAMqfg6T5cOlfvDIHV854wvYQiL4e2Gs4ftSLQcl6zsIT7Vx3O8YG7jY5dAMtuIYlL9GyJni7B9AAuf2KYpfbs2oPPJ%2FEFQr0wDLVdOAy11Z%2BOyeWFi%2Bl8J%2BhXOHXuy0ZEI0mrMozaYdRkVLSjejtk7UA2wwYLkLkx31%2F%2B9h8AAAD%2F%2FwEAAP%2F%2FtRazv3gEAAA%3D HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Cookie: u_pl=14860822; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecf5714487e6057988b1d2804f1f8fef0c=[2229214,2106764,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 25 Nov 2022 04:21:08 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f46be573e05a554798074a1ab8f04042
Strict-Transport-Security: max-age=0; includeSubdomains
hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3kQQvaiIIHhoFhQFnVTPz86Me1iMayQYk7i7knN1VfWknOqupqp7epJTdGHZg4cBL%2Bqp802ywTWKC14VnXhZgsLORQKagzcvXoTFo8zswOiDqve9%2Bt7h%2B96rW%2Fv5OaHI2dnmu2ZXac2WGhXqv7ylEmEK56%2Ff8ANaoZf9LZVcql%2F2%2B5PL9l4PaKNCX%2FHflrxrlqo0oDSggb%2BirIxMf2nKQqXH7aDSppV6tRI06ujb%2F9cu9%2BCYB9E7J89AifFj2%2FfvQfERkvibq9J1M5O%2B%2Blaca5YZi544ej%2FpJqZIEM9hZD1EydGsG8aNCfn0AkxyNHMA0zuYOECoxsT7NUCYHM1kIuwdPlIaasgEoXgSRW8EqUdQbARubkKJBwTgAusbSOI768YWbOcRyybsmCw%2B%2FBuqGJPF359FEn%2B9rFXfv250nimTOPSjEqo%2FguqMkOYnyHY9qOIEPPsISvxClh6uIYkPNpw2UKKculdqBBWNoOUAzHnIJ0d5yCMPeeohFmc%2Ba7QjSptRGNVqrTrnvFbjvNG6JBqiVm9FFDmfyBsgSwfgegBu95DaPXTVADb%2FAW67hBMeXDYm3nt76IkShSQoHEHBCApFUGQERa88FNpVXXlHaJeHwSxXZ7lWDk3W2WeHJuvIhOyn5%2BTp6Vz%2BGD2Hrjzzo0YzqNdbTXmJNprtVisMRLVF61EQtSIZUQ6nSih3YWp1d7Kkqz8iVWNC%2FnoNITuB0yfg6iJYHoAVw2aVgm0P6y2K3eQrrhXvukjvVLiJIUyJNFtEtuPt63Py%2FFTIxYVzSH565e4Lx48HL%2F0JbkuktsQH6ieCjr49vGYKcnDNFI7c20gzFatdNlne9YxlcuHuO3KnMFasXnWDL97gE2ICj29Il62xRKik48iXy0oIaVeM5ZJ8t%2Bq2ZLiZu%2B3l3CZ5urb55spqnFrpnDLJCEw92PgHXI3J4offT7%2FlUz%2FfgrIj2LxEnJ%2BSWUCZE%2FB0Dy6dq3eGwOp5T5h6KPJyaKvh%2FFErAi3nNQtLuP%2FU4Rzvu9vo2AWw7CaSuETPlujpEkwP4PInhllqT6%2Fc%2F2wSnyPUC8NQ24WDUFv9yXS0Y%2BK%2F%2BPEE%2FQanznzZiGgkaVWGUTuMmoyKdlRvh6wdyGbYYAEyN%2BZ7y9%2F%2BCwAA%2F%2F8BAAD%2F%2FzGw7FF4BAAA
200 OK 7 B URL HTTP/1.1 hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3kQQvaiIIHhoFhQFnVTPz86Me1iMayQYk7i7knN1VfWknOqupqp7epJTdGHZg4cBL%2Bqp802ywTWKC14VnXhZgsLORQKagzcvXoTFo8zswOiDqve9%2Bt7h%2B96rW%2Fv5OaHI2dnmu2ZXac2WGhXqv7ylEmEK56%2Ff8ANaoZf9LZVcql%2F2%2B5PL9l4PaKNCX%2FHflrxrlqo0oDSggb%2BirIxMf2nKQqXH7aDSppV6tRI06ujb%2F9cu9%2BCYB9E7J89AifFj2%2FfvQfERkvibq9J1M5O%2B%2Blaca5YZi544ej%2FpJqZIEM9hZD1EydGsG8aNCfn0AkxyNHMA0zuYOECoxsT7NUCYHM1kIuwdPlIaasgEoXgSRW8EqUdQbARubkKJBwTgAusbSOI768YWbOcRyybsmCw%2B%2FBuqGJPF359FEn%2B9rFXfv250nimTOPSjEqo%2FguqMkOYnyHY9qOIEPPsISvxClh6uIYkPNpw2UKKculdqBBWNoOUAzHnIJ0d5yCMPeeohFmc%2Ba7QjSptRGNVqrTrnvFbjvNG6JBqiVm9FFDmfyBsgSwfgegBu95DaPXTVADb%2FAW67hBMeXDYm3nt76IkShSQoHEHBCApFUGQERa88FNpVXXlHaJeHwSxXZ7lWDk3W2WeHJuvIhOyn5%2BTp6Vz%2BGD2Hrjzzo0YzqNdbTXmJNprtVisMRLVF61EQtSIZUQ6nSih3YWp1d7Kkqz8iVWNC%2FnoNITuB0yfg6iJYHoAVw2aVgm0P6y2K3eQrrhXvukjvVLiJIUyJNFtEtuPt63Py%2FFTIxYVzSH565e4Lx48HL%2F0JbkuktsQH6ieCjr49vGYKcnDNFI7c20gzFatdNlne9YxlcuHuO3KnMFasXnWDL97gE2ICj29Il62xRKik48iXy0oIaVeM5ZJ8t%2Bq2ZLiZu%2B3l3CZ5urb55spqnFrpnDLJCEw92PgHXI3J4offT7%2FlUz%2FfgrIj2LxEnJ%2BSWUCZE%2FB0Dy6dq3eGwOp5T5h6KPJyaKvh%2FFErAi3nNQtLuP%2FU4Rzvu9vo2AWw7CaSuETPlujpEkwP4PInhllqT6%2Fc%2F2wSnyPUC8NQ24WDUFv9yXS0Y%2BK%2F%2BPEE%2FQanznzZiGgkaVWGUTuMmoyKdlRvh6wdyGbYYAEyN%2BZ7y9%2F%2BCwAA%2F%2F8BAAD%2F%2FzGw7FF4BAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3kQQvaiIIHhoFhQFnVTPz86Me1iMayQYk7i7knN1VfWknOqupqp7epJTdGHZg4cBL%2Bqp802ywTWKC14VnXhZgsLORQKagzcvXoTFo8zswOiDqve9%2Bt7h%2B96rW%2Fv5OaHI2dnmu2ZXac2WGhXqv7ylEmEK56%2Ff8ANaoZf9LZVcql%2F2%2B5PL9l4PaKNCX%2FHflrxrlqo0oDSggb%2BirIxMf2nKQqXH7aDSppV6tRI06ujb%2F9cu9%2BCYB9E7J89AifFj2%2FfvQfERkvibq9J1M5O%2B%2Blaca5YZi544ej%2FpJqZIEM9hZD1EydGsG8aNCfn0AkxyNHMA0zuYOECoxsT7NUCYHM1kIuwdPlIaasgEoXgSRW8EqUdQbARubkKJBwTgAusbSOI768YWbOcRyybsmCw%2B%2FBuqGJPF359FEn%2B9rFXfv250nimTOPSjEqo%2FguqMkOYnyHY9qOIEPPsISvxClh6uIYkPNpw2UKKculdqBBWNoOUAzHnIJ0d5yCMPeeohFmc%2Ba7QjSptRGNVqrTrnvFbjvNG6JBqiVm9FFDmfyBsgSwfgegBu95DaPXTVADb%2FAW67hBMeXDYm3nt76IkShSQoHEHBCApFUGQERa88FNpVXXlHaJeHwSxXZ7lWDk3W2WeHJuvIhOyn5%2BTp6Vz%2BGD2Hrjzzo0YzqNdbTXmJNprtVisMRLVF61EQtSIZUQ6nSih3YWp1d7Kkqz8iVWNC%2FnoNITuB0yfg6iJYHoAVw2aVgm0P6y2K3eQrrhXvukjvVLiJIUyJNFtEtuPt63Py%2FFTIxYVzSH565e4Lx48HL%2F0JbkuktsQH6ieCjr49vGYKcnDNFI7c20gzFatdNlne9YxlcuHuO3KnMFasXnWDL97gE2ICj29Il62xRKik48iXy0oIaVeM5ZJ8t%2Bq2ZLiZu%2B3l3CZ5urb55spqnFrpnDLJCEw92PgHXI3J4offT7%2FlUz%2FfgrIj2LxEnJ%2BSWUCZE%2FB0Dy6dq3eGwOp5T5h6KPJyaKvh%2FFErAi3nNQtLuP%2FU4Rzvu9vo2AWw7CaSuETPlujpEkwP4PInhllqT6%2Fc%2F2wSnyPUC8NQ24WDUFv9yXS0Y%2BK%2F%2BPEE%2FQanznzZiGgkaVWGUTuMmoyKdlRvh6wdyGbYYAEyN%2BZ7y9%2F%2BCwAA%2F%2F8BAAD%2F%2FzGw7FF4BAAA HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Cookie: u_pl=14860822; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecf5714487e6057988b1d2804f1f8fef0c=[2229214,2106764,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 25 Nov 2022 04:21:08 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4b79c2cd988814e3af5e72a11c2e34ec
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d544e647515cb189a384f9c20ec9bd24
b7b52713f8f4c02a47192ef56456e16d0ca408a9
