click.ajourneyforhealth.net/?t=c&ids=NTczMzgwMTc2__MTQ5MTI=__NDk1MjgwNTI=__Njgw__831&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGZ3kzcg==
301 Moved Permanently 357 B URL HTTP/1.1 click.ajourneyforhealth.net/?t=c&ids=NTczMzgwMTc2__MTQ5MTI=__NDk1MjgwNTI=__Njgw__831&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGZ3kzcg==
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash de824d82489b75a0f5c26e00a5f1d929
c8afa074ccf44c2fb7843ba6c00e06f98e2b72c0
63206ee2bbdb3f0c353e25e5aca417a9f93b505549aa5d7dfb30aa7a24f58f71
GET /?t=c&ids=NTczMzgwMTc2__MTQ5MTI=__NDk1MjgwNTI=__Njgw__831&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGZ3kzcg== HTTP/1.1
Host: click.ajourneyforhealth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 26 Jan 2023 19:34:59 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 357
Connection: keep-alive
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Security-Policy: upgrade-insecure-requests
Location: https://click.ajourneyforhealth.net/?t=c&ids=NTczMzgwMTc2__MTQ5MTI=__NDk1MjgwNTI=__Njgw__831&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGZ3kzcg==
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: MISS
X-Server-Powered-By: Engintron
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2301
Expires: Thu, 26 Jan 2023 20:13:21 GMT
Date: Thu, 26 Jan 2023 19:35:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9724
Expires: Thu, 26 Jan 2023 22:17:04 GMT
Date: Thu, 26 Jan 2023 19:35:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 18:35:16 GMT
content-type: application/json
age: 3584
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5422
Expires: Thu, 26 Jan 2023 21:05:22 GMT
Date: Thu, 26 Jan 2023 19:35:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: EEJVcbMVCvzQLliQUKITTedwjXr2sxA1O0yjzwBp3a9Y/5ipK8jQBsSsXFt9SWsJ0gK98yVILSY=
x-amz-request-id: F9TJCQEXJPSW8J9N
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 18:49:06 GMT
age: 2754
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 19:35:00 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfbe67cebf60c6c162ebcaf48e113cdd
45261d07ceaa960bd9a81fc65eae3d8f9806e1c0
405a3725f216dd70c2395686689938b0285e09df3b7a52cffe8080f30b2f2da1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "405A3725F216DD70C2395686689938B0285E09DF3B7A52CFFE8080F30B2F2DA1"
Last-Modified: Thu, 26 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21560
Expires: Fri, 27 Jan 2023 01:34:20 GMT
Date: Thu, 26 Jan 2023 19:35:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 18:41:40 GMT
age: 3200
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c398b6b39d11d25b8ae9bc5cd94a1c98
640aa8c399ced71d0c2a9f5a90fbaf091b01d642
a6f07f7c6a4746acc25457c726701df33120628dfb578bc4982448d8efee5855
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A6F07F7C6A4746ACC25457C726701DF33120628DFB578BC4982448D8EFEE5855"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8346
Expires: Thu, 26 Jan 2023 21:54:06 GMT
Date: Thu, 26 Jan 2023 19:35:00 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 182a7560698200a9a41062d0d769a00a
a99e120d0450e5bbdb14eeb791159c7fe64940ab
5629f3cf91023b8840fe68ba1cf3daaf5b51ea1df9db43b1aff623fd13e5784e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=161029
