goldsgym.com.do/
301 Moved Permanently 232 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a5cffc049e38218013b1018e4589ae1b
23f9754451f7060caae9ce498271bb8a6988aecc
40d7941ae117df6ac915994b711107c7389e8a664f9692092739af0d2ab3921f
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Sep 2022 06:24:22 GMT
Server: Apache
X-Content-Type-Options: nosniff
Location: https://goldsgym.com.do/
Content-Length: 232
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 05:43:55 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WK0ga0a2QA0dAxDhuHypSWLkSq59ocg34oPAPEcHw0BwhUj6dXG_gw==
Age: 2428
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12283
Expires: Sun, 04 Sep 2022 09:49:06 GMT
Date: Sun, 04 Sep 2022 06:24:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kI8RtUP_iEUAcYEm7ag-pbdfa76K3KnuKFk_XHmfDb3mWQ-tA7iSKA==
age: 18546
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 06:24:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
goldsgym.com.do/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Sep 2022 06:24:23 GMT
Server: Apache
Pragma: no-cache
Expires: Wed, 17 Aug 2005 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Set-Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3; path=/; HttpOnly
X-Content-Type-Options: nosniff
Location: https://goldsgym.com.do/es/
Last-Modified: Sun, 04 Sep 2022 06:24:23 GMT
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 04 Sep 2022 05:38:16 GMT
Expires: Sun, 04 Sep 2022 05:52:09 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jdPDXNEw_r68NsZQuX5s56H_ZCWm8PlPX20MjE7O4tK3Y8WKFfJMgA==
Age: 2767
ocsp.digicert.com/
200 OK 471 B IP
Hash 4fc12f0a98aa28ccb56e0b56d7e40ded
f7efcfb8b4f4aa40268bada3fec380820a70ee35
a34aa9b7db949a583c3f1b4d87fed415a11d119c9615b5e710c3125173f8a277
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4709
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:23 GMT
Last-Modified: Sun, 04 Sep 2022 05:05:54 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
goldsgym.com.do/es/
200 OK 36 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (912), with CRLF, LF line terminators
Hash 9f3f140cf9941eb3566bf44439caa9f6
cbf16e05da8264de7d584bcb625e20bf09c26363
675c3b278a49c869b920f6531c4a17a506d0c3a49f838f664fa70f638656152d
Analyzer Verdict Alert fortinet Phishing
GET /es/ HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:23 GMT
Server: Apache
Expires: Wed, 17 Aug 2005 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Content-Type-Options: nosniff
Last-Modified: Sun, 04 Sep 2022 06:24:23 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
goldsgym.com.do/media/mod_falang/css/template.css
200 OK 1.2 kB URL HTTP/1.1 goldsgym.com.do/media/mod_falang/css/template.css
IP
Hash 785b872a7e5cb1e18a1ead9a4445a0bf
e78c28cc4050fe311fc815c1d57dc2ebc3d0a428
9b074346fe11e187a1ab37bb8e6033e208966dd98ecd64cf6eee4eda0ef3d5b8
GET /media/mod_falang/css/template.css HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Fri, 28 Feb 2020 15:47:56 GMT
Accept-Ranges: bytes
Content-Length: 1200
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Xg92hJxqZy4LW/HOh/IChw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3/ah73C/PDg/s+zlGvqg3eP2T/c=
goldsgym.com.do/media/widgetkit/wk-scripts-e04a6b8b.js
200 OK 17 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/wk-scripts-e04a6b8b.js
IP
File type ASCII text, with very long lines (14364)
Hash 8fd8078bff2f9407f975a6c72e94fe4c
06d40b06b306f679ffa8c1bf56e268a6e6609bce
3734f8302325bdb1e9695e283b3796e0b4906f91bb867cb2e477592441a30a50
Analyzer Verdict Alert fortinet Phishing
GET /media/widgetkit/wk-scripts-e04a6b8b.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 14:56:36 GMT
Accept-Ranges: bytes
Content-Length: 16768
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/media/jui/js/jquery-noconflict.js?56d66fa62b445152725f3e8eff9d6b8a
200 OK 21 B URL HTTP/1.1 goldsgym.com.do/media/jui/js/jquery-noconflict.js?56d66fa62b445152725f3e8eff9d6b8a
IP
Hash e2060c4e5e5955c824723b13a212d3ec
18420ce484978f8ba3d7371febf1638828bb7a67
5b6cf4e6eda02f7c90b60b3c32413c0851915f8f80a268a913b92929085132a6
Analyzer Verdict Alert fortinet Phishing
GET /media/jui/js/jquery-noconflict.js?56d66fa62b445152725f3e8eff9d6b8a HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Mon, 23 Sep 2019 14:22:21 GMT
Accept-Ranges: bytes
Content-Length: 21
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/media/jui/js/jquery-migrate.min.js?56d66fa62b445152725f3e8eff9d6b8a
200 OK 10 kB URL HTTP/1.1 goldsgym.com.do/media/jui/js/jquery-migrate.min.js?56d66fa62b445152725f3e8eff9d6b8a
IP
File type ASCII text, with very long lines (9959)
Hash 7121994eec5320fbe6586463bf9651c2
90532aff6d4121954254cdf04994d834f7ec169b
48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
GET /media/jui/js/jquery-migrate.min.js?56d66fa62b445152725f3e8eff9d6b8a HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Mon, 23 Sep 2019 14:22:21 GMT
Accept-Ranges: bytes
Content-Length: 10056
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/media/jui/js/bootstrap.min.js?56d66fa62b445152725f3e8eff9d6b8a
200 OK 29 kB URL HTTP/1.1 goldsgym.com.do/media/jui/js/bootstrap.min.js?56d66fa62b445152725f3e8eff9d6b8a
IP
File type ASCII text, with very long lines (28972)
Hash a125594de09167bd2e9015d790029a64
b0567b7e3db8ddbdc5806f5c4e2fa7a8abc9b692
b240d68de7c3795c87771f510527c201d7d67f0e065d973b16bf86855932f9a2
Analyzer Verdict Alert fortinet Phishing
GET /media/jui/js/bootstrap.min.js?56d66fa62b445152725f3e8eff9d6b8a HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Mon, 23 Sep 2019 14:22:21 GMT
Accept-Ranges: bytes
Content-Length: 29126
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/templates/yoo_chester/css/custom.css
200 OK 30 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/css/custom.css
IP
Hash 49f9e3e0624ad83b2603c526be71054a
14486116db277658a737c96e59d69acdde40aa14
b1f0fadff48789273af31874b8925d494a35cb40e28aa81d8073253bb90a6441
GET /templates/yoo_chester/css/custom.css HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 21 Jul 2021 16:44:04 GMT
Accept-Ranges: bytes
Content-Length: 29551
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
goldsgym.com.do/templates/yoo_chester/css/bootstrap.css
200 OK 193 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/css/bootstrap.css
IP
File type CSV text\012- , ASCII text
Size 193 kB (192930 bytes)
Hash 9177d893c0a3c200476a761240e279fa
03f77a3d0f35430d6bce3cbd9963451e65b91725
4f1a8cf4f6aa19f44002c4cc56e252ef66d7e7cc600cb78dc0899ba2d278f020
GET /templates/yoo_chester/css/bootstrap.css HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 21 Nov 2019 18:03:47 GMT
Accept-Ranges: bytes
Content-Length: 192930
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
goldsgym.com.do/media/jui/js/jquery.min.js?56d66fa62b445152725f3e8eff9d6b8a
200 OK 97 kB URL HTTP/1.1 goldsgym.com.do/media/jui/js/jquery.min.js?56d66fa62b445152725f3e8eff9d6b8a
IP
File type ASCII text, with very long lines (65469)
Hash 59c2901ee162828f22bab14459431652
6cec0ee04bc7138b6eedad0009a49d155451bce8
46438fa269f3c172286b81be52a5de84753d68dcc6580f6a98b7942cf129bdc1
Analyzer Verdict Alert fortinet Phishing
GET /media/jui/js/jquery.min.js?56d66fa62b445152725f3e8eff9d6b8a HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Mon, 23 Sep 2019 14:22:21 GMT