375fc9ebeb579498db5f3df773f4a94debbab4b0f809abc2fa414e9c2bea052c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "375FC9EBEB579498DB5F3DF773F4A94DEBBAB4B0F809ABC2FA414E9C2BEA052C"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9539
Expires: Fri, 25 Nov 2022 07:00:07 GMT
Date: Fri, 25 Nov 2022 04:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d544e647515cb189a384f9c20ec9bd24
b7b52713f8f4c02a47192ef56456e16d0ca408a9
375fc9ebeb579498db5f3df773f4a94debbab4b0f809abc2fa414e9c2bea052c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "375FC9EBEB579498DB5F3DF773F4A94DEBBAB4B0F809ABC2FA414E9C2BEA052C"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9539
Expires: Fri, 25 Nov 2022 07:00:07 GMT
Date: Fri, 25 Nov 2022 04:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d544e647515cb189a384f9c20ec9bd24
b7b52713f8f4c02a47192ef56456e16d0ca408a9
375fc9ebeb579498db5f3df773f4a94debbab4b0f809abc2fa414e9c2bea052c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "375FC9EBEB579498DB5F3DF773F4A94DEBBAB4B0F809ABC2FA414E9C2BEA052C"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9539
Expires: Fri, 25 Nov 2022 07:00:07 GMT
Date: Fri, 25 Nov 2022 04:21:08 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
200 OK 28 kB URL HTTP/2 cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash f4fabf64be47ce667e0cfc150667b36c
234d722efa06cbedfdad9c1bb497a942997741dd
272b7875492a55c6f53a4e4704e715cc5b3cc4e5093758cbfedd95441bfe98d8
GET /cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 04:21:08 GMT
content-type: image/jpeg
content-length: 27606
server: nginx/1.17.6
last-modified: Tue, 10 Aug 2021 09:17:59 GMT
etag: "61124447-6bd6"
expires: Sun, 27 Nov 2022 04:21:08 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3okgelERQfDQLCgKOumen50Z97AYYyQYk7i7knN1VfWknOqupqp7epJTdEX24GHAi3rqfJNscI3igldFJ16WoLBzkYDm4M2LF2HxKD0ZGH1Q9d6r7x2%2B73v10X52Tjxk9Gzzbb0rlaKLzarnvrglY65z667fdH2v6l11t2R8pXHVHZSX6b%2Fqe82q95L7pmA9vVjzfM%2FzPd9dkUaEerA4RSGT445f7XjVRq3qNxsYmP%2F3NnNgqQPePydPQfLJI9v370GyMeLom2Vhe6lOXn4jyhRNtUGfH70b92Kdx4jmZWgchPHRbBraTgj59BJ0fDRTAN0%2FKBUgkBPi%2FOojiI9mNBH0Dy%2BYBgoiRsAfR94fQ6gxJB2D6VuQ%2FAEBGMf6BuLozro2Od25QGmJTsjCw78h8wlZ%2BP1pxNHXS0oO3BtaZanUscUgLCAHY8juGEl2gnTXgcxPwNIPIPkvZPHhGuLoYMMqDcmLqXopx5DhGEoMQa2DrDzSQRY6yBIHET9zabMTel4rDMJ6vd1gjNXrjDXbV3iT1xvt0EPGSnpDpMkQTA3BzB4Ss4eeHMJkP8BuF7DcgU0nxHlnD31eIBcEuSXIKUEuCfKUIO8Xh1zZmi3ucGWzwJ%2Fl2izXi5FOu%2Fv0UKddEZP95Jw8OfXlj%2FEz6IkzN2y2%2FEaj3RJXvGar024HPq%2B1vUboh%2B1QhB6DlQWkvTSVulsuaflHJHJCyF%2BvIKAnsOoETF4GzXzQfNSqeaDbo0bbw278FVOS9WyodqpMR%2BC6QJIuIN1x9tU5eXZK5HLlNwh2eu3uc8eP%2Bi%2F8CWYKJKbAe%2FIngq66Pbquc3JwXeeW3NtIUhnJXVou70ZKU1G5%2B5bYybXhq8t2%2BMVrrATK8vimsOkajbmMu5Z8uSQ5F2ZFGybId6t2SwSbmd1eykycJWubr6%2BsRokR1kodj0Hlg41%2FwOSELLz%2F%2FfRbPvHzh5BmDJMViLJTMgtIfQKW7MEmc%2FZWExg1nwmSCvKsGJlaMH9UkkCJeU%2BDAvY%2FfTCv9%2B1tdE0FNL2FOCrQNwX6qgBVQ9jssVGamNNr9z8r43MEqjIKlKkcBMqoT0przyfEff7jC5OtPHNFM%2FRC4dVEEHaCsEU93gkbnYB2fNEKmtRHaidsb%2BnbfwEAAP%2F%2FAQAA%2F%2F8VwCCmeAQAAA%3D%3D
200 OK 367 kB URL HTTP/1.1 hopefullyapricot.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3okgelERQfDQLCgKOumen50Z97AYYyQYk7i7knN1VfWknOqupqp7epJTdEX24GHAi3rqfJNscI3igldFJ16WoLBzkYDm4M2LF2HxKD0ZGH1Q9d6r7x2%2B73v10X52Tjxk9Gzzbb0rlaKLzarnvrglY65z667fdH2v6l11t2R8pXHVHZSX6b%2Fqe82q95L7pmA9vVjzfM%2FzPd9dkUaEerA4RSGT445f7XjVRq3qNxsYmP%2F3NnNgqQPePydPQfLJI9v370GyMeLom2Vhe6lOXn4jyhRNtUGfH70b92Kdx4jmZWgchPHRbBraTgj59BJ0fDRTAN0%2FKBUgkBPi%2FOojiI9mNBH0Dy%2BYBgoiRsAfR94fQ6gxJB2D6VuQ%2FAEBGMf6BuLozro2Od25QGmJTsjCw78h8wlZ%2BP1pxNHXS0oO3BtaZanUscUgLCAHY8juGEl2gnTXgcxPwNIPIPkvZPHhGuLoYMMqDcmLqXopx5DhGEoMQa2DrDzSQRY6yBIHET9zabMTel4rDMJ6vd1gjNXrjDXbV3iT1xvt0EPGSnpDpMkQTA3BzB4Ss4eeHMJkP8BuF7DcgU0nxHlnD31eIBcEuSXIKUEuCfKUIO8Xh1zZmi3ucGWzwJ%2Fl2izXi5FOu%2Fv0UKddEZP95Jw8OfXlj%2FEz6IkzN2y2%2FEaj3RJXvGar024HPq%2B1vUboh%2B1QhB6DlQWkvTSVulsuaflHJHJCyF%2BvIKAnsOoETF4GzXzQfNSqeaDbo0bbw278FVOS9WyodqpMR%2BC6QJIuIN1x9tU5eXZK5HLlNwh2eu3uc8eP%2Bi%2F8CWYKJKbAe%2FIngq66Pbquc3JwXeeW3NtIUhnJXVou70ZKU1G5%2B5bYybXhq8t2%2BMVrrATK8vimsOkajbmMu5Z8uSQ5F2ZFGybId6t2SwSbmd1eykycJWubr6%2BsRokR1kodj0Hlg41%2FwOSELLz%2F%2FfRbPvHzh5BmDJMViLJTMgtIfQKW7MEmc%2FZWExg1nwmSCvKsGJlaMH9UkkCJeU%2BDAvY%2FfTCv9%2B1tdE0FNL2FOCrQNwX6qgBVQ9jssVGamNNr9z8r43MEqjIKlKkcBMqoT0przyfEff7jC5OtPHNFM%2FRC4dVEEHaCsEU93gkbnYB2fNEKmtRHaidsb%2BnbfwEAAP%2F%2FAQAA%2F%2F8VwCCmeAQAAA%3D%3D
IP
File type gzip compressed data, from Unix\012- data
Size 367 kB (366961 bytes)
Hash 8cc1107147a38010081eebec6fcc4054
c2715d392565be5ec18f61101892290b098590a9
060ee5c43e069ae01df6e9c750848c8357d84c9a0154c51fc808dc6d0f60d4ff