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:01 GMT
Etag: "63d2a7ea-117"
Expires: Sat, 28 Jan 2023 16:18:50 GMT
Last-Modified: Thu, 26 Jan 2023 16:18:50 GMT
Server: nginx
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: N/ANMjUg3nAOzdez06X7IQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8S4z14M2oz9Oyqt8roRGUL8R4SU=
ocsp.digicert.com/
200 OK 279 B IP
Hash 182a7560698200a9a41062d0d769a00a
a99e120d0450e5bbdb14eeb791159c7fe64940ab
5629f3cf91023b8840fe68ba1cf3daaf5b51ea1df9db43b1aff623fd13e5784e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=161029
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:01 GMT
Etag: "63d2a7ea-117"
Expires: Sat, 28 Jan 2023 16:18:50 GMT
Last-Modified: Thu, 26 Jan 2023 16:18:50 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-62785402-79
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-62785402-79
IP
File type ASCII text, with very long lines (1759)
Hash d6b4128580b5f5ce472773246b852af9
634014ab57f45a3335aa637c4a5bdd109bbb092f
1749c3115d4883304f39657cc9e3a117cd6a99ae77b8957625580bee01108f68
GET /gtag/js?id=UA-62785402-79 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 19:35:01 GMT
expires: Thu, 26 Jan 2023 19:35:01 GMT
cache-control: private, max-age=900
last-modified: Thu, 26 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44096
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 82e3abc4a7b17efedca67cf215f4bb60
e20e55d87591af7db3a4bcfc429048f85e389b85
df8901d4d87686fb11e17986f5d53cf513f675b4dd71f0a2e35c7ffbefa7fb9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
folicrex.com/report?aff_id=806&subid=mw1giaop0126folicrex
200 OK 52 kB URL HTTP/2 folicrex.com/report?aff_id=806&subid=mw1giaop0126folicrex
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (7889), with CRLF, LF line terminators
Hash 110f1c50eea857bd8b7ae8fc663cd7f5
a89a57049835d7824783073642c2b9c5bebca1bf
2e608f676173806e727e3aa0af60e2fd239e0c72ddc858ea7f81fab6d407a4d7
GET /report?aff_id=806&subid=mw1giaop0126folicrex HTTP/1.1
Host: folicrex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emdlvr.com/
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImlBWHpuUFAwenNkSjBGUWh3d0VYcmc9PSIsInZhbHVlIjoiaVhFb3BSa3I2L3BkaUxFT2J5c2dsOWpvTkdJdGhQb1JRcVJ3MUJacUxKR1J6WUljODJmNFhhL2hvbFRJVERNaCIsIm1hYyI6ImZiY2RiYmJiOGVmZGY1Y2Y4OTliZjczOTgyNGMyYmE4Y2Q4NmQ3NmQzNDU4ZDYyMTEwY2JlNTYwYWU2MDEyODQifQ%3D%3D; _=eyJpdiI6ImpydHhjQmpybytRaVgxU1lteHppQmc9PSIsInZhbHVlIjoiSjlTU2lqK0haSWlXbDlMV2lES1ZRVzFhdER1V2tqclU2QVVKbWdzSkRMa3lwSUluK3ZhcGk3WkJFWFlCMUhhYSIsIm1hYyI6IjUzOWYxMTVjMDQ5ZmVhNjliODJiYTBkNWI4NjkxNTkzZDlmZjQ1NzViYjMxZDUzMTA2YTE3MjM0MDMxOGFiZjEifQ%3D%3D; referrer=eyJpdiI6IkxVcCtSNEJrWGdCWC9mYXJJT1ZJUGc9PSIsInZhbHVlIjoiT1M3bnJtN25aVDl5Uk0xTWY5ZHpYa1BJQjgxd2dDM1h1bXc2YWhHR3RFZGk5U3pmT2tieVEyWGhvWS9GTzNldCIsIm1hYyI6ImU1NzkzYmQ1MjEzZjA2NTc2NTA4MDg1NjIwMWU5ZjRmNWRjOGE5ZjJlMGRmOTYxMDZhZWVmMjM3OTAwNWQ3NzIifQ%3D%3D; affiliate=eyJpdiI6IkFpNncrSS9yT1VyVGxHNzh0Wlo4NUE9PSIsInZhbHVlIjoiRkxqZnl2Q3lRZmd2dEMxclJ0SHIzQT09IiwibWFjIjoiNDg1ZmE1ODdkY2JmNjY0MmUyNzJhN2RhZGIzYzMzMjFkYmUzNWM5OGJjODU5MjQ5NDcyMTdiYzIwZDliYjdhZSJ9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 19:35:01 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
set-cookie: XSRF-TOKEN=eyJpdiI6ImhET3czblREY2ptZkllejhaRGx3SUE9PSIsInZhbHVlIjoiZTJEMUhmaGlIaEhYbjNRQW50N1E4YmNuQ21VN251TFRoMkRpM1BWdEhMamdtbXJnTXgwam1WeXJmV0pMVEVhLyIsIm1hYyI6IjNhNjAyZTY4ZDM3NDc3YTNlMTE1MjQ3YzMyMTIwNjE3ZTllNWJhNjNhZWVkODVlNGZmYTM0MjNhNzMwNmY5OTUifQ%3D%3D; expires=Sun, 05-Feb-2023 19:35:01 GMT; Max-Age=864000; path=/; samesite=lax
_=eyJpdiI6Ii9mSkRYOFdlckJGTUNqSW9HKzlGTmc9PSIsInZhbHVlIjoieGZlRS9uSzNaZ3kxUitoRnh6Ry9KYmdoVzM4TUJOWFI5aGpyczFzR1AyZXhZQXRLOHc0bThWR2l0anlHSzFSYiIsIm1hYyI6IjBjODBhOGU1OTk0YTA2ZDY2Yzk0OWY3NzQ5N2Q2NzYyMDkwNzhmZmFmYzhiNDBjZDFkZGM4OWEzNTJlMDUxZWIifQ%3D%3D; expires=Sun, 05-Feb-2023 19:35:01 GMT; Max-Age=864000; path=/; httponly; samesite=lax
referrer=eyJpdiI6IlpqRVVyWlhvQlVabUk3STNmeFZTcnc9PSIsInZhbHVlIjoiYVdzWjN6QXJHUUxNSUQ5eTI5azR6SVdqTXBEbFdLVFpFL1p5OFN5blVRM2Z0bHdzd0U3VmFDZmNucHRucCt0UyIsIm1hYyI6IjkyOWYyYmI3ODZkZGE4MmMwMmFmYTg3YjE2YmZlYjlhZTdhM2Q0NzgyMTE2YTVhZDliYTgyNDBlNjBkZTVjNDAifQ%3D%3D; expires=Tue, 31-Jan-2023 19:35:01 GMT; Max-Age=432000; path=/; httponly; samesite=lax
pixels=eyJpdiI6ImlmSmExSHlFQ3BtaVgraENwODRsZUE9PSIsInZhbHVlIjoiQnh1UXRKdkVMRDVOOWdmRXlvajRVUT09IiwibWFjIjoiZjRmNmIxYWVkMTQ5YzAyYzc1OTAzNGE5ZjNjYTJmYzdjYmUxNmUzMDVjYTlhYjEwNzU1MWJmYjI3MzdhMmFkMSJ9; expires=Tue, 31-Jan-2023 19:35:01 GMT; Max-Age=432000; path=/; httponly; samesite=lax
hp=eyJpdiI6InNOSVNUdTRESDhRRzJUVXEzNUdyZVE9PSIsInZhbHVlIjoidlM0SVhwQ1RDUzE5RkdmREVuTTBOc0ZueWFpYm1LNFhWVTg5Q0E3S1FrYmFGRE53OThJM05BaFpLcjB3em1mdyIsIm1hYyI6IjNkNDQ1ODdiMjEyYzE5ZDliNzNlNDJhZjFhODY0Y2JjYjczNTY5MmEwMzI2YjVlZDBiYjgxZDExZjczNTgwYjQifQ%3D%3D; expires=Tue, 31-Jan-2023 19:35:01 GMT; Max-Age=432000; path=/; httponly; samesite=lax
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cWJV%2BXCZiFi6ISRyViHl3%2F9Q6gCrTbd0vyaeH2SJNI%2FPBnIOx%2B%2F4f%2FgY0RMXJ7EID2uLDFNFA3JTp54jV4APAD4ozYFvDhR5MZLKwBRaqj%2Fjg5sErP9fRxsmdDukom8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fbb0793dbcb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700;900
200 OK 1.7 kB URL HTTP/2 fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700;900
IP
Hash c72a71d3d676e59ecd7a4741bab3de4c
34ccbdfb1b5b52a532a0f7048befaa819cdcdb8a
896e9f684fd34ba5a2952b05a1a8a9cbba517234d0a1865fb9a54b73ff1813e9
GET /css2?family=Montserrat:wght@400;500;600;700;900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 26 Jan 2023 19:35:01 GMT
date: Thu, 26 Jan 2023 19:35:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://folicrex.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Jan 2023 07:08:09 GMT
expires: Sat, 20 Jan 2024 07:08:09 GMT
cache-control: public, max-age=31536000
age: 563213
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
folicrex.com/?aff_id=806&subid=mw1giaop0126folicrex
302 Found 60 kB URL HTTP/2 folicrex.com/?aff_id=806&subid=mw1giaop0126folicrex
IP
Hash 529ba6641aa83448a30b19f901916c1d
090c2590afafd782185521e298d6314332195da5
cac86e7f448463d9528ea8eade14b66de67c9b222a650a03f0bbb1f2a48970ea
GET /?aff_id=806&subid=mw1giaop0126folicrex HTTP/1.1
Host: folicrex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://emdlvr.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 26 Jan 2023 19:35:01 GMT
content-type: text/html; charset=UTF-8