Accept-Ranges: bytes
Content-Length: 96606
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/autocomplete.js
200 OK 4.2 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/autocomplete.js
IP
File type ASCII text, with very long lines (4172), with no line terminators
Hash 77bcd1f54db70645b95cce3459cc570a
4f81fa7b47446ee32ac57f7fbadfb14453e06f5f
8a2105bf73e8def5a8422f90dcc67f0bee56697599adc38b2c213415af362e97
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/warp/vendor/uikit/js/components/autocomplete.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:01:19 GMT
Accept-Ranges: bytes
Content-Length: 4172
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
js.hs-scripts.com/20244697.js
200 OK 990 B URL HTTP/2 js.hs-scripts.com/20244697.js
IP
File type ASCII text, with very long lines (542)
Hash a29595ffb28dba07b324b3496dae2ff3
8d1635605eeb69e77026b0bc075849be4f20e4eb
0382d6a066aeaf299106bf74279095550b261a1cf5523b175a9501c68793d3d4
GET /20244697.js HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:24 GMT
content-type: application/javascript;charset=utf-8
x-trace: 2B9CDB84B5096B97B16482AB3BE072E7DEF6634C0A000000000000000000
cache-control: public, max-age=60
vary: Accept-Encoding
x-hubspot-correlation-id: 9fb61f58-596e-4463-9d33-2648f969d331
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-origin: https://goldsgym.com.do
last-modified: Sun, 04 Sep 2022 06:24:24 GMT
cf-cache-status: MISS
expires: Sun, 04 Sep 2022 06:25:24 GMT
server: cloudflare
cf-ray: 7454a4569efbb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
goldsgym.com.do/media/widgetkit/uikit2-dd30e788.js
200 OK 111 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/uikit2-dd30e788.js
IP
File type ASCII text, with very long lines (32608)
Size 111 kB (111127 bytes)
Hash 9e5221a38ab0580aa6f27fa51ea35372
7257b1762e585cad2209fd363bdcbe8c94824d2d
e4f5b6398b32a0ee2490468c3a5495266654b23951aa33051f8112eb80a6967c
Analyzer Verdict Alert fortinet Phishing
GET /media/widgetkit/uikit2-dd30e788.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Sat, 30 Oct 2021 02:21:37 GMT
Accept-Ranges: bytes
Content-Length: 111127
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/uikit.js
200 OK 56 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/uikit.js
IP
File type ASCII text, with very long lines (32006)
Hash 99b323356145ca3afe30f4e2740e64a2
816b3e4a50470859230cb6f7877a163b488ef2ad
27b0fc35ce096ee3200ba07e21ebaad71b39ab11511287765f7d5ada78570e0b
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/warp/vendor/uikit/js/uikit.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:01:19 GMT
Accept-Ranges: bytes
Content-Length: 56287
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/datepicker.js
200 OK 38 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/datepicker.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (32027)
Hash 3865dc13e5edcd615c7e66f7214e136d
6c01322eae0a0db00e4491ded2eb1917f270e475
0cfad573093e8f31009bba4691de4394436f07b929513b2c0422066c1c278972
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/warp/vendor/uikit/js/components/datepicker.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:01:19 GMT
Accept-Ranges: bytes
Content-Length: 37619
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/search.js
200 OK 2.7 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/search.js
IP
File type HTML document, ASCII text, with very long lines (2718), with no line terminators
Hash 0005e205fb1a8ce2164d74d7780f17a0
2f646752bf3da652a85ddbd36e44eea10220f2d8
79507cbf3fdad6e00fdfaa709109b08869c57110acfe5c80bed5f922a630a71d
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/warp/vendor/uikit/js/components/search.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:01:19 GMT
Accept-Ranges: bytes
Content-Length: 2718
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9439a7cde73fea464c1463febdda0556
6a0030d4f26b2e9658700708c82e7ce6120ce93c
c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/tooltip.js
200 OK 3.6 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/tooltip.js
IP
File type ASCII text, with very long lines (3643), with no line terminators
Hash 69d578df3f11cbd3ab540e9e092554b1
0fcc2f4e23d7c4cd2fa6487fbb59c09094d9d47b
6086d9b0d172e628790e4a72283e0dc4d6d917edccdefbae63ab563ab5a4e247
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/warp/vendor/uikit/js/components/tooltip.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:01:19 GMT
Accept-Ranges: bytes
Content-Length: 3643
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/sticky.js
200 OK 5.0 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/js/components/sticky.js
IP
File type ASCII text, with very long lines (4980), with no line terminators
Hash 567684e4a5e5cec8678fdb6e70598df9
a8c1e66bc3e4292fbcbc5d8d7fe9c48e4707c839
3dd7f2d29a65eaa4d112cec553849d9824f2bb36dbedace5b142b73674f5bf7a
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/warp/vendor/uikit/js/components/sticky.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:01:19 GMT
Accept-Ranges: bytes
Content-Length: 4980
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/templates/yoo_chester/warp/js/social.js
200 OK 1.5 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/warp/js/social.js
IP
File type HTML document, ASCII text, with very long lines (1400)
Hash 085bc8d65701b5cb6ff2247dca3f8266
6bce0031fa166f9b0c08c3f1cfa6a832c9ef46be
547debff3397b71fba88fae6b2d68f7a991ed520abd7bdcde0634b28b79b1e5e
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/warp/js/social.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:01:19 GMT
Accept-Ranges: bytes
Content-Length: 1481
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/templates/yoo_chester/js/theme.js
200 OK 2.4 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/js/theme.js
IP
Hash ebb9ef86f1081942d08cbbf0cc1115a7
3b0074c6984c64cb60357f5032fefae225a2cc8e
ded657252dd377560bfedaf6731da00c63ffa25fe1548c4c2de92fd37172426c
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/js/theme.js HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 17 Dec 2020 20:29:02 GMT
Accept-Ranges: bytes
Content-Length: 2440
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
goldsgym.com.do/fonts/stylesheet.css
200 OK 7.8 kB URL HTTP/1.1 goldsgym.com.do/fonts/stylesheet.css
IP
Hash d5e5a09ffd68aed545294ac6e6979f31
08b65097665391d959c3a052e7b6e5cf1c255345
838b87d19f2999ce3874cc6bcf09c38b459df4062622780d7ff355204c76d8e2
GET /fonts/stylesheet.css HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Fri, 01 Nov 2019 21:42:38 GMT
Accept-Ranges: bytes
Content-Length: 7814
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
goldsgym.com.do/templates/yoo_chester/css/theme.css
200 OK 257 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/css/theme.css
IP
Size 257 kB (256739 bytes)
Hash 7f555ab99ad52b926f69948a15bfc1c3
ed99cb1cdc190a2826f25d1d6e05eddd12398252
d5245a5bc14470104bc738e55afc4e2648bb6d54ca5cc3b2d22950b42352d8d5
GET /templates/yoo_chester/css/theme.css HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 21 Nov 2019 18:03:47 GMT
Accept-Ranges: bytes
Content-Length: 256739
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc6ea3e01d1d6b8c4b28ff64d3b795a7
017457c6f5a63157102485a956c667aad36d33ef
e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 51df98c169fb7de773301d014bcea4b8