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3okgelERQfDQLCgKOumen50Z97AYYyQYk7i7knN1VfWknOqupqp7epJTdEX24GHAi3rqfJNscI3igldFJ16WoLBzkYDm4M2LF2HxKD0ZGH1Q9d6r7x2%2B73v10X52Tjxk9Gzzbb0rlaKLzarnvrglY65z667fdH2v6l11t2R8pXHVHZSX6b%2Fqe82q95L7pmA9vVjzfM%2FzPd9dkUaEerA4RSGT445f7XjVRq3qNxsYmP%2F3NnNgqQPePydPQfLJI9v370GyMeLom2Vhe6lOXn4jyhRNtUGfH70b92Kdx4jmZWgchPHRbBraTgj59BJ0fDRTAN0%2FKBUgkBPi%2FOojiI9mNBH0Dy%2BYBgoiRsAfR94fQ6gxJB2D6VuQ%2FAEBGMf6BuLozro2Od25QGmJTsjCw78h8wlZ%2BP1pxNHXS0oO3BtaZanUscUgLCAHY8juGEl2gnTXgcxPwNIPIPkvZPHhGuLoYMMqDcmLqXopx5DhGEoMQa2DrDzSQRY6yBIHET9zabMTel4rDMJ6vd1gjNXrjDXbV3iT1xvt0EPGSnpDpMkQTA3BzB4Ss4eeHMJkP8BuF7DcgU0nxHlnD31eIBcEuSXIKUEuCfKUIO8Xh1zZmi3ucGWzwJ%2Fl2izXi5FOu%2Fv0UKddEZP95Jw8OfXlj%2FEz6IkzN2y2%2FEaj3RJXvGar024HPq%2B1vUboh%2B1QhB6DlQWkvTSVulsuaflHJHJCyF%2BvIKAnsOoETF4GzXzQfNSqeaDbo0bbw278FVOS9WyodqpMR%2BC6QJIuIN1x9tU5eXZK5HLlNwh2eu3uc8eP%2Bi%2F8CWYKJKbAe%2FIngq66Pbquc3JwXeeW3NtIUhnJXVou70ZKU1G5%2B5bYybXhq8t2%2BMVrrATK8vimsOkajbmMu5Z8uSQ5F2ZFGybId6t2SwSbmd1eykycJWubr6%2BsRokR1kodj0Hlg41%2FwOSELLz%2F%2FfRbPvHzh5BmDJMViLJTMgtIfQKW7MEmc%2FZWExg1nwmSCvKsGJlaMH9UkkCJeU%2BDAvY%2FfTCv9%2B1tdE0FNL2FOCrQNwX6qgBVQ9jssVGamNNr9z8r43MEqjIKlKkcBMqoT0przyfEff7jC5OtPHNFM%2FRC4dVEEHaCsEU93gkbnYB2fNEKmtRHaidsb%2BnbfwEAAP%2F%2FAQAA%2F%2F8VwCCmeAQAAA%3D%3D HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Cookie: u_pl=14860822; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecf5714487e6057988b1d2804f1f8fef0c=[2229214,2106764,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 25 Nov 2022 04:21:08 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a8cde20fe10a0f0e0b22c16b50d150fc
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg
200 OK 29 kB URL HTTP/2 cdn.cloudimagesb.com/cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 76f54f42b70d14a6d6bfe2f8b1945265
197daa3737be8968bf39ff28000663c1c17deeb2
c864fde3026e05a2cc34b4348fa4888d3ae44202179277877d082cadd9971abc
GET /cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 04:21:08 GMT
content-type: image/jpeg
content-length: 28852
server: nginx/1.17.6
last-modified: Tue, 10 Aug 2021 09:18:59 GMT
etag: "61124483-70b4"
expires: Sun, 27 Nov 2022 04:21:08 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg
200 OK 30 kB URL HTTP/2 cdn.cloudimagesb.com/cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash a87779ccaaa4021b0b4f33812742679a
87322480f885dc0b6463c182b7bdb3eb60ab2592
a8f8dbc930527f94496d5a9883b6034e27a673090a89b518596d6e2b656df96f
GET /cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 04:21:08 GMT
content-type: image/jpeg
content-length: 30127
server: nginx/1.17.6
last-modified: Tue, 10 Aug 2021 09:15:44 GMT
etag: "611243c0-75af"
expires: Sun, 27 Nov 2022 04:21:08 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
hopefullyapricot.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3kQQvaiIIHhoFhQFnXTPz06Pe1iMayQYk7i7knN1VfWknOqupqp7epJTdGHZg4cBL%2Bqp802ywTWKC14VnXhZgsLORQKagzcvXoTFo%2FTswOiDqve9%2Bt7h%2B96rW%2Fv5OfGQ07PNd%2FWuVIoutWqe%2B%2FKWTLgurLt%2Bw%2FW9mnfZ3ZLJpeZld1Bdpv%2B677Vq3ivu24L19FLd8z3P93x3RRoR6cHSlIVMjzt%2BrePVmvWa32piYP5f29yBpQ54%2F5w8A8knj23fvwfJxkjib64K28t0%2Bupbca5opg36%2FOj9pJfoIkE8h5FxECVHs25oOyHk0wvQydHMAXT%2FoHKAUE6I86uPMDmayUTYP3ykNFQQCUL%2BJIr%2BGEKNIekYTN%2BE5A8IwDjWN5DEd9a1KejOI5ZW7IQsPvwbspiQxd%2BfRRJ%2FvazkwL2uVZ5JnVgMohJyMIbsjpHmJ8h2HcjiBCz7CJL%2FQpYeriGJDzas0pC8nLqXcgwZjaHEENQ6yKsjHeSRgzx1EPMzl7Y6kee1ozBqNIImY6zRYKwVXOIt3mgGkYecVfKGyNIhmBqCmT2kZg89OYTJf4DdLmG5A5tNiPPeHvq8RCEICktQUIJCEhQZQdEvD7mydVve4crmoT%2FL9VlulCOddffpoc66IiH76Tl5ejqXP8bPoSfO3KjV9pvNoC0uea12JwhCn9cDrxn5URCJyGOwsoS0F6ZWd6slXf0RqZwQ8tdrCOkJrDoBkxdBcx%2B0GLXrHuj2qBl42E2%2BYkqyno3UTo3pGFyXSLNFZDvOvjonz0%2BFXFw4h2CnV%2B6%2BcPy4%2F9KfYKZEakp8IH8i6Krbo2u6IAfXdGHJvY00k7HcpdXyrmc0Ewt33xE7hTZ89aodfvEGq4gKHt8QNlujCZdJ15IvlyXnwqxowwT5btVuiXAzt9vLuUnydG3zzZXVODXCWqmTMah8sPEPmJyQxQ%2B%2Fn37Lp36%2BBWnGMHmJOD8ls4DUJ2DpHmw6V281gVHznjB1UOTlyNTD%2BaOSBErMaxqWsP%2Bpwznet7fRNQug2U0kcYm%2BKdFXJagawuZPjLLUnF65%2F1kVnyNUC6NQmYWDUBn1yXS0E%2BK%2B%2BHGFfoOVZ27Lb4ogDNqM81Aw7rfrjaDheXXOm%2B2O8DvI7ITtLX%2F7LwAAAP%2F%2FAQAA%2F%2F8luGK3eAQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 hopefullyapricot.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3kQQvaiIIHhoFhQFnXTPz06Pe1iMayQYk7i7knN1VfWknOqupqp7epJTdGHZg4cBL%2Bqp802ywTWKC14VnXhZgsLORQKagzcvXoTFo%2FTswOiDqve9%2Bt7h%2B96rW%2Fv5OfGQ07PNd%2FWuVIoutWqe%2B%2FKWTLgurLt%2Bw%2FW9mnfZ3ZLJpeZld1Bdpv%2B677Vq3ivu24L19FLd8z3P93x3RRoR6cHSlIVMjzt%2BrePVmvWa32piYP5f29yBpQ54%2F5w8A8knj23fvwfJxkjib64K28t0%2Bupbca5opg36%2FOj9pJfoIkE8h5FxECVHs25oOyHk0wvQydHMAXT%2FoHKAUE6I86uPMDmayUTYP3ykNFQQCUL%2BJIr%2BGEKNIekYTN%2BE5A8IwDjWN5DEd9a1KejOI5ZW7IQsPvwbspiQxd%2BfRRJ%2FvazkwL2uVZ5JnVgMohJyMIbsjpHmJ8h2HcjiBCz7CJL%2FQpYeriGJDzas0pC8nLqXcgwZjaHEENQ6yKsjHeSRgzx1EPMzl7Y6kee1ozBqNIImY6zRYKwVXOIt3mgGkYecVfKGyNIhmBqCmT2kZg89OYTJf4DdLmG5A5tNiPPeHvq8RCEICktQUIJCEhQZQdEvD7mydVve4crmoT%2FL9VlulCOddffpoc66IiH76Tl5ejqXP8bPoSfO3KjV9pvNoC0uea12JwhCn9cDrxn5URCJyGOwsoS0F6ZWd6slXf0RqZwQ8tdrCOkJrDoBkxdBcx%2B0GLXrHuj2qBl42E2%2BYkqyno3UTo3pGFyXSLNFZDvOvjonz0%2BFXFw4h2CnV%2B6%2BcPy4%2F9KfYKZEakp8IH8i6Krbo2u6IAfXdGHJvY00k7HcpdXyrmc0Ewt33xE7hTZ89aodfvEGq4gKHt8QNlujCZdJ15IvlyXnwqxowwT5btVuiXAzt9vLuUnydG3zzZXVODXCWqmTMah8sPEPmJyQxQ%2B%2Fn37Lp36%2BBWnGMHmJOD8ls4DUJ2DpHmw6V281gVHznjB1UOTlyNTD%2BaOSBErMaxqWsP%2Bpwznet7fRNQug2U0kcYm%2BKdFXJagawuZPjLLUnF65%2F1kVnyNUC6NQmYWDUBn1yXS0E%2BK%2B%2BHGFfoOVZ27Lb4ogDNqM81Aw7rfrjaDheXXOm%2B2O8DvI7ITtLX%2F7LwAAAP%2F%2FAQAA%2F%2F8luGK3eAQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3kQQvaiIIHhoFhQFnXTPz06Pe1iMayQYk7i7knN1VfWknOqupqp7epJTdGHZg4cBL%2Bqp802ywTWKC14VnXhZgsLORQKagzcvXoTFo%2FTswOiDqve9%2Bt7h%2B96rW%2Fv5OfGQ07PNd%2FWuVIoutWqe%2B%2FKWTLgurLt%2Bw%2FW9mnfZ3ZLJpeZld1Bdpv%2B677Vq3ivu24L19FLd8z3P93x3RRoR6cHSlIVMjzt%2BrePVmvWa32piYP5f29yBpQ54%2F5w8A8knj23fvwfJxkjib64K28t0%2Bupbca5opg36%2FOj9pJfoIkE8h5FxECVHs25oOyHk0wvQydHMAXT%2FoHKAUE6I86uPMDmayUTYP3ykNFQQCUL%2BJIr%2BGEKNIekYTN%2BE5A8IwDjWN5DEd9a1KejOI5ZW7IQsPvwbspiQxd%2BfRRJ%2FvazkwL2uVZ5JnVgMohJyMIbsjpHmJ8h2HcjiBCz7CJL%2FQpYeriGJDzas0pC8nLqXcgwZjaHEENQ6yKsjHeSRgzx1EPMzl7Y6kee1ozBqNIImY6zRYKwVXOIt3mgGkYecVfKGyNIhmBqCmT2kZg89OYTJf4DdLmG5A5tNiPPeHvq8RCEICktQUIJCEhQZQdEvD7mydVve4crmoT%2FL9VlulCOddffpoc66IiH76Tl5ejqXP8bPoSfO3KjV9pvNoC0uea12JwhCn9cDrxn5URCJyGOwsoS0F6ZWd6slXf0RqZwQ8tdrCOkJrDoBkxdBcx%2B0GLXrHuj2qBl42E2%2BYkqyno3UTo3pGFyXSLNFZDvOvjonz0%2BFXFw4h2CnV%2B6%2BcPy4%2F9KfYKZEakp8IH8i6Krbo2u6IAfXdGHJvY00k7HcpdXyrmc0Ewt33xE7hTZ89aodfvEGq4gKHt8QNlujCZdJ15IvlyXnwqxowwT5btVuiXAzt9vLuUnydG3zzZXVODXCWqmTMah8sPEPmJyQxQ%2B%2Fn37Lp36%2BBWnGMHmJOD8ls4DUJ2DpHmw6V281gVHznjB1UOTlyNTD%2BaOSBErMaxqWsP%2Bpwznet7fRNQug2U0kcYm%2BKdFXJagawuZPjLLUnF65%2F1kVnyNUC6NQmYWDUBn1yXS0E%2BK%2B%2BHGFfoOVZ27Lb4ogDNqM81Aw7rfrjaDheXXOm%2B2O8DvI7ITtLX%2F7LwAAAP%2F%2FAQAA%2F%2F8luGK3eAQAAA%3D%3D HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Cookie: u_pl=14860822; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecf5714487e6057988b1d2804f1f8fef0c=[2229214,2106764,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 25 Nov 2022 04:21:08 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9b04d5ac7ed1c6170b7dcaea9366f75e
Strict-Transport-Security: max-age=0; includeSubdomains
hopefullyapricot.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3uQHP%2FQgigiCh2ZBUdBJ9%2FzZ6XEPizFGgjGJuys5V1dVT8qp7mqquqcnOUUXZA8eBryop843yQbXuLjgVdGJlyUg7FwkoDl48%2BJFWDxKzw6MPqh636vvHb7vvfr4IL8gHnJ6vvWu3pNK0aVWzXNf3pYJ14V1N266vlfzrrrbMrnSvOoOqsv0X%2Fe9Vs17xX1bsJ5eqnu%2B5%2Fme765KIyI9WJqykOlJx691vFqzXvNbTQzMf2ubO7DUAe9fkGcg%2BeR%2FOw%2FuQ7IxkvibFWF7mU5ffSvOFc20QZ8fv5%2F0El0kiOcwMg6i5HjWDW0nhHx2CTo5njmA7h9WDhDKCXF%2B8REmxzOZCPtHj5WGCiJByJ9E0R9DqDEkHYPpW5D8IQEYx8YmkvjOhjYF3X3M0oqdkMVHf0EWE7L427NI4nvLSg7cG1rlmdSJxSAqIQdjyO4YaX6KbM%2BBLE7Bso8g%2Bc9k6dE6kvhw0yoNycupeynHkNEYSgxBrYO8OtJBHjnIUwcxP3dpqxN5XjsKo0YjaDLGGg3GWsEV3uKNZhB5yFklb4gsHYKpIZjZR2r20ZNDmPwH2J0Sljuw2YQ47%2B2jz0sUgqCwBAUlKCRBkREU%2FfKIK1u35R2ubB76s1yf5UY50ln3gB7prCsScpBekKenc%2Fl9%2FBx64tyNWm2%2F2Qza4orXaneCIPR5PfCakR8FkYg8BitLSHtpanWvWtLKj0jlhJA%2FX0NIT2HVKZi8DJr7oMWoXfdAd0bNwMNe8jVTkvVspHZrTMfgukSaLSLbdQ7UBXl%2BKsR98RMIdnbt7gsn%2F%2Fdf%2BgPMlEhNiQ%2FkTwRddXt0XRfk8LouLLm%2FmWYylnu0Wt6NjGZi4e47YrfQhq%2Bt2OGXb7CKqODJTWGzdZpwmXQt%2BWpZci7MqjZMkO%2FW7LYIt3K7s5ybJE%2FXt95cXYtTI6yVOhmDyoebf4PJCVn88Pvpt3xqcg%2FSjGHyEnF%2BRmYBqU%2FB0n3YdK7eagKj5j1heglFXo5MPZw%2FKkmgxLymYQn7rzqc4wN7G12zAJrdQhKX6JsSfVWCqiFs%2FsQoS83ZtQefV%2FEFQrUwCpVZOAyVUZ9OyOWFi%2Bl8K%2FQrrDx3W35TBGHQZpyHgnG%2FXW8EDc%2Brc95sd4TfQWYnbH%2F5238AAAD%2F%2FwEAAP%2F%2FoR49WXgEAAA%3D
200 OK 7 B URL HTTP/1.1 hopefullyapricot.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3uQHP%2FQgigiCh2ZBUdBJ9%2FzZ6XEPizFGgjGJuys5V1dVT8qp7mqquqcnOUUXZA8eBryop843yQbXuLjgVdGJlyUg7FwkoDl48%2BJFWDxKzw6MPqh636vvHb7vvfr4IL8gHnJ6vvWu3pNK0aVWzXNf3pYJ14V1N266vlfzrrrbMrnSvOoOqsv0X%2Fe9Vs17xX1bsJ5eqnu%2B5%2Fme765KIyI9WJqykOlJx691vFqzXvNbTQzMf2ubO7DUAe9fkGcg%2BeR%2FOw%2FuQ7IxkvibFWF7mU5ffSvOFc20QZ8fv5%2F0El0kiOcwMg6i5HjWDW0nhHx2CTo5njmA7h9WDhDKCXF%2B8REmxzOZCPtHj5WGCiJByJ9E0R9DqDEkHYPpW5D8IQEYx8YmkvjOhjYF3X3M0oqdkMVHf0EWE7L427NI4nvLSg7cG1rlmdSJxSAqIQdjyO4YaX6KbM%2BBLE7Bso8g%2Bc9k6dE6kvhw0yoNycupeynHkNEYSgxBrYO8OtJBHjnIUwcxP3dpqxN5XjsKo0YjaDLGGg3GWsEV3uKNZhB5yFklb4gsHYKpIZjZR2r20ZNDmPwH2J0Sljuw2YQ47%2B2jz0sUgqCwBAUlKCRBkREU%2FfKIK1u35R2ubB76s1yf5UY50ln3gB7prCsScpBekKenc%2Fl9%2FBx64tyNWm2%2F2Qza4orXaneCIPR5PfCakR8FkYg8BitLSHtpanWvWtLKj0jlhJA%2FX0NIT2HVKZi8DJr7oMWoXfdAd0bNwMNe8jVTkvVspHZrTMfgukSaLSLbdQ7UBXl%2BKsR98RMIdnbt7gsn%2F%2Fdf%2BgPMlEhNiQ%2FkTwRddXt0XRfk8LouLLm%2FmWYylnu0Wt6NjGZi4e47YrfQhq%2Bt2OGXb7CKqODJTWGzdZpwmXQt%2BWpZci7MqjZMkO%2FW7LYIt3K7s5ybJE%2FXt95cXYtTI6yVOhmDyoebf4PJCVn88Pvpt3xqcg%2FSjGHyEnF%2BRmYBqU%2FB0n3YdK7eagKj5j1heglFXo5MPZw%2FKkmgxLymYQn7rzqc4wN7G12zAJrdQhKX6JsSfVWCqiFs%2FsQoS83ZtQefV%2FEFQrUwCpVZOAyVUZ9OyOWFi%2Bl8K%2FQrrDx3W35TBGHQZpyHgnG%2FXW8EDc%2Brc95sd4TfQWYnbH%2F5238AAAD%2F%2FwEAAP%2F%2FoR49WXgEAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3uQHP%2FQgigiCh2ZBUdBJ9%2FzZ6XEPizFGgjGJuys5V1dVT8qp7mqquqcnOUUXZA8eBryop843yQbXuLjgVdGJlyUg7FwkoDl48%2BJFWDxKzw6MPqh636vvHb7vvfr4IL8gHnJ6vvWu3pNK0aVWzXNf3pYJ14V1N266vlfzrrrbMrnSvOoOqsv0X%2Fe9Vs17xX1bsJ5eqnu%2B5%2Fme765KIyI9WJqykOlJx691vFqzXvNbTQzMf2ubO7DUAe9fkGcg%2BeR%2FOw%2FuQ7IxkvibFWF7mU5ffSvOFc20QZ8fv5%2F0El0kiOcwMg6i5HjWDW0nhHx2CTo5njmA7h9WDhDKCXF%2B8REmxzOZCPtHj5WGCiJByJ9E0R9DqDEkHYPpW5D8IQEYx8YmkvjOhjYF3X3M0oqdkMVHf0EWE7L427NI4nvLSg7cG1rlmdSJxSAqIQdjyO4YaX6KbM%2BBLE7Bso8g%2Bc9k6dE6kvhw0yoNycupeynHkNEYSgxBrYO8OtJBHjnIUwcxP3dpqxN5XjsKo0YjaDLGGg3GWsEV3uKNZhB5yFklb4gsHYKpIZjZR2r20ZNDmPwH2J0Sljuw2YQ47%2B2jz0sUgqCwBAUlKCRBkREU%2FfKIK1u35R2ubB76s1yf5UY50ln3gB7prCsScpBekKenc%2Fl9%2FBx64tyNWm2%2F2Qza4orXaneCIPR5PfCakR8FkYg8BitLSHtpanWvWtLKj0jlhJA%2FX0NIT2HVKZi8DJr7oMWoXfdAd0bNwMNe8jVTkvVspHZrTMfgukSaLSLbdQ7UBXl%2BKsR98RMIdnbt7gsn%2F%2Fdf%2BgPMlEhNiQ%2FkTwRddXt0XRfk8LouLLm%2FmWYylnu0Wt6NjGZi4e47YrfQhq%2Bt2OGXb7CKqODJTWGzdZpwmXQt%2BWpZci7MqjZMkO%2FW7LYIt3K7s5ybJE%2FXt95cXYtTI6yVOhmDyoebf4PJCVn88Pvpt3xqcg%2FSjGHyEnF%2BRmYBqU%2FB0n3YdK7eagKj5j1heglFXo5MPZw%2FKkmgxLymYQn7rzqc4wN7G12zAJrdQhKX6JsSfVWCqiFs%2FsQoS83ZtQefV%2FEFQrUwCpVZOAyVUZ9OyOWFi%2Bl8K%2FQrrDx3W35TBGHQZpyHgnG%2FXW8EDc%2Brc95sd4TfQWYnbH%2F5238AAAD%2F%2FwEAAP%2F%2FoR49WXgEAAA%3D HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Cookie: u_pl=14860822; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecf5714487e6057988b1d2804f1f8fef0c=[2229214,2106764,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 25 Nov 2022 04:21:08 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3d53ba17865c49b6bae85a2aca63cf6d