location: https://folicrex.com/report?aff_id=806&subid=mw1giaop0126folicrex
cache-control: no-cache, private
cf-cache-status: DYNAMIC
set-cookie: XSRF-TOKEN=eyJpdiI6ImlBWHpuUFAwenNkSjBGUWh3d0VYcmc9PSIsInZhbHVlIjoiaVhFb3BSa3I2L3BkaUxFT2J5c2dsOWpvTkdJdGhQb1JRcVJ3MUJacUxKR1J6WUljODJmNFhhL2hvbFRJVERNaCIsIm1hYyI6ImZiY2RiYmJiOGVmZGY1Y2Y4OTliZjczOTgyNGMyYmE4Y2Q4NmQ3NmQzNDU4ZDYyMTEwY2JlNTYwYWU2MDEyODQifQ%3D%3D; expires=Sun, 05-Feb-2023 19:35:01 GMT; Max-Age=864000; path=/; samesite=lax
_=eyJpdiI6ImpydHhjQmpybytRaVgxU1lteHppQmc9PSIsInZhbHVlIjoiSjlTU2lqK0haSWlXbDlMV2lES1ZRVzFhdER1V2tqclU2QVVKbWdzSkRMa3lwSUluK3ZhcGk3WkJFWFlCMUhhYSIsIm1hYyI6IjUzOWYxMTVjMDQ5ZmVhNjliODJiYTBkNWI4NjkxNTkzZDlmZjQ1NzViYjMxZDUzMTA2YTE3MjM0MDMxOGFiZjEifQ%3D%3D; expires=Sun, 05-Feb-2023 19:35:01 GMT; Max-Age=864000; path=/; httponly; samesite=lax
referrer=eyJpdiI6IkxVcCtSNEJrWGdCWC9mYXJJT1ZJUGc9PSIsInZhbHVlIjoiT1M3bnJtN25aVDl5Uk0xTWY5ZHpYa1BJQjgxd2dDM1h1bXc2YWhHR3RFZGk5U3pmT2tieVEyWGhvWS9GTzNldCIsIm1hYyI6ImU1NzkzYmQ1MjEzZjA2NTc2NTA4MDg1NjIwMWU5ZjRmNWRjOGE5ZjJlMGRmOTYxMDZhZWVmMjM3OTAwNWQ3NzIifQ%3D%3D; expires=Tue, 31-Jan-2023 19:35:01 GMT; Max-Age=432000; path=/; httponly; samesite=lax
affiliate=eyJpdiI6IkFpNncrSS9yT1VyVGxHNzh0Wlo4NUE9PSIsInZhbHVlIjoiRkxqZnl2Q3lRZmd2dEMxclJ0SHIzQT09IiwibWFjIjoiNDg1ZmE1ODdkY2JmNjY0MmUyNzJhN2RhZGIzYzMzMjFkYmUzNWM5OGJjODU5MjQ5NDcyMTdiYzIwZDliYjdhZSJ9; expires=Tue, 31-Jan-2023 19:35:01 GMT; Max-Age=432000; path=/; httponly; samesite=lax
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9GE6HEt4En0HYePwJIZjZLg2iFX1j1KIxwnvSiRhPuzLhHVwfywMm58rKrdk82CT5bLQTRYogUUDnRX1aofelTy%2Bf%2FxYxr7xtzgmpCn%2FoAyU%2FZYu2CScC1Ko%2FyJX7Wc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fbb0785c4fb4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2
200 OK 25 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25036, version 1.0\012- data
Hash 9dd150fb7229e143e0f71ba1fe8c8f63
664abfc4941054600213dda51a3d6f0d05b3c312
cffe139366b3882387dddbd10d59e7d9aa29345793fdbf51ddde809ca6a0bec2
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://folicrex.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Jan 2023 10:07:40 GMT
expires: Sat, 20 Jan 2024 10:07:40 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:59:41 GMT
content-type: font/woff2
age: 552442
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c6242efe0a4bf4600a7cbfc5f35ad8e7
ccdeb3fa2318547b43aa09f2d1b18ac6c1e20e74
cd19cb1062eb3a02601dbd9d0658f4c966afd617b047e36542365dee500b6319
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0339f81eb0c9ff5e2ef9458f43912738
b9dcc0cde6cb8e3e5b60fe9909d896e71f78ea06
3245b7069a6255597efc71a967b1ce1e29afc9f9347dcd96de12fea88301c127
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c6242efe0a4bf4600a7cbfc5f35ad8e7
ccdeb3fa2318547b43aa09f2d1b18ac6c1e20e74
cd19cb1062eb3a02601dbd9d0658f4c966afd617b047e36542365dee500b6319
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c6242efe0a4bf4600a7cbfc5f35ad8e7
ccdeb3fa2318547b43aa09f2d1b18ac6c1e20e74
cd19cb1062eb3a02601dbd9d0658f4c966afd617b047e36542365dee500b6319
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c6242efe0a4bf4600a7cbfc5f35ad8e7
ccdeb3fa2318547b43aa09f2d1b18ac6c1e20e74
cd19cb1062eb3a02601dbd9d0658f4c966afd617b047e36542365dee500b6319