9bdf9bdb9b5eee378e9ac4ec68ca07c665ae4819
c8336f3a2e16c9390b610c612ce9be7c19286f04a6328a29200cbf65db5801c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 51df98c169fb7de773301d014bcea4b8
9bdf9bdb9b5eee378e9ac4ec68ca07c665ae4819
c8336f3a2e16c9390b610c612ce9be7c19286f04a6328a29200cbf65db5801c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98125354dbaa891018a9429a7aae3ea1
a692cc9a073c9666971db41444342fc9d7dab2e2
771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goldsgym.com.do/media/widgetkit/Blog_NUT1_5e501d7eda9fad89d8c8896045c91098-3d21952126e367e5e9760afb516af2ef.jpg
200 OK 22 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/Blog_NUT1_5e501d7eda9fad89d8c8896045c91098-3d21952126e367e5e9760afb516af2ef.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", progressive, precision 8, 400x250, components 3\012- data
Hash b3ee7b265366db8f4efa49accae3b80a
33f531052a2de8f4aeb6ae52022cae3491233b5c
a05fd7c1a8a5437eb1cfc8982ea88e83283963a2155a3e5ab6bf40c23485a294
GET /media/widgetkit/Blog_NUT1_5e501d7eda9fad89d8c8896045c91098-3d21952126e367e5e9760afb516af2ef.jpg HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Mon, 31 Aug 2020 13:52:02 GMT
Accept-Ranges: bytes
Content-Length: 22418
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
goldsgym.com.do/images/layout/sinstagram.png
200 OK 57 kB URL HTTP/1.1 goldsgym.com.do/images/layout/sinstagram.png
IP
File type PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash c96c912b37ec3853277558bb9f927af8
76b897c6848838463b49affe6a6ec939d89acdea
86919ece1a01697e71384b1ee76d8ff58cfbdf9d1e7340e6ece8987e8a9d5358
GET /images/layout/sinstagram.png HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 20:59:25 GMT
Accept-Ranges: bytes
Content-Length: 57243
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goldsgym.com.do
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:34:08 GMT
expires: Thu, 31 Aug 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 298216
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
goldsgym.com.do/media/widgetkit/bt-programas-2_a06e4dceeb5611f692bd66f1084e2494-5fcdea941ef3d6beffef22b8b0bb4bfc.jpg
200 OK 20 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/bt-programas-2_a06e4dceeb5611f692bd66f1084e2494-5fcdea941ef3d6beffef22b8b0bb4bfc.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", progressive, precision 8, 300x360, components 3\012- data
Hash 7be443fd707d579814cba7a0262544b5
c942a23309e8009ef1939925a485062e8bf81dd9
c69ae32f1f941587438dfd5d7c545197093702455210af8d7ca5c01333ec2f57
GET /media/widgetkit/bt-programas-2_a06e4dceeb5611f692bd66f1084e2494-5fcdea941ef3d6beffef22b8b0bb4bfc.jpg HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 14:56:41 GMT
Accept-Ranges: bytes
Content-Length: 20331
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
www.googletagmanager.com/gtm.js?id=GTM-MD9LKVQ
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MD9LKVQ
IP
File type ASCII text, with very long lines (1615)
Hash 3e5adbcca96517c86875e81910be4cea
5934086b63a40e74825ec1d53a01f2eb67607ae7
4c6311d97db5a363a808d96e51d58f9493a3e1f123b3af8277f5be474d04acab
GET /gtm.js?id=GTM-MD9LKVQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Sep 2022 06:24:24 GMT
expires: Sun, 04 Sep 2022 06:24:24 GMT
cache-control: private, max-age=900
last-modified: Sun, 04 Sep 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43998
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98125354dbaa891018a9429a7aae3ea1
a692cc9a073c9666971db41444342fc9d7dab2e2
771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc6ea3e01d1d6b8c4b28ff64d3b795a7
017457c6f5a63157102485a956c667aad36d33ef
e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goldsgym.com.do/images/layout/logo.png
200 OK 114 kB URL HTTP/1.1 goldsgym.com.do/images/layout/logo.png
IP
File type PNG image data, 78 x 78, 8-bit/color RGBA, non-interlaced\012- data
Size 114 kB (114056 bytes)
Hash bc3c812ec4881ab403c99302d7e71c47
55d272a588ee754e71b0b23cc0edad4ceb44662b
e707689467ad2f4db00ed931dd5e2c75bd680322baa55e0f5d2652a0d35ae6a7
GET /images/layout/logo.png HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:07:29 GMT
Accept-Ranges: bytes
Content-Length: 114056
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
goldsgym.com.do/media/widgetkit/SIOG-WEB-min_b577d80ff84ba612cf5046788517df1c-bead69fb5c034d35cc4433347fbb73d6.jpg
200 OK 244 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/SIOG-WEB-min_b577d80ff84ba612cf5046788517df1c-bead69fb5c034d35cc4433347fbb73d6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", progressive, precision 8, 1920x780, components 3\012- data
Size 244 kB (244234 bytes)
Hash 3657db7c3f1a62fb983e786de1814c5f
a636bcbe02f267afbf3aff8235f2c050b5770a0d
0fccb13766079751d10b7180d8f22169683b2e95f290f531d263d5002bc7bda6
GET /media/widgetkit/SIOG-WEB-min_b577d80ff84ba612cf5046788517df1c-bead69fb5c034d35cc4433347fbb73d6.jpg HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Mon, 31 Aug 2020 13:22:17 GMT
Accept-Ranges: bytes
Content-Length: 244234
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
goldsgym.com.do/fonts/ConduitITCStd-Regular.woff2
200 OK 18 kB URL HTTP/1.1 goldsgym.com.do/fonts/ConduitITCStd-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18468, version 1.0\012- data
Hash 99b8227bb185227f97dac24de92f4ce5
6624c296db296de6dda1ace73f03c37632f40e1c
47ccf660805e91339b6dbe482361588281472525c75646dd6847ffc2bee01595
Analyzer Verdict Alert fortinet Phishing
GET /fonts/ConduitITCStd-Regular.woff2 HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://goldsgym.com.do/fonts/stylesheet.css
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Fri, 01 Nov 2019 21:42:38 GMT
Accept-Ranges: bytes
Content-Length: 18468
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: font/woff2
goldsgym.com.do/fonts/CiutadellaSlabW04-LightIt.woff2
200 OK 22 kB URL HTTP/1.1 goldsgym.com.do/fonts/CiutadellaSlabW04-LightIt.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22228, version 1.0\012- data
Hash 09c38f04fbca554ee72bb6afa0ee7a60
451e7de082ffd0d8efe94c1de008f00fa9330d53
99ab76757d71a6bb6d235487602f5a8e8c24d1f72eb81673d47e91363c127923
Analyzer Verdict Alert fortinet Phishing
GET /fonts/CiutadellaSlabW04-LightIt.woff2 HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://goldsgym.com.do/fonts/stylesheet.css
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Fri, 01 Nov 2019 21:42:32 GMT
Accept-Ranges: bytes
Content-Length: 22228
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: font/woff2
goldsgym.com.do/fonts/ConduitITCStd-Bold.woff2
200 OK 20 kB URL HTTP/1.1 goldsgym.com.do/fonts/ConduitITCStd-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20208, version 1.0\012- data
Hash ade534ae7c2f9ffbe81bfeaabb6a55bd
b82a69542516a797eb928ed761dd9813357f7ca5
065986d35ccfe389c87a906af0b060d6888c5fb89f48aa02600777ea914a16bb
Analyzer Verdict Alert fortinet Phishing
GET /fonts/ConduitITCStd-Bold.woff2 HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://goldsgym.com.do/fonts/stylesheet.css
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Fri, 01 Nov 2019 21:42:34 GMT
Accept-Ranges: bytes
Content-Length: 20208
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/woff2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 51df98c169fb7de773301d014bcea4b8