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3dc1cfee826399a4a3842803e5f17055
c227398e206b222d2aba5a2eb13a2aba78562139
224f55aab5c18620bd50a6a2fd0b996a29cae883dd75cb1c5bd480d10510212f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "224F55AAB5C18620BD50A6A2FD0B996A29CAE883DD75CB1C5BD480D10510212F"
Last-Modified: Tue, 22 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4625
Expires: Fri, 25 Nov 2022 05:38:13 GMT
Date: Fri, 25 Nov 2022 04:21:08 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 60951c730d96e02c20219f2765873699
64d0ecb0d9001990841e9faa434d9239af4b6927
9eb0e510930409a6eed080afd7759a51ca4ecb58dd30ea04221cea917358f658
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvSOSOTXZxiF_Mi1lUz3dR_KhDAovBrdIinhanrRLP6P43O86X8cTFTAe1LaSpkNKn9EmBXCUWEnsanNdRUAAd-GqP3NI82oydRl5fLqlhaBmB0saeLanuXEylQV3P1rc3wq9W25Iq16czKekGHQ71WkOxTpVn13LnVo2Oa1pyCeNc1Z7idmQnrB_8x0BHjJn4Rawp6XiCvuuVTSy7fqyvhLLuS7DDRsFvnm9BBEQ_PkA3MNoPUeziwoFKua4rz5M0dHNXt-xtoJNbTezvPMIw2HB8jup_uojWQAAn_zZUt_sX61Ld14oWZ1BwKrTSWMMB2ixSyY3zl6SZxfzJhErn-0diZ0N_Jchwag_eZt93NJ8T-thUaqLY-s_twEjVkAfDm6a8K_M91rtxiQR0UMr9obxme4MPQSFQI7hxFIUdQbPVEfVCyRYSmbKyayYMYdqTmjhXZUqxqzycmfr-pC9t0tfKpsGX3z1VAXe_Lj2is00EZDDUgXHxUBRrV-FLzlhR7fxU9PkTbBpAl1pCtQBCA1g2vr9LKL4F2L4h-QFa45wELZm3mRRVf95gfBTMqyHw-ztpw6xtlBfgFuOJjENcooOha5orUdlCaRVHj45D_9NYmpcYA1hMhCgT_xW7zFIIhNPhruuc2RJZ_AvLgBzK4O6kuEk1YMYg4ykQWAu9G0P8fmQyPPiuR_HLnUCNhA_lWq1bZYp-b-c8AQORPFy-inu9meCGZYRZsDZFDMZZqLhfEE5ET6FtUWXdDhOSRryjOtFQ7FiD4DMDS5gKJ7QmzvdUW7Vf_Tr4V-j-zAIB1FhMPTj78h4d1YESijeEJvRGHNN1uKJD1Pkkk5SwXsIyz4W7C0mxdLYcews1FLCQvMHDGxcS4JLTrnlhh_-5yhNFXXa0VT304UQ0CA9ciR6ga10ugfSEAtMAA55ijoRiWrOSeSQ97OLVsNLUBeieskxO8Ad-JkeukgRlMNgkerfp2EAa9_hZX2mN9l0tTHSViItTaGkqISFxNxKyyD1_vnadfaRuTIwkm7nZ5uhwXAzXggBYrqruJbft-aUaaMtQPTZ95c8_LjImqiy5vvZcBW1GfHFe-sJBHYVkQc_eeGaY&sai=AMfl-YSUrmSone_iIPaeF-59sOpVIuqgzWMAbiqOD1rzmFMtxqccQHGO3ymAiIv-UKQ8-8f6mG_8fA5HYpaKB5-K4VtpPMBNDexQHhi4qPWdpE-4djVCo317E0OzzGtCjyTZ_sPteGclbuKPby7IJrWdlg94UgJyNyohYcrjcIsBoZnoBIuLxoS2JeE0K0SN64ytT5jHwNbuysK0t8cAdWWs8pTAItrzgpF70nQOZ2a1_Sy3HZM1UEA4eTdjYSdsnEQrzypIen4bSMjvLGEXZlrzfgUSnpoIEdAHLfYVXgoqni2aEPnXXNkhB-r6PBDo-Z_GSUL6fNh8eghGCidY9hNMhZ7g1jEvs_feGA8oWrVPWx-v9oQiHRqxZsRQpvQ4G46JwZf4HJqcJXgd6_rAwpyhmchiUgN7nL2wAaLsw1BQ91atFahzugew4OsjhaoO6HG8VszvAVMx0J8sPgOE1L0HdWdv5P-Tgc3oC_JEZA&sig=Cg0ArKJSzKFWHOq6iTq8EAE&uach_m=[UACH]&pr=missingexchangepricemacro&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=1&cisv=r20221110.12675&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvSOSOTXZxiF_Mi1lUz3dR_KhDAovBrdIinhanrRLP6P43O86X8cTFTAe1LaSpkNKn9EmBXCUWEnsanNdRUAAd-GqP3NI82oydRl5fLqlhaBmB0saeLanuXEylQV3P1rc3wq9W25Iq16czKekGHQ71WkOxTpVn13LnVo2Oa1pyCeNc1Z7idmQnrB_8x0BHjJn4Rawp6XiCvuuVTSy7fqyvhLLuS7DDRsFvnm9BBEQ_PkA3MNoPUeziwoFKua4rz5M0dHNXt-xtoJNbTezvPMIw2HB8jup_uojWQAAn_zZUt_sX61Ld14oWZ1BwKrTSWMMB2ixSyY3zl6SZxfzJhErn-0diZ0N_Jchwag_eZt93NJ8T-thUaqLY-s_twEjVkAfDm6a8K_M91rtxiQR0UMr9obxme4MPQSFQI7hxFIUdQbPVEfVCyRYSmbKyayYMYdqTmjhXZUqxqzycmfr-pC9t0tfKpsGX3z1VAXe_Lj2is00EZDDUgXHxUBRrV-FLzlhR7fxU9PkTbBpAl1pCtQBCA1g2vr9LKL4F2L4h-QFa45wELZm3mRRVf95gfBTMqyHw-ztpw6xtlBfgFuOJjENcooOha5orUdlCaRVHj45D_9NYmpcYA1hMhCgT_xW7zFIIhNPhruuc2RJZ_AvLgBzK4O6kuEk1YMYg4ykQWAu9G0P8fmQyPPiuR_HLnUCNhA_lWq1bZYp-b-c8AQORPFy-inu9meCGZYRZsDZFDMZZqLhfEE5ET6FtUWXdDhOSRryjOtFQ7FiD4DMDS5gKJ7QmzvdUW7Vf_Tr4V-j-zAIB1FhMPTj78h4d1YESijeEJvRGHNN1uKJD1Pkkk5SwXsIyz4W7C0mxdLYcews1FLCQvMHDGxcS4JLTrnlhh_-5yhNFXXa0VT304UQ0CA9ciR6ga10ugfSEAtMAA55ijoRiWrOSeSQ97OLVsNLUBeieskxO8Ad-JkeukgRlMNgkerfp2EAa9_hZX2mN9l0tTHSViItTaGkqISFxNxKyyD1_vnadfaRuTIwkm7nZ5uhwXAzXggBYrqruJbft-aUaaMtQPTZ95c8_LjImqiy5vvZcBW1GfHFe-sJBHYVkQc_eeGaY&sai=AMfl-YSUrmSone_iIPaeF-59sOpVIuqgzWMAbiqOD1rzmFMtxqccQHGO3ymAiIv-UKQ8-8f6mG_8fA5HYpaKB5-K4VtpPMBNDexQHhi4qPWdpE-4djVCo317E0OzzGtCjyTZ_sPteGclbuKPby7IJrWdlg94UgJyNyohYcrjcIsBoZnoBIuLxoS2JeE0K0SN64ytT5jHwNbuysK0t8cAdWWs8pTAItrzgpF70nQOZ2a1_Sy3HZM1UEA4eTdjYSdsnEQrzypIen4bSMjvLGEXZlrzfgUSnpoIEdAHLfYVXgoqni2aEPnXXNkhB-r6PBDo-Z_GSUL6fNh8eghGCidY9hNMhZ7g1jEvs_feGA8oWrVPWx-v9oQiHRqxZsRQpvQ4G46JwZf4HJqcJXgd6_rAwpyhmchiUgN7nL2wAaLsw1BQ91atFahzugew4OsjhaoO6HG8VszvAVMx0J8sPgOE1L0HdWdv5P-Tgc3oC_JEZA&sig=Cg0ArKJSzKFWHOq6iTq8EAE&uach_m=[UACH]&pr=missingexchangepricemacro&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=1&cisv=r20221110.12675&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsvSOSOTXZxiF_Mi1lUz3dR_KhDAovBrdIinhanrRLP6P43O86X8cTFTAe1LaSpkNKn9EmBXCUWEnsanNdRUAAd-GqP3NI82oydRl5fLqlhaBmB0saeLanuXEylQV3P1rc3wq9W25Iq16czKekGHQ71WkOxTpVn13LnVo2Oa1pyCeNc1Z7idmQnrB_8x0BHjJn4Rawp6XiCvuuVTSy7fqyvhLLuS7DDRsFvnm9BBEQ_PkA3MNoPUeziwoFKua4rz5M0dHNXt-xtoJNbTezvPMIw2HB8jup_uojWQAAn_zZUt_sX61Ld14oWZ1BwKrTSWMMB2ixSyY3zl6SZxfzJhErn-0diZ0N_Jchwag_eZt93NJ8T-thUaqLY-s_twEjVkAfDm6a8K_M91rtxiQR0UMr9obxme4MPQSFQI7hxFIUdQbPVEfVCyRYSmbKyayYMYdqTmjhXZUqxqzycmfr-pC9t0tfKpsGX3z1VAXe_Lj2is00EZDDUgXHxUBRrV-FLzlhR7fxU9PkTbBpAl1pCtQBCA1g2vr9LKL4F2L4h-QFa45wELZm3mRRVf95gfBTMqyHw-ztpw6xtlBfgFuOJjENcooOha5orUdlCaRVHj45D_9NYmpcYA1hMhCgT_xW7zFIIhNPhruuc2RJZ_AvLgBzK4O6kuEk1YMYg4ykQWAu9G0P8fmQyPPiuR_HLnUCNhA_lWq1bZYp-b-c8AQORPFy-inu9meCGZYRZsDZFDMZZqLhfEE5ET6FtUWXdDhOSRryjOtFQ7FiD4DMDS5gKJ7QmzvdUW7Vf_Tr4V-j-zAIB1FhMPTj78h4d1YESijeEJvRGHNN1uKJD1Pkkk5SwXsIyz4W7C0mxdLYcews1FLCQvMHDGxcS4JLTrnlhh_-5yhNFXXa0VT304UQ0CA9ciR6ga10ugfSEAtMAA55ijoRiWrOSeSQ97OLVsNLUBeieskxO8Ad-JkeukgRlMNgkerfp2EAa9_hZX2mN9l0tTHSViItTaGkqISFxNxKyyD1_vnadfaRuTIwkm7nZ5uhwXAzXggBYrqruJbft-aUaaMtQPTZ95c8_LjImqiy5vvZcBW1GfHFe-sJBHYVkQc_eeGaY&sai=AMfl-YSUrmSone_iIPaeF-59sOpVIuqgzWMAbiqOD1rzmFMtxqccQHGO3ymAiIv-UKQ8-8f6mG_8fA5HYpaKB5-K4VtpPMBNDexQHhi4qPWdpE-4djVCo317E0OzzGtCjyTZ_sPteGclbuKPby7IJrWdlg94UgJyNyohYcrjcIsBoZnoBIuLxoS2JeE0K0SN64ytT5jHwNbuysK0t8cAdWWs8pTAItrzgpF70nQOZ2a1_Sy3HZM1UEA4eTdjYSdsnEQrzypIen4bSMjvLGEXZlrzfgUSnpoIEdAHLfYVXgoqni2aEPnXXNkhB-r6PBDo-Z_GSUL6fNh8eghGCidY9hNMhZ7g1jEvs_feGA8oWrVPWx-v9oQiHRqxZsRQpvQ4G46JwZf4HJqcJXgd6_rAwpyhmchiUgN7nL2wAaLsw1BQ91atFahzugew4OsjhaoO6HG8VszvAVMx0J8sPgOE1L0HdWdv5P-Tgc3oC_JEZA&sig=Cg0ArKJSzKFWHOq6iTq8EAE&uach_m=[UACH]&pr=missingexchangepricemacro&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=1&cisv=r20221110.12675&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://e48017be02b261f556d0faafa991f4e3.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
content-security-policy: script-src 'none'; object-src 'none'
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 04:21:08 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 04:36:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 25 Nov 2022 04:21:08 GMT
X-Firefox-Spdy: h2
s0.2mdn.net/simgad/3954556701996320095
200 OK 30 kB URL HTTP/2 s0.2mdn.net/simgad/3954556701996320095
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash 5e2e72c9d6b6af095b2fe9ba1ee26074
45ad0c9d2f92c13e342a7f1911d1a19e417405c4
9b32149176fccf582618623ff92abbfb4c23d64029d1b455546018f1f674f020
GET /simgad/3954556701996320095 HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e48017be02b261f556d0faafa991f4e3.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 30413
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 10:43:26 GMT
expires: Thu, 23 Nov 2023 10:43:26 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 18 Nov 2022 22:57:48 GMT
content-type: image/jpeg
age: 149862
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvSOSOTXZxiF_Mi1lUz3dR_KhDAovBrdIinhanrRLP6P43O86X8cTFTAe1LaSpkNKn9EmBXCUWEnsanNdRUAAd-GqP3NI82oydRl5fLqlhaBmB0saeLanuXEylQV3P1rc3wq9W25Iq16czKekGHQ71WkOxTpVn13LnVo2Oa1pyCeNc1Z7idmQnrB_8x0BHjJn4Rawp6XiCvuuVTSy7fqyvhLLuS7DDRsFvnm9BBEQ_PkA3MNoPUeziwoFKua4rz5M0dHNXt-xtoJNbTezvPMIw2HB8jup_uojWQAAn_zZUt_sX61Ld14oWZ1BwKrTSWMMB2ixSyY3zl6SZxfzJhErn-0diZ0N_Jchwag_eZt93NJ8T-thUaqLY-s_twEjVkAfDm6a8K_M91rtxiQR0UMr9obxme4MPQSFQI7hxFIUdQbPVEfVCyRYSmbKyayYMYdqTmjhXZUqxqzycmfr-pC9t0tfKpsGX3z1VAXe_Lj2is00EZDDUgXHxUBRrV-FLzlhR7fxU9PkTbBpAl1pCtQBCA1g2vr9LKL4F2L4h-QFa45wELZm3mRRVf95gfBTMqyHw-ztpw6xtlBfgFuOJjENcooOha5orUdlCaRVHj45D_9NYmpcYA1hMhCgT_xW7zFIIhNPhruuc2RJZ_AvLgBzK4O6kuEk1YMYg4ykQWAu9G0P8fmQyPPiuR_HLnUCNhA_lWq1bZYp-b-c8AQORPFy-inu9meCGZYRZsDZFDMZZqLhfEE5ET6FtUWXdDhOSRryjOtFQ7FiD4DMDS5gKJ7QmzvdUW7Vf_Tr4V-j-zAIB1FhMPTj78h4d1YESijeEJvRGHNN1uKJD1Pkkk5SwXsIyz4W7C0mxdLYcews1FLCQvMHDGxcS4JLTrnlhh_-5yhNFXXa0VT304UQ0CA9ciR6ga10ugfSEAtMAA55ijoRiWrOSeSQ97OLVsNLUBeieskxO8Ad-JkeukgRlMNgkerfp2EAa9_hZX2mN9l0tTHSViItTaGkqISFxNxKyyD1_vnadfaRuTIwkm7nZ5uhwXAzXggBYrqruJbft-aUaaMtQPTZ95c8_LjImqiy5vvZcBW1GfHFe-sJBHYVkQc_eeGaY&sai=AMfl-YSUrmSone_iIPaeF-59sOpVIuqgzWMAbiqOD1rzmFMtxqccQHGO3ymAiIv-UKQ8-8f6mG_8fA5HYpaKB5-K4VtpPMBNDexQHhi4qPWdpE-4djVCo317E0OzzGtCjyTZ_sPteGclbuKPby7IJrWdlg94UgJyNyohYcrjcIsBoZnoBIuLxoS2JeE0K0SN64ytT5jHwNbuysK0t8cAdWWs8pTAItrzgpF70nQOZ2a1_Sy3HZM1UEA4eTdjYSdsnEQrzypIen4bSMjvLGEXZlrzfgUSnpoIEdAHLfYVXgoqni2aEPnXXNkhB-r6PBDo-Z_GSUL6fNh8eghGCidY9hNMhZ7g1jEvs_feGA8oWrVPWx-v9oQiHRqxZsRQpvQ4G46JwZf4HJqcJXgd6_rAwpyhmchiUgN7nL2wAaLsw1BQ91atFahzugew4OsjhaoO6HG8VszvAVMx0J8sPgOE1L0HdWdv5P-Tgc3oC_JEZA&sig=Cg0ArKJSzKFWHOq6iTq8EAE&uach_m=[UACH]&pr=missingexchangepricemacro&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=237&vt=11&dtpt=234&dett=2&cstd=1&cisv=r20221110.12675&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvSOSOTXZxiF_Mi1lUz3dR_KhDAovBrdIinhanrRLP6P43O86X8cTFTAe1LaSpkNKn9EmBXCUWEnsanNdRUAAd-GqP3NI82oydRl5fLqlhaBmB0saeLanuXEylQV3P1rc3wq9W25Iq16czKekGHQ71WkOxTpVn13LnVo2Oa1pyCeNc1Z7idmQnrB_8x0BHjJn4Rawp6XiCvuuVTSy7fqyvhLLuS7DDRsFvnm9BBEQ_PkA3MNoPUeziwoFKua4rz5M0dHNXt-xtoJNbTezvPMIw2HB8jup_uojWQAAn_zZUt_sX61Ld14oWZ1BwKrTSWMMB2ixSyY3zl6SZxfzJhErn-0diZ0N_Jchwag_eZt93NJ8T-thUaqLY-s_twEjVkAfDm6a8K_M91rtxiQR0UMr9obxme4MPQSFQI7hxFIUdQbPVEfVCyRYSmbKyayYMYdqTmjhXZUqxqzycmfr-pC9t0tfKpsGX3z1VAXe_Lj2is00EZDDUgXHxUBRrV-FLzlhR7fxU9PkTbBpAl1pCtQBCA1g2vr9LKL4F2L4h-QFa45wELZm3mRRVf95gfBTMqyHw-ztpw6xtlBfgFuOJjENcooOha5orUdlCaRVHj45D_9NYmpcYA1hMhCgT_xW7zFIIhNPhruuc2RJZ_AvLgBzK4O6kuEk1YMYg4ykQWAu9G0P8fmQyPPiuR_HLnUCNhA_lWq1bZYp-b-c8AQORPFy-inu9meCGZYRZsDZFDMZZqLhfEE5ET6FtUWXdDhOSRryjOtFQ7FiD4DMDS5gKJ7QmzvdUW7Vf_Tr4V-j-zAIB1FhMPTj78h4d1YESijeEJvRGHNN1uKJD1Pkkk5SwXsIyz4W7C0mxdLYcews1FLCQvMHDGxcS4JLTrnlhh_-5yhNFXXa0VT304UQ0CA9ciR6ga10ugfSEAtMAA55ijoRiWrOSeSQ97OLVsNLUBeieskxO8Ad-JkeukgRlMNgkerfp2EAa9_hZX2mN9l0tTHSViItTaGkqISFxNxKyyD1_vnadfaRuTIwkm7nZ5uhwXAzXggBYrqruJbft-aUaaMtQPTZ95c8_LjImqiy5vvZcBW1GfHFe-sJBHYVkQc_eeGaY&sai=AMfl-YSUrmSone_iIPaeF-59sOpVIuqgzWMAbiqOD1rzmFMtxqccQHGO3ymAiIv-UKQ8-8f6mG_8fA5HYpaKB5-K4VtpPMBNDexQHhi4qPWdpE-4djVCo317E0OzzGtCjyTZ_sPteGclbuKPby7IJrWdlg94UgJyNyohYcrjcIsBoZnoBIuLxoS2JeE0K0SN64ytT5jHwNbuysK0t8cAdWWs8pTAItrzgpF70nQOZ2a1_Sy3HZM1UEA4eTdjYSdsnEQrzypIen4bSMjvLGEXZlrzfgUSnpoIEdAHLfYVXgoqni2aEPnXXNkhB-r6PBDo-Z_GSUL6fNh8eghGCidY9hNMhZ7g1jEvs_feGA8oWrVPWx-v9oQiHRqxZsRQpvQ4G46JwZf4HJqcJXgd6_rAwpyhmchiUgN7nL2wAaLsw1BQ91atFahzugew4OsjhaoO6HG8VszvAVMx0J8sPgOE1L0HdWdv5P-Tgc3oC_JEZA&sig=Cg0ArKJSzKFWHOq6iTq8EAE&uach_m=[UACH]&pr=missingexchangepricemacro&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=237&vt=11&dtpt=234&dett=2&cstd=1&cisv=r20221110.12675&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsvSOSOTXZxiF_Mi1lUz3dR_KhDAovBrdIinhanrRLP6P43O86X8cTFTAe1LaSpkNKn9EmBXCUWEnsanNdRUAAd-GqP3NI82oydRl5fLqlhaBmB0saeLanuXEylQV3P1rc3wq9W25Iq16czKekGHQ71WkOxTpVn13LnVo2Oa1pyCeNc1Z7idmQnrB_8x0BHjJn4Rawp6XiCvuuVTSy7fqyvhLLuS7DDRsFvnm9BBEQ_PkA3MNoPUeziwoFKua4rz5M0dHNXt-xtoJNbTezvPMIw2HB8jup_uojWQAAn_zZUt_sX61Ld14oWZ1BwKrTSWMMB2ixSyY3zl6SZxfzJhErn-0diZ0N_Jchwag_eZt93NJ8T-thUaqLY-s_twEjVkAfDm6a8K_M91rtxiQR0UMr9obxme4MPQSFQI7hxFIUdQbPVEfVCyRYSmbKyayYMYdqTmjhXZUqxqzycmfr-pC9t0tfKpsGX3z1VAXe_Lj2is00EZDDUgXHxUBRrV-FLzlhR7fxU9PkTbBpAl1pCtQBCA1g2vr9LKL4F2L4h-QFa45wELZm3mRRVf95gfBTMqyHw-ztpw6xtlBfgFuOJjENcooOha5orUdlCaRVHj45D_9NYmpcYA1hMhCgT_xW7zFIIhNPhruuc2RJZ_AvLgBzK4O6kuEk1YMYg4ykQWAu9G0P8fmQyPPiuR_HLnUCNhA_lWq1bZYp-b-c8AQORPFy-inu9meCGZYRZsDZFDMZZqLhfEE5ET6FtUWXdDhOSRryjOtFQ7FiD4DMDS5gKJ7QmzvdUW7Vf_Tr4V-j-zAIB1FhMPTj78h4d1YESijeEJvRGHNN1uKJD1Pkkk5SwXsIyz4W7C0mxdLYcews1FLCQvMHDGxcS4JLTrnlhh_-5yhNFXXa0VT304UQ0CA9ciR6ga10ugfSEAtMAA55ijoRiWrOSeSQ97OLVsNLUBeieskxO8Ad-JkeukgRlMNgkerfp2EAa9_hZX2mN9l0tTHSViItTaGkqISFxNxKyyD1_vnadfaRuTIwkm7nZ5uhwXAzXggBYrqruJbft-aUaaMtQPTZ95c8_LjImqiy5vvZcBW1GfHFe-sJBHYVkQc_eeGaY&sai=AMfl-YSUrmSone_iIPaeF-59sOpVIuqgzWMAbiqOD1rzmFMtxqccQHGO3ymAiIv-UKQ8-8f6mG_8fA5HYpaKB5-K4VtpPMBNDexQHhi4qPWdpE-4djVCo317E0OzzGtCjyTZ_sPteGclbuKPby7IJrWdlg94UgJyNyohYcrjcIsBoZnoBIuLxoS2JeE0K0SN64ytT5jHwNbuysK0t8cAdWWs8pTAItrzgpF70nQOZ2a1_Sy3HZM1UEA4eTdjYSdsnEQrzypIen4bSMjvLGEXZlrzfgUSnpoIEdAHLfYVXgoqni2aEPnXXNkhB-r6PBDo-Z_GSUL6fNh8eghGCidY9hNMhZ7g1jEvs_feGA8oWrVPWx-v9oQiHRqxZsRQpvQ4G46JwZf4HJqcJXgd6_rAwpyhmchiUgN7nL2wAaLsw1BQ91atFahzugew4OsjhaoO6HG8VszvAVMx0J8sPgOE1L0HdWdv5P-Tgc3oC_JEZA&sig=Cg0ArKJSzKFWHOq6iTq8EAE&uach_m=[UACH]&pr=missingexchangepricemacro&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=237&vt=11&dtpt=234&dett=2&cstd=1&cisv=r20221110.12675&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://e48017be02b261f556d0faafa991f4e3.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 04:21:08 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 04:36:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 25 Nov 2022 04:21:08 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 60951c730d96e02c20219f2765873699
64d0ecb0d9001990841e9faa434d9239af4b6927
9eb0e510930409a6eed080afd7759a51ca4ecb58dd30ea04221cea917358f658
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 04:21:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lightssyrupdecree.com/pixel/purst?dl=0&th=0&sc=0&rs=2739&rd=2739&fd=792&bv=22.10.v.10&tmpl=136
200 OK 0 B URL HTTP/1.1 lightssyrupdecree.com/pixel/purst?dl=0&th=0&sc=0&rs=2739&rd=2739&fd=792&bv=22.10.v.10&tmpl=136
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2739&rd=2739&fd=792&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 25 Nov 2022 04:21:08 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
stats.vlitag.com/abd/?id=20d313df53dcd38d64b77cc80046d519&detect=notfound
404 Not Found 16 B URL HTTP/2 stats.vlitag.com/abd/?id=20d313df53dcd38d64b77cc80046d519&detect=notfound
IP
File type ASCII text, with no line terminators
Hash 1115f7a1093f138d54aef2fefb4b750d
b3c623dd30ea8c0bfc35e00c382015cac36df6e5
210c99832d53c42821ce060195b55fbb5d1f7842513016adf1f32d808ed5ea64
GET /abd/?id=20d313df53dcd38d64b77cc80046d519&detect=notfound HTTP/1.1
Host: stats.vlitag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Fri, 25 Nov 2022 04:21:09 GMT
content-type: text/plain; charset=utf-8
content-length: 16
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76f7988bfa40b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
enit.in/9bkCq
200 OK 0 B IP
GET /9bkCq HTTP/1.1
Host: enit.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 25 Nov 2022 04:21:06 GMT