9bdf9bdb9b5eee378e9ac4ec68ca07c665ae4819
c8336f3a2e16c9390b610c612ce9be7c19286f04a6328a29200cbf65db5801c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash fdcacd478b0e4c81fe9f9ca5b33d4cb8
3aae42beaa04d8dd388ef271abfe3f85ae544296
5c154ee675cd16db7855b152543558dd2490f4d43edc1333f15c3699da17cc6b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2928
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:25 GMT
Last-Modified: Sun, 04 Sep 2022 05:35:37 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash fdcacd478b0e4c81fe9f9ca5b33d4cb8
3aae42beaa04d8dd388ef271abfe3f85ae544296
5c154ee675cd16db7855b152543558dd2490f4d43edc1333f15c3699da17cc6b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4257
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:25 GMT
Etag: "6313f944-117"
Last-Modified: Sun, 04 Sep 2022 05:13:28 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279
goldsgym.com.do/media/widgetkit/sucursales_c2bf20a64593d1f5ba90c7ffa517f5f7-f3666458ccdde0310dab4cc7e4e2e2eb.png
200 OK 245 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/sucursales_c2bf20a64593d1f5ba90c7ffa517f5f7-f3666458ccdde0310dab4cc7e4e2e2eb.png
IP
File type PNG image data, 435 x 375, 8-bit/color RGBA, non-interlaced\012- data
Size 245 kB (245156 bytes)
Hash 3a1e578b1ed3e07fb464a33fcb4cb19f
c49feb7ef3dc93b11dbb2a188af55dbcf8767a5c
ec0272d65b8a3c1c09dcd794ebe978ed4a5a6d7547678e4a3671200cf6c15699
GET /media/widgetkit/sucursales_c2bf20a64593d1f5ba90c7ffa517f5f7-f3666458ccdde0310dab4cc7e4e2e2eb.png HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:24 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 14:56:41 GMT
Accept-Ranges: bytes
Content-Length: 245156
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/fonts/fontawesome-webfont.woff2
200 OK 72 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/warp/vendor/uikit/fonts/fontawesome-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/warp/vendor/uikit/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://goldsgym.com.do/templates/yoo_chester/css/theme.css
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:01:19 GMT
Accept-Ranges: bytes
Content-Length: 71896
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 12:31:58 GMT
expires: Sun, 03 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 64347
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
goldsgym.com.do/templates/yoo_chester/less/uikit/fonts/chester.woff
200 OK 1.6 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/less/uikit/fonts/chester.woff
IP
File type Web Open Font Format, TrueType, length 1556, version 0.0\012- data
Hash 9aae736b0d80a9f3e96b71ce3e1c566c
f89ec2f5fbcf609253fc57b4552ac493480cbce7
881eedc00e4f7887857922402b51ca5e211f9c8710932994ae9af6d0e4ced88a
Analyzer Verdict Alert fortinet Phishing
GET /templates/yoo_chester/less/uikit/fonts/chester.woff HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://goldsgym.com.do/templates/yoo_chester/css/theme.css
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 16:01:19 GMT
Accept-Ranges: bytes
Content-Length: 1556
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/woff
goldsgym.com.do/media/widgetkit/BLOG_Fitness_1_fc5e71889502d6db6e5f421d41942746-2ad60e6611af84ff8cb3ae7e1a1816e3.jpg
200 OK 26 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/BLOG_Fitness_1_fc5e71889502d6db6e5f421d41942746-2ad60e6611af84ff8cb3ae7e1a1816e3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", progressive, precision 8, 400x250, components 3\012- data
Hash 28099330e612f6e3311b5573af0c218a
b2b1f5ea475f2826ffe5657313ef2fe9a5d63c23
a32417d70a75b821070405bbe067edcd0b0b02c0b6863bfbc8c787485be47eb2
GET /media/widgetkit/BLOG_Fitness_1_fc5e71889502d6db6e5f421d41942746-2ad60e6611af84ff8cb3ae7e1a1816e3.jpg HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Mon, 31 Aug 2020 13:52:02 GMT
Accept-Ranges: bytes
Content-Length: 25740
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
www.youtube.com/embed/qxirJayN914
200 OK 123 kB URL HTTP/2 www.youtube.com/embed/qxirJayN914
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (57369)
Size 123 kB (123413 bytes)
Hash 47fcc7df3c6617ed7bd0cd78265bca1b
9d0102364fbe1f6bd763ba7f4586af884ca14071
78a20c3a28266e87e5992698af65fddc19ab637df2c227fe0a98c42d829e999f
GET /embed/qxirJayN914 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Sep 2022 06:24:25 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=RmOv2eN9Krc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=RSlEJwjPJ48; Domain=.youtube.com; Expires=Fri, 03-Mar-2023 06:24:25 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+984; expires=Tue, 03-Sep-2024 06:24:24 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,300
200 OK 614 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,300
IP
Size 614 kB (613823 bytes)
Hash 51db0690a002f5cea6d7b3b42bc73b4b
3fa633f815bb13e98de1a405a3b1d6cfab85b83d
c62df0b23a95264361f581dfa13f5df3d854f05e24ad0f1c348a82e2887c58d6
GET /css?family=Roboto:400,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Sep 2022 06:24:24 GMT
date: Sun, 04 Sep 2022 06:24:24 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
goldsgym.com.do/media/widgetkit/Pesas-y-cardiovasculares_2c03e0a9096b284852eb6c68f1156ac2-1a02a2e94d76ca4f955edd813796dfd3.jpg
200 OK 24 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/Pesas-y-cardiovasculares_2c03e0a9096b284852eb6c68f1156ac2-1a02a2e94d76ca4f955edd813796dfd3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", progressive, precision 8, 400x250, components 3\012- data
Hash feaa3fca230ae68ff4086bee46a20e98
f80083c88eca3b9cc52760ce4da15312ad55084c
279e0dc6e6f84e2b13798c1131074d2234983f24cdc9ddb2212609d76de6baf5
GET /media/widgetkit/Pesas-y-cardiovasculares_2c03e0a9096b284852eb6c68f1156ac2-1a02a2e94d76ca4f955edd813796dfd3.jpg HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 14:56:42 GMT
Accept-Ranges: bytes
Content-Length: 23647
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
goldsgym.com.do/media/widgetkit/fcs-programas_cff55a8c6c9318da383f031933c9b48c-8be794a68835d414b3d1eab7d1da255b.jpg
200 OK 21 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/fcs-programas_cff55a8c6c9318da383f031933c9b48c-8be794a68835d414b3d1eab7d1da255b.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", progressive, precision 8, 300x360, components 3\012- data
Hash ea6d9513ca0428b0e227b4c88dfc8314
54d3c1080ef89cf79e0ed26a8fbe7c4b7d3343c6
f2e5d5fb9e9908f43268dea33739999cb55bbd89d9254e7dd929cfdcbbee9cde
GET /media/widgetkit/fcs-programas_cff55a8c6c9318da383f031933c9b48c-8be794a68835d414b3d1eab7d1da255b.jpg HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 14:56:41 GMT
Accept-Ranges: bytes
Content-Length: 20857
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
goldsgym.com.do/images/imagenes/secciones/bg-legado.png
200 OK 584 kB URL HTTP/1.1 goldsgym.com.do/images/imagenes/secciones/bg-legado.png
IP
File type PNG image data, 1088 x 1076, 8-bit/color RGBA, non-interlaced\012- data
Size 584 kB (583923 bytes)
Hash b4ad0a1bda1f2b136f07b7e8b7e5c82a
2037d8d12bbe0d53f3b9bd69abac350858a89f57
6c780ec9a5cb1c2c0e332e2d06e060cae2e959d7fd9e76f0355256dc0dfd74c8
GET /images/imagenes/secciones/bg-legado.png HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/templates/yoo_chester/css/custom.css
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 19:23:43 GMT
Accept-Ranges: bytes
Content-Length: 583923
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
goldsgym.com.do/media/widgetkit/clases-grupales_90f8571996c8625a15006ecfff7c7a5f-234d24eee75a0c9ed6ba6b157ac90dda.png
200 OK 308 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/clases-grupales_90f8571996c8625a15006ecfff7c7a5f-234d24eee75a0c9ed6ba6b157ac90dda.png
IP
File type PNG image data, 435 x 375, 8-bit/color RGBA, non-interlaced\012- data
Size 308 kB (308523 bytes)
Hash 91afb1a5796024fba37d3199f5000a8b
d37741eac25e43946e3bfdf829b06369ed2fc1b4
9558a6acb7163201f48e67e586538c177d39497ef3d525c74b8e5d54d037975b
GET /media/widgetkit/clases-grupales_90f8571996c8625a15006ecfff7c7a5f-234d24eee75a0c9ed6ba6b157ac90dda.png HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 14:56:41 GMT
Accept-Ranges: bytes
Content-Length: 308523
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12227
Expires: Sun, 04 Sep 2022 09:48:12 GMT
Date: Sun, 04 Sep 2022 06:24:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12227
Expires: Sun, 04 Sep 2022 09:48:12 GMT
Date: Sun, 04 Sep 2022 06:24:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12227
Expires: Sun, 04 Sep 2022 09:48:12 GMT
Date: Sun, 04 Sep 2022 06:24:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12227
Expires: Sun, 04 Sep 2022 09:48:12 GMT
Date: Sun, 04 Sep 2022 06:24:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12227
Expires: Sun, 04 Sep 2022 09:48:12 GMT
Date: Sun, 04 Sep 2022 06:24:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca50f9c56ff869b0b63ca71b1a9f8170
13b16ca74113dfd52ccf23e6bb39307fc713f984
76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: M9Y8U9vqVs1ATiPP9jLPybTJ-xwC--5oiRUpj9-imTWfh6_rmtL5Kw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:58:42 GMT
age: 30343
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a65f81-cc75-4344-b2c9-b175dee43d52.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a65f81-cc75-4344-b2c9-b175dee43d52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c7c7824789fc28f90fdfc7afe9856bd
fd24bc01d65805deff463e77bd875a1a299e8b9d
1c5afb4c9648efb6c0117a47cb7613aa1072f7731fa3c7c325228373c8e07106
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a65f81-cc75-4344-b2c9-b175dee43d52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6879
x-amzn-requestid: 75e0d594-5ef0-4cc0-b34b-7a20d2f1a85e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xv3i5GhRoAMFjyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630fd2df-10e5e0bb386fbccb79250553;Sampled=0
x-amzn-remapped-date: Wed, 31 Aug 2022 21:30:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bantvlTnQVyRs4-vDCPzl1xs4yeYwq2g_gOSL5wwfebr5i4dN_6h5w==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:17:08 GMT
age: 29237
etag: "fd24bc01d65805deff463e77bd875a1a299e8b9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48ddd9c9-1923-443a-8dbf-f936630b1f9b.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48ddd9c9-1923-443a-8dbf-f936630b1f9b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7602d55b1969744668194d6433ad2490
c9e50dd6d25825a3fff305261dc8f85a7113150a
9ab721edb038aad74dabe751f7790fe21915884893ea9f471e407ae526495701
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48ddd9c9-1923-443a-8dbf-f936630b1f9b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4615
x-amzn-requestid: a28cc354-9caf-45e8-805e-a9d076f4c55d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wxXFsZIAMFbVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c808-118caff17f74408d6ba251b9;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -lSmGdhagYg_JEI3Q5xybMrcddHCBhA_yGmuvYWQcoUqJdM3jJ_mrA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:48:07 GMT
age: 30978
etag: "c9e50dd6d25825a3fff305261dc8f85a7113150a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d74b981-95e8-43cc-a328-b103c45bc3a0.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d74b981-95e8-43cc-a328-b103c45bc3a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0105cc8e96fdfe48f69b36531b2508fd
4767f09893dba15eb6ef40fff85b901a78484289
98e297dabbb6549eb3197eb7cbd6e91993584280b43f85e425d9e9de86e11faf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d74b981-95e8-43cc-a328-b103c45bc3a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7483
x-amzn-requestid: ba1aa566-1b4c-4841-82ab-27613dea9588
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wyAFuRIAMFUMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80c-6a0430f9720a74c160e55d65;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:33:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jCydwNrf0hriKWEExs7HWWI4C9IX52aoG6lEyuUuLBmGThij_f5-nQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:16:11 GMT
age: 29294
etag: "4767f09893dba15eb6ef40fff85b901a78484289"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
goldsgym.com.do/media/widgetkit/trainers_aba8521d7dc2947d05662aad982c334e-98d39e4c929e0bd4c026fce82282018f.png
200 OK 721 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/trainers_aba8521d7dc2947d05662aad982c334e-98d39e4c929e0bd4c026fce82282018f.png
IP
File type PNG image data, 755 x 620, 8-bit/color RGBA, non-interlaced\012- data
Size 721 kB (720590 bytes)
Hash c81c53dafc25c51a8cf042a50e592098
0e8ba6254685af3e9d20c8de9dda78ed97f26a9f
ad7a26dccf28a9beebf6d08b6f10b8f1a296b34a57769af8a30e2c423802bcf4
GET /media/widgetkit/trainers_aba8521d7dc2947d05662aad982c334e-98d39e4c929e0bd4c026fce82282018f.png HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 14:56:42 GMT
Accept-Ranges: bytes
Content-Length: 720590
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
goldsgym.com.do/images/imagenes/secciones/bg-programas.png
200 OK 1.8 MB URL HTTP/1.1 goldsgym.com.do/images/imagenes/secciones/bg-programas.png
IP
File type PNG image data, 1920 x 660, 8-bit/color RGBA, non-interlaced\012- data
Size 1.8 MB (1756139 bytes)
Hash 0faaf151cf587f9d7595bfaecef12be1
8e49773fba4da6d4dc579005410628a1990d6351
8440b0c340330e2170f44aa3ae0037a831982a08ab7ec1609085a1a9542c6081
GET /images/imagenes/secciones/bg-programas.png HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/templates/yoo_chester/css/custom.css
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Thu, 31 Oct 2019 19:55:38 GMT
Accept-Ranges: bytes
Content-Length: 1756139
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb4b1d74f1443bc3328301ab3ae6464
2768253dacaaad6cb498c6b2eb7694208b0ce0a6
07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8688
x-amzn-requestid: e408351e-ba6c-4e55-815d-449af808282f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5yMEFBLoAMFtqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313ca4d-13831d8572a3b3cf54a0e747;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:42:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: GFM9jerDkTPdhlUTm99E7Lpksw2ZGnV81bNVaZLvWSAiRNDNtkZi4g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:48:07 GMT
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
content-type: image/jpeg
age: 30978
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1bdfdf7e36f78f2f0e4d7ede9fdb76a8
babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5_jCLvdAC-XR-ax3RUbbx9275KPwACOPtAMxSbmv-aP-Lra4sC5zvw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:51:26 GMT
age: 30779