content-type: text/html; charset=UTF-8
set-cookie: ref9bkCq=ZDkwMjhkODgyYWFlZTAxOTkyOGRlOGMxZTRjZjlkMzZlMDA2Mzk5YjBkOTE1ZDBkNjBlM2U2NzQzMGVhNmVlM7yqdsoj0B4CD8oD8976WpE2exSnOhy4AqeD%2FSAtB3pD; expires=Fri, 25-Nov-2022 04:26:06 GMT; Max-Age=300; path=/; HttpOnly; secure
x-frame-options: SAMEORIGIN,SAMEORIGIN
x-robots-tag: noindex, nofollow
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wtsOy%2FxTszmt39IGJBtU6QB7mIf2I9hyqjm50KIrnMgDKnTxHhWDIutRpBqIDoNgZjtgAQCMsVx0%2BeHG3Ypt6NMGZMVLnc1iNQ5GwIcUBQTj60QW00xgQt2e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f79876e9450b49-OSL
content-encoding: br
X-Firefox-Spdy: h2
hopefullyapricot.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3okgelERQfDQLCgKOumen50e97AYYyQYk7i7knN1VfWknOqupqp7epJTdEX24GHAi3rqfJNscI3igldFJ16WoLBzkYDm4M2LF2HxKDMZGH1Q9d6r7x2%2B73v10X5%2BTjzk9Gzzbb0rlaKLzarnvrglE64L667fdH2v6l11t2RypXHV7U8u03vV95pV7yX3TcG6erHm%2BZ7ne767Io2IdH9xikKmx22%2F2vaqjVrVbzbQN%2F%2Fvbe7AUge8d06eguTjR7bv34NkIyTxN8vCdjOdvvxGnCuaaYMeP3o36Sa6SBDPy8g4iJKj2TS0HRPy6SXo5GimALp3MFGAUI6J86uPMDma0UTYO7xgGiqIBCF%2FHEVvBKFGkHQEpm9B8gcEYBzrG0jiO%2BvaFHTnAqUTdEwWHv4NWYzJwu9PI4m%2FXlKy797QKs%2BkTiz6UQnZH0F2RkjzE2S7DmRxApZ9AMl%2FIYsP15DEBxtWaUheTtVLOYKMRlBiAGod5JMjHeSRgzx1EPMzlzbbkee1ojCq14MGY6xeZ6wZXOFNXm8EkYecTegNkKUDMDUAM3tIzR66cgCT%2FwC7XcJyBzYbE%2BedPfR4iUIQFJagoASFJCgygqJXHnJla7a8w5XNQ3%2BWa7NcL4c66%2BzTQ511REL203Py5NSXP0bPoCvO3KjZ8huNoCWueM1WOwhCn9cCrxH5URCJyGOwsoS0l6ZSdydLWv4RqRwT8tcrCOkJrDoBk5dBcx%2B0GLZqHuj2sBF42E2%2BYkqyro3UTpXpGFyXSLMFZDvOvjonz06JXK78BsFOr9197vhR%2F4U%2FwUyJ1JR4T%2F5E0FG3h9d1QQ6u68KSextpJmO5SyfLu5HRTFTuviV2Cm346rIdfPEamwCT8vimsNkaTbhMOpZ8uSQ5F2ZFGybId6t2S4Sbud1eyk2Sp2ubr6%2BsxqkR1kqdjEDlg41%2FwOSYLLz%2F%2FfRbPvHzh5BmBJOXiPNTMgtIfQKW7sGmc%2FZWExg1nwnTCoq8HJpaOH9UkkCJeU%2FDEvY%2FfTiv9%2B1tdEwFNLuFJC7RMyV6qgRVA9j8sWGWmtNr9z%2BbxOcIVWUYKlM5CJVRn0ysPR8T9%2FmPL0y28sxt%2Bg0RhEGLcR4Kxv1WrR7UPa%2FGeaPVFn4bmR2zvaVv%2FwUAAP%2F%2FAQAA%2F%2F8ByK5AeAQAAA%3D%3D
200 OK 0 B URL HTTP/1.1 hopefullyapricot.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3okgelERQfDQLCgKOumen50e97AYYyQYk7i7knN1VfWknOqupqp7epJTdEX24GHAi3rqfJNscI3igldFJ16WoLBzkYDm4M2LF2HxKDMZGH1Q9d6r7x2%2B73v10X5%2BTjzk9Gzzbb0rlaKLzarnvrglE64L667fdH2v6l11t2RypXHV7U8u03vV95pV7yX3TcG6erHm%2BZ7ne767Io2IdH9xikKmx22%2F2vaqjVrVbzbQN%2F%2Fvbe7AUge8d06eguTjR7bv34NkIyTxN8vCdjOdvvxGnCuaaYMeP3o36Sa6SBDPy8g4iJKj2TS0HRPy6SXo5GimALp3MFGAUI6J86uPMDma0UTYO7xgGiqIBCF%2FHEVvBKFGkHQEpm9B8gcEYBzrG0jiO%2BvaFHTnAqUTdEwWHv4NWYzJwu9PI4m%2FXlKy797QKs%2BkTiz6UQnZH0F2RkjzE2S7DmRxApZ9AMl%2FIYsP15DEBxtWaUheTtVLOYKMRlBiAGod5JMjHeSRgzx1EPMzlzbbkee1ojCq14MGY6xeZ6wZXOFNXm8EkYecTegNkKUDMDUAM3tIzR66cgCT%2FwC7XcJyBzYbE%2BedPfR4iUIQFJagoASFJCgygqJXHnJla7a8w5XNQ3%2BWa7NcL4c66%2BzTQ511REL203Py5NSXP0bPoCvO3KjZ8huNoCWueM1WOwhCn9cCrxH5URCJyGOwsoS0l6ZSdydLWv4RqRwT8tcrCOkJrDoBk5dBcx%2B0GLZqHuj2sBF42E2%2BYkqyro3UTpXpGFyXSLMFZDvOvjonz06JXK78BsFOr9197vhR%2F4U%2FwUyJ1JR4T%2F5E0FG3h9d1QQ6u68KSextpJmO5SyfLu5HRTFTuviV2Cm346rIdfPEamwCT8vimsNkaTbhMOpZ8uSQ5F2ZFGybId6t2S4Sbud1eyk2Sp2ubr6%2BsxqkR1kqdjEDlg41%2FwOSYLLz%2F%2FfRbPvHzh5BmBJOXiPNTMgtIfQKW7sGmc%2FZWExg1nwnTCoq8HJpaOH9UkkCJeU%2FDEvY%2FfTiv9%2B1tdEwFNLuFJC7RMyV6qgRVA9j8sWGWmtNr9z%2BbxOcIVWUYKlM5CJVRn0ysPR8T9%2FmPL0y28sxt%2Bg0RhEGLcR4Kxv1WrR7UPa%2FGeaPVFn4bmR2zvaVv%2FwUAAP%2F%2FAQAA%2F%2F8ByK5AeAQAAA%3D%3D
IP
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3okgelERQfDQLCgKOumen50e97AYYyQYk7i7knN1VfWknOqupqp7epJTdEX24GHAi3rqfJNscI3igldFJ16WoLBzkYDm4M2LF2HxKDMZGH1Q9d6r7x2%2B73v10X5%2BTjzk9Gzzbb0rlaKLzarnvrglE64L667fdH2v6l11t2RypXHV7U8u03vV95pV7yX3TcG6erHm%2BZ7ne767Io2IdH9xikKmx22%2F2vaqjVrVbzbQN%2F%2Fvbe7AUge8d06eguTjR7bv34NkIyTxN8vCdjOdvvxGnCuaaYMeP3o36Sa6SBDPy8g4iJKj2TS0HRPy6SXo5GimALp3MFGAUI6J86uPMDma0UTYO7xgGiqIBCF%2FHEVvBKFGkHQEpm9B8gcEYBzrG0jiO%2BvaFHTnAqUTdEwWHv4NWYzJwu9PI4m%2FXlKy797QKs%2BkTiz6UQnZH0F2RkjzE2S7DmRxApZ9AMl%2FIYsP15DEBxtWaUheTtVLOYKMRlBiAGod5JMjHeSRgzx1EPMzlzbbkee1ojCq14MGY6xeZ6wZXOFNXm8EkYecTegNkKUDMDUAM3tIzR66cgCT%2FwC7XcJyBzYbE%2BedPfR4iUIQFJagoASFJCgygqJXHnJla7a8w5XNQ3%2BWa7NcL4c66%2BzTQ511REL203Py5NSXP0bPoCvO3KjZ8huNoCWueM1WOwhCn9cCrxH5URCJyGOwsoS0l6ZSdydLWv4RqRwT8tcrCOkJrDoBk5dBcx%2B0GLZqHuj2sBF42E2%2BYkqyro3UTpXpGFyXSLMFZDvOvjonz06JXK78BsFOr9197vhR%2F4U%2FwUyJ1JR4T%2F5E0FG3h9d1QQ6u68KSextpJmO5SyfLu5HRTFTuviV2Cm346rIdfPEamwCT8vimsNkaTbhMOpZ8uSQ5F2ZFGybId6t2S4Sbud1eyk2Sp2ubr6%2BsxqkR1kqdjEDlg41%2FwOSYLLz%2F%2FfRbPvHzh5BmBJOXiPNTMgtIfQKW7sGmc%2FZWExg1nwnTCoq8HJpaOH9UkkCJeU%2FDEvY%2FfTiv9%2B1tdEwFNLuFJC7RMyV6qgRVA9j8sWGWmtNr9z%2BbxOcIVWUYKlM5CJVRn0ysPR8T9%2FmPL0y28sxt%2Bg0RhEGLcR4Kxv1WrR7UPa%2FGeaPVFn4bmR2zvaVv%2FwUAAP%2F%2FAQAA%2F%2F8ByK5AeAQAAA%3D%3D HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://enit.in/
Cookie: u_pl=14860822; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlecf5714487e6057988b1d2804f1f8fef0c=[2229214,2106764,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 25 Nov 2022 04:21:08 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a1e5c0b56e9329207df65c5b00fbd576
Strict-Transport-Security: max-age=0; includeSubdomains
104.21.66.123
142.250.74.168
23.36.77.32
192.99.13.63
104.22.59.199
18.185.190.54
93.184.220.29
151.101.84.193