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 1abb8cf7c4e239d59b0289fc58798d60
7ac7c0898c246bd98eb556747f69575a9279074b
15a879ba26b743fee6261d3e611999aa5f8abda4b18dca2c44f4e0496a4a4a4a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2703
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:25 GMT
Last-Modified: Sun, 04 Sep 2022 05:39:22 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 278
goldsgym.com.do/templates/yoo_chester/apple_touch_icon.png
200 OK 23 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/apple_touch_icon.png
IP
File type PNG image data, 114 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash b4ca18c07ab4ffb47d2f9f17e363bba4
793c82ca950e7b14f201cb9bb11e7d9ff7b126e3
bdf16c67fbda18cc6c472d1dadf2d536a2a3ed521ef2adb755c2a76ad888937b
GET /templates/yoo_chester/apple_touch_icon.png HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 13:25:16 GMT
Accept-Ranges: bytes
Content-Length: 23226
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
goldsgym.com.do/templates/yoo_chester/favicon.ico
200 OK 15 kB URL HTTP/1.1 goldsgym.com.do/templates/yoo_chester/favicon.ico
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash f770f08723fc5b21d3d8daa85c87b975
79cef374f28aa85d8057c0c76db951d5aeec7ed1
94842582ded644eb0477f97497ec601a82407dabe6a0407c38c4719ba6cc6662
GET /templates/yoo_chester/favicon.ico HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 13:27:32 GMT
Accept-Ranges: bytes
Content-Length: 15415
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/x-icon
js.hs-analytics.net/analytics/1662272400000/20244697.js
200 OK 20 kB URL HTTP/2 js.hs-analytics.net/analytics/1662272400000/20244697.js
IP
File type ASCII text, with very long lines (63804)
Hash 6ce30a50d9cf6f5b7f91b6defd45a916
dd563946d7699bd1ffba3337fdd23e104774154c
978da3d8a70111e0956fa558e33bf388c1fd8dca98e265a6b10162aa47068162
GET /analytics/1662272400000/20244697.js HTTP/1.1
Host: js.hs-analytics.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: text/javascript
x-amz-id-2: mAcyTtWh0Tns0HgPHRVfxzeuZLKB/CpOkOLOyb5M0/jRjm0JaHKckzkRc9Ka9CSs4daLx+vjeYc=
x-amz-request-id: 41JPN2ZHT12BBKG6
last-modified: Wed, 31 Aug 2022 13:46:14 GMT
etag: W/"ca8620fa61567b63edefbdb52a08cb8c"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: null
access-control-allow-credentials: false
expires: Sun, 04 Sep 2022 06:29:25 GMT
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 7454a4600ace0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2a93541e0561e7e62bf5b2ecbb2021f9
47970ee954abc5187c54ebf63fb86406be2c588f
4b5315e9009017cb3f37ac77524966daea1f13cba36ec67f18981faa0e2d8a13
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
snapwidget.com/embed/764352
401 Unauthorized 31 kB URL HTTP/2 snapwidget.com/embed/764352
IP
Hash b1c0c62e772149c685eff0e31eefb1c5
120585fc6427e669e83ea7759869a6c6c7827618
15deb46b5aa5377864cb1ef4ed937cb7a5078b1dbb1ad3a0d5b206a1a1fed232
GET /embed/764352 HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
x-robots-tag: all
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3A5mO9xJOC%2FLjtmEvWevJ78LNir0QMjd4UImn9Eb5p%2FDA29JxvgPhqulF%2F8R04pDfZEUP4e%2FR4vIy1Y33AGRiA%2FBRQLsAe7fDTvJZ7pmc2dVZZZ7H%2BxgFX2GvwE1m1Kr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 7454a45cec6ab51b-OSL
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Sep 2022 06:14:23 GMT
expires: Sun, 04 Sep 2022 06:29:23 GMT
cache-control: public, max-age=900
age: 602
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
snapwidget.com/js/embed.vendor.min.2f17f0b14ee46c5a.js
200 OK 1.2 kB URL HTTP/2 snapwidget.com/js/embed.vendor.min.2f17f0b14ee46c5a.js
IP
File type ASCII text, with very long lines (2529), with no line terminators
Hash 3237b9710c616cf1403e5195c88fcfa6
0b15837257c5e01e39f286cbe67b46f17ab59546
9604523ef59926d13f680c8b168cd4b95c75effe52185d9b073ff7268d103f1a
GET /js/embed.vendor.min.2f17f0b14ee46c5a.js HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/764352
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: application/javascript; charset=utf-8
cf-bgj: minify
etag: W/"62f0b6d6-9e1"
last-modified: Mon, 08 Aug 2022 07:10:14 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 461691
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PgTTRVaZk8ij8yVhZMbOC64lXFiPjkFqDM24Q0BbQ2Y%2BVds6OJf4HVlD5NZQZDztOscyEvjE4xJBHE1Iv9gnAlA2OmmuZcwJQOK2vw%2FcDM1aQUl7b49LAvQcdWfleEJU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 7454a45f7f13b51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sun, 04 Sep 2022 06:24:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2a93541e0561e7e62bf5b2ecbb2021f9
47970ee954abc5187c54ebf63fb86406be2c588f
4b5315e9009017cb3f37ac77524966daea1f13cba36ec67f18981faa0e2d8a13
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3f5b4e778429d4ba70b497cc9fbb1127
db17f774a14f160caa77eb0222152767a364bba7
64da763bf84ec2d6284a112f50392f15a8b11122f3875317c52bd6c5e8e8d894
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
snapwidget.com/js/embed.main.min.b61fafc5de1ae792.js
200 OK 1.1 kB URL HTTP/2 snapwidget.com/js/embed.main.min.b61fafc5de1ae792.js
IP
File type ASCII text, with very long lines (2862), with no line terminators
Hash 3ffe23338f70ccbccd618e4b824a46da
90c22c5df0449a735fb0c84aa657145bf0d478b9
4a61edefd5efc30fbca7321523dc8570cd7dadb2b4285efd23e1bbd49a658fd1
GET /js/embed.main.min.b61fafc5de1ae792.js HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/764352
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: application/javascript; charset=utf-8
cf-bgj: minify
etag: W/"63034249-b2e"
last-modified: Mon, 22 Aug 2022 08:46:01 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 478299
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y%2BG8wwD7oYulXXwkxD8%2Fg969IzQdl5afPcdPzOnOaXZiXwaIhBIX80swissJset%2Fs2nNY7d9xS2i%2Bh23AujTlw3c1OcCJnerXfJ1yGJc%2Bl%2FG9P9mUdckVL4GhaBLugHO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 7454a45fdf7fb51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 30 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 82d1fe6a15b684e2c198c6aec908cd01
175eaf08f5888650621f3bc5ec6ad6318d9ed6c6
64a32640450c125bddd3dd5b0f69afc9c8177972bee34ac563c56cde797a47a1
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 04 Sep 2022 06:24:26 GMT
server: ESF
cache-control: private
content-length: 30495
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1278db78948279716d72ac203ad8fb0d
1746b9863b781ed9a0c26a126b9b80d36c903974
8d9e31a35490bc2ebef4c4c2152c89b62491c0cdfc31ec0594bc21fd2e9f43f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/zv6PJMU-0ukxHAKoJU32K0_TjePDWjguQMfttAD48sg.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/zv6PJMU-0ukxHAKoJU32K0_TjePDWjguQMfttAD48sg.js
IP
File type ASCII text, with very long lines (35604)
Hash 6896daaf5d26e249347c9ea9734306f6
8f6cdb11eabd7aaa9188374f4a3baa23c2269294
ea6bbf623e7799025d83ac44af8beda2d7c68ad18ce6fdea862ab354977bab35
GET /js/th/zv6PJMU-0ukxHAKoJU32K0_TjePDWjguQMfttAD48sg.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14002
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 05:03:18 GMT
expires: Thu, 31 Aug 2023 05:03:18 GMT
cache-control: public, max-age=31536000
age: 350468
last-modified: Mon, 15 Aug 2022 09:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
goldsgym.com.do/media/widgetkit/planes_94105853323cd241569c098c494b3c39-7db8e69bda7cb232db5a4d744a106fa4.png
200 OK 14 kB URL HTTP/1.1 goldsgym.com.do/media/widgetkit/planes_94105853323cd241569c098c494b3c39-7db8e69bda7cb232db5a4d744a106fa4.png
IP
Hash b600177efe473664fb627ad35ffbc4db
b85f65be40c923277d1455e64a33966ee9fa0838
ec20323b3d03a9e3cb135ab17c27cee75eab248b40f3ebed5062d80ef18f961f
GET /media/widgetkit/planes_94105853323cd241569c098c494b3c39-7db8e69bda7cb232db5a4d744a106fa4.png HTTP/1.1
Host: goldsgym.com.do
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/es/
Cookie: 6ad935900480aca3af70350702ad0a5f=9qmqloo1thb3ujhmrn65ver4i3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:25 GMT
Server: Apache
X-Content-Type-Options: nosniff
Last-Modified: Wed, 26 Feb 2020 14:56:39 GMT
Accept-Ranges: bytes
Content-Length: 288646
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 30 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash d086f39b59cbeb32b620feebf39ebbd0
fe8020d359d76985a4ce803d3c7adc62c3626fe3
07dbc019e6b09c80ff9008f41a5364c66115f8ac1c3945b4e2cbbfc901df7598
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 04 Sep 2022 06:24:26 GMT
server: ESF
cache-control: private
content-length: 30416
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 998b9005291d8db01ddce1b04779e5cd
1647a295775cd1b26ceb8e8a8ae169a6fc33f9b8
f72d00e63b77eb486c76207b015d0d246bece9c002d1ade66c3963813b64b09e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
200 OK 20 kB URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
IP
File type ASCII text, with very long lines (45992)
Hash 8b2c07d821d7d613fcae8481d517ae6c
9a29f0d5292a4b7ea6233665b816c833d6f40bbb
be64d9e91bd2b62745efc87f9a937615d1cfe1204f65caab367669d0251394ca
GET /beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://snapwidget.com
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7454a4600f17b527-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/GmFjF9-1YJk/sddefault.webp
200 OK 20 kB URL HTTP/2 i.ytimg.com/vi_webp/GmFjF9-1YJk/sddefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c461c4cabbf6fa4c142f1b04d990c823
e410621a543becd491572ee9bc04e58b32f65378
eeccb96398a3ca3b68fd0a663825d7e6ae195c9af1969ecb3a3eb4b3b1e6e406
GET /vi_webp/GmFjF9-1YJk/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 19628
date: Sun, 04 Sep 2022 06:24:26 GMT
expires: Sun, 04 Sep 2022 08:24:26 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash d4e1d4d4193ccc5a94b969cefd3202ec
813e66055be31dfed6cb56a5f388d0aa841bb9bb
f1fa6ce06586da313ec6473084fee81c939f8d10b2fe458145a39ae080031a52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 693
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:26 GMT
Last-Modified: Sun, 04 Sep 2022 06:12:54 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b291ba86fd8ccc4e7b6cee355e22114
fd54e165ca2046591c7185132dc5e86df69ab4f2
4e3d80e4325a12aac90231d9a008b9064e4a6c79dc20454c0daaae10990e4af7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 998b9005291d8db01ddce1b04779e5cd
1647a295775cd1b26ceb8e8a8ae169a6fc33f9b8
f72d00e63b77eb486c76207b015d0d246bece9c002d1ade66c3963813b64b09e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2
200 OK 35 B URL HTTP/2 forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2 HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:26 GMT
content-type: image/gif
content-length: 35
x-trace: 2B58147ED064DF604661FC3F467621245A886EE639000000000000000000
cache-control: max-age=0, no-cache, no-store
vary: Accept-Encoding
x-hubspot-correlation-id: 9fbc77a8-c521-474e-91e2-9423d93ee740
access-control-allow-credentials: false
access-control-expose-headers: X-Origin-Hublet
x-robots-tag: none
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7454a464796c1c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
snapwidget.com/cdn-cgi/rum?
200 OK 299 B URL HTTP/2 snapwidget.com/cdn-cgi/rum?
IP
Hash 4ad42b7f0f9947e9c049e7fdf5bdb850
52d3e346b1019b031d89a982d3b85f4b9cfbefd4
fad1103d076e4ada8be30152f820d505971394fb815d66aaae080196d6a78de6
POST /cdn-cgi/rum? HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: VQICUlZUGwcFV1BRAA==
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjE0NTMwNyIsImFwIjoiNDUzMTUwIiwiaWQiOiI5YWU1ZjZlZGYzYzRkY2ZjIiwidHIiOiIxYmQ5NDI1MDY4YjAyOGZiZjE0YjVmZDk1ODY0YjdhYSIsInRpIjoxNjYyMjcyNjYzMzI5fX0=
traceparent: 00-1bd9425068b028fbf14b5fd95864b7aa-9ae5f6edf3c4dcfc-01
tracestate: 145307@nr=0-1-145307-453150-9ae5f6edf3c4dcfc----1662272663329
content-type: application/json
Content-Length: 2709
Origin: https://snapwidget.com
Connection: keep-alive
Referer: https://snapwidget.com/embed/764352
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:26 GMT
content-type: text/plain
access-control-allow-origin: https://snapwidget.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7454a4654d4eb51b-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
bam.nr-data.net/1/a53393d12f?a=453137&v=1216.487a282&to=ZlNSMUNXWBcFW0FRCV8ZcQZFX1kKS3lFSDp5QkQVbXVZChBKWlQKVERDOXRbVAEAe1pWEkNZXAlURHYXDFdCbRVURHUIU1NS&rst=1368&ck=1&ref=https://snapwidget.com/embed/764352&ap=159&be=512&fe=1191&dc=857&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1662272661877,%22n%22:0,%22f%22:1,%22dn%22:11,%22dne%22:13,%22c%22:13,%22s%22:17,%22ce%22:120,%22rq%22:120,%22rp%22:395,%22rpe%22:425,%22dl%22:500,%22di%22:620,%22ds%22:856,%22de%22:856,%22dc%22:1189,%22l%22:1189,%22le%22:1191%7D,%22navigation%22:%7B%7D%7D&at=ShRRRwtNSxk%3D&jsonp=NREUM.setToken
200 OK 73 B URL HTTP/1.1 bam.nr-data.net/1/a53393d12f?a=453137&v=1216.487a282&to=ZlNSMUNXWBcFW0FRCV8ZcQZFX1kKS3lFSDp5QkQVbXVZChBKWlQKVERDOXRbVAEAe1pWEkNZXAlURHYXDFdCbRVURHUIU1NS&rst=1368&ck=1&ref=https://snapwidget.com/embed/764352&ap=159&be=512&fe=1191&dc=857&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1662272661877,%22n%22:0,%22f%22:1,%22dn%22:11,%22dne%22:13,%22c%22:13,%22s%22:17,%22ce%22:120,%22rq%22:120,%22rp%22:395,%22rpe%22:425,%22dl%22:500,%22di%22:620,%22ds%22:856,%22de%22:856,%22dc%22:1189,%22l%22:1189,%22le%22:1191%7D,%22navigation%22:%7B%7D%7D&at=ShRRRwtNSxk%3D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash 516a128bb6000ca8154792678f4333fb
41d0257bea96afd36c6f3e40fcfdc9ca247f8e01
9fa62b52f24b87a40410fe842cb9be494abed114a2eac2eb406c8b4a4d372d10
GET /1/a53393d12f?a=453137&v=1216.487a282&to=ZlNSMUNXWBcFW0FRCV8ZcQZFX1kKS3lFSDp5QkQVbXVZChBKWlQKVERDOXRbVAEAe1pWEkNZXAlURHYXDFdCbRVURHUIU1NS&rst=1368&ck=1&ref=https://snapwidget.com/embed/764352&ap=159&be=512&fe=1191&dc=857&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1662272661877,%22n%22:0,%22f%22:1,%22dn%22:11,%22dne%22:13,%22c%22:13,%22s%22:17,%22ce%22:120,%22rq%22:120,%22rp%22:395,%22rpe%22:425,%22dl%22:500,%22di%22:620,%22ds%22:856,%22de%22:856,%22dc%22:1189,%22l%22:1189,%22le%22:1191%7D,%22navigation%22:%7B%7D%7D&at=ShRRRwtNSxk%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 06:24:26 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7454a464def5b4fa-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=88d6ccdd367c3508; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
region1.google-analytics.com/g/collect?v=2&tid=G-B7V8LZF2LR>m=2oe8v0&_p=1062289247&cid=1759358320.1662272663&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662272662&sct=1&seg=0&dl=https%3A%2F%2Fgoldsgym.com.do%2Fes%2F&dt=Inicio&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-B7V8LZF2LR>m=2oe8v0&_p=1062289247&cid=1759358320.1662272663&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662272662&sct=1&seg=0&dl=https%3A%2F%2Fgoldsgym.com.do%2Fes%2F&dt=Inicio&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B7V8LZF2LR>m=2oe8v0&_p=1062289247&cid=1759358320.1662272663&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662272662&sct=1&seg=0&dl=https%3A%2F%2Fgoldsgym.com.do%2Fes%2F&dt=Inicio&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goldsgym.com.do
Connection: keep-alive
Referer: https://goldsgym.com.do/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://goldsgym.com.do
date: Sun, 04 Sep 2022 06:24:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 04 Sep 2022 06:24:26 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 04 Sep 2022 06:24:26 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 118 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2cb1fafa26cb8e091dae9817528534f4
0b19edf92be48eb432c7bf04545924a3a56dc550
02d296c05aad937bb6e26b639ba207a3259d59477ff2863f6559f5c2873fa04c
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1016
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 04 Sep 2022 06:24:26 GMT
server: ESF
cache-control: private
content-length: 118
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/AMLnZu9nlo5Njy_qJ8_6Lh_LHX87TcrVp5y26jrevyz2=s68-c-k-c0x00ffffff-no-rj
200 OK 4.7 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu9nlo5Njy_qJ8_6Lh_LHX87TcrVp5y26jrevyz2=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 9c0cd71981832b2e86d74bbca6f942d1
6c36c0f3cd81a1e49391e1da96d51b65ec70a9d1
5dd4ca3067d97f24ce31da93f3807cb0f2f721fc210795bb9ce9a742b7c001e0
GET /ytc/AMLnZu9nlo5Njy_qJ8_6Lh_LHX87TcrVp5y26jrevyz2=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v9"
expires: Mon, 05 Sep 2022 06:24:26 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 06:24:26 GMT
server: fife
content-length: 4711
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 118 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6d9da7ec8c857f7cfe2b4751bbadd686
b71c88d6ee4e500f29a2fb03513b1482415ddbe5
e5f3216397c5b9f2070f32b0499559ad8cb1e54b5c7cfba332e64b8cd57d6260
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1200
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 04 Sep 2022 06:24:26 GMT
server: ESF
cache-control: private
content-length: 118
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b291ba86fd8ccc4e7b6cee355e22114
fd54e165ca2046591c7185132dc5e86df69ab4f2
4e3d80e4325a12aac90231d9a008b9064e4a6c79dc20454c0daaae10990e4af7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 06:24:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.hscollectedforms.net/collectedforms.js
200 OK 0 B URL HTTP/2 js.hscollectedforms.net/collectedforms.js
IP
GET /collectedforms.js HTTP/1.1
Host: js.hscollectedforms.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goldsgym.com.do
Connection: keep-alive
Referer: https://goldsgym.com.do/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Mon, 18 Jul 2022 02:17:32 UTC
etag: W/"877e5f54a66a69786dec54038d0864c4"
x-amz-server-side-encryption: AES256
x-amz-version-id: gdKWpz_yvObw8s97wY_QgOhrdmJzIElp
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 31f764b3af7bd53499e97e3e9c790b42.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD55-P3
x-amz-cf-id: E2C0ipC3ork7wZBYV8PnVLZX6YA0-WDCPDpEuEkZSX64kLlbjUwKCw==
cache-control: s-maxage=86400, max-age=0
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=collected-forms-embed-js/static-1.285/bundles/project.js&cfRay=7454a45cbdb61c16-IAD
x-hs-target-asset: collected-forms-embed-js/static-1.285/bundles/project.js
x-hs-cache-status: MISS
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: MISS
server: cloudflare
cf-ray: 7454a45cbdb61c16-OSL
content-encoding: br
X-Firefox-Spdy: h2
snapwidget.com/stylesheets/embed.vendor.min.760717b3f565c387.css
200 OK 0 B URL HTTP/2 snapwidget.com/stylesheets/embed.vendor.min.760717b3f565c387.css
IP
GET /stylesheets/embed.vendor.min.760717b3f565c387.css HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/764352
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: text/css
cf-bgj: minify
etag: W/"62f0b6de-937"
last-modified: Mon, 08 Aug 2022 07:10:22 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 945187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OPiY4LiFV5PFoNczZxZKiOawUgwoZqYgzrOwn8ULAMOiD3cHSGPolWKJ9IhIdcp1kCZRl0c79sSlBAEUEsaBAfq3YYXdJNzi4jizM0A17VvAGPGJ%2BQ2zRU6%2B0Itr2Jfu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 7454a45f7f0cb51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.hs-banner.com/20244697.js
200 OK 0 B URL HTTP/2 js.hs-banner.com/20244697.js
IP
GET /20244697.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: jXb9M02tqp27nBbgEoDFrub4k1McWJcILvKJS0zLbSUBignDose/n9ZmfXvCmdOnqodq65vcNRs=
x-amz-request-id: 41JZ28GJT0R1DNS8
last-modified: Tue, 30 Aug 2022 22:54:48 GMT
etag: W/"3df6a21d608b2c7786a94b08eccd1f4b"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: 4mqnj3zxBfssoeu_a_JYEW_S3nC24x_I
access-control-allow-origin: https://goldsgym.com.do
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
expires: Sun, 04 Sep 2022 06:29:25 GMT
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 7454a45cbbf2b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
snapwidget.com/cdn-cgi/rum?
200 OK 0 B URL HTTP/2 snapwidget.com/cdn-cgi/rum?
IP
POST /cdn-cgi/rum? HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 2006
Origin: https://snapwidget.com
Connection: keep-alive
Referer: https://snapwidget.com/embed/764353
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:26 GMT
content-type: text/plain
access-control-allow-origin: https://snapwidget.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7454a4653d37b51b-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
snapwidget.com/stylesheets/embed.style.min.307799cd3bc5b2ee.css
200 OK 0 B URL HTTP/2 snapwidget.com/stylesheets/embed.style.min.307799cd3bc5b2ee.css
IP
GET /stylesheets/embed.style.min.307799cd3bc5b2ee.css HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/764352
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=15975
etag: W/"62f0b6a9-3e67"
last-modified: Mon, 08 Aug 2022 07:09:29 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 945187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ud0IOhmARO95zwDbjG3PA7KrUfkepmJ6ocUoCW1vNMKMiOJFKAqIb%2F1XM6RgzXgJOK0j0MiUgG6Dvfu6jwQrZZ5f7595r0RTF3aidVzzyWbouvr%2FQ2UqgYBw%2BJg9b%2FF0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 7454a45f7f0eb51b-OSL
content-encoding: br
X-Firefox-Spdy: h2
snapwidget.com/embed/764353
401 Unauthorized 0 B URL HTTP/2 snapwidget.com/embed/764353
IP
GET /embed/764353 HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goldsgym.com.do/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 401 Unauthorized
date: Sun, 04 Sep 2022 06:24:25 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
x-robots-tag: all
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QmnB6qTIbDAHCmuGOCUIjJVPeRrWBkwFgj16b5WBPs8%2FpbghTavd2GzNwm38e7SIckQDe7JMypyZS0ldI2I9pgqz0t6yAatMUi413OdG7Y89%2BOqFSiqdQ1Btop0bVRMu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 7454a45cec6cb51b-OSL
X-Firefox-Spdy: h2
83.229.67.163
104.17.68.176
93.184.220.29
23.36.76.226