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/offerimages/folicrex/images/products/prod7/1-bottle.png
200 OK 172 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/images/products/prod7/1-bottle.png
IP
File type PNG image data, 397 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 172 kB (171463 bytes)
Hash 25e0a68b7a37b7d4aaa2cb5890396568
fda1863cb7674206a6bbb8b07052c995a49cc34b
575bb4561a2a917e482b9d09ffaf63113cd536c1c2ce69d71b82766aaacccb67
GET /offerimages/folicrex/images/products/prod7/1-bottle.png HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdulB5ALaXw3oSuUmIwLYQ2kHPOsnNHb6y1_C9HinEQEfk932qs1gJ21tsuIOeoYBeCKlsxaH8PXTlD3QzWRSq5mvtJqcxfD
x-goog-generation: 1652541322789354
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 171463
x-goog-hash: crc32c=AoYMgg==, md5=JeCmi3o3t9SqostYkDllaA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 171463
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Sat, 14 May 2022 15:15:22 GMT
etag: "25e0a68b7a37b7d4aaa2cb5890396568"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 04cb7fc8b1e2a65a0b198cc53eb5e5cd
6d04611612d81108e856467f0e4b0479cbb37d33
1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/offerimages/folicrex/images/products/prod8/3-bottles.png
200 OK 350 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/images/products/prod8/3-bottles.png
IP
File type PNG image data, 751 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 350 kB (349661 bytes)
Hash 485c77030428741e2a393ed11e9cad62
35432edb8930529bc0f1062a2450ede7c3e57349
fd0e695ff636861a025ba09dbee688dc71985c3738ba81f50bd3a1e603dbfcc3
GET /offerimages/folicrex/images/products/prod8/3-bottles.png HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvCL7CJ4ZJr_xw9htBWzViwNMWooJDbLCvm05kfoE4NFgOgxvFiIKZlIc-spodaizihQQFSqlgW4V4zf52DbGZk-40mjLs3
x-goog-generation: 1652541345299806
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 349661
x-goog-hash: crc32c=RjUlyA==, md5=SFx3AwQodB4qOT7RHpytYg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 349661
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Sat, 14 May 2022 15:15:45 GMT
etag: "485c77030428741e2a393ed11e9cad62"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 26 Jan 2023 17:46:59 GMT
expires: Thu, 26 Jan 2023 19:46:59 GMT
cache-control: public, max-age=7200
age: 6483
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-6.jpg
200 OK 132 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-6.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1200x564, components 3\012- data
Size 132 kB (132004 bytes)
Hash 439f5918d897e56e27d90b8e37cf8e0a
0caf584adb0744b77b1b8132b6b4c56a2700f80c
7b2bd4095abe0576e7ba9b838325a1cd4cb01236e7157f4ee2d932c4911a7fb7
GET /offerimages/folicrex/custom/images/transcript/image-6.jpg HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtmkFuiK0I9-OOxeu-pWswam8sUle14At0DJmYrTlgHogiZQEX63n1V7OWrd0ckrDMb6E-BTyqb9QKO-ZmZQ7Q_zK6jtcv7
x-goog-generation: 1652194532621067
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 132004
x-goog-hash: crc32c=FI75iQ==, md5=Q59ZGNiX5W4n2QuON8+OCg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 132004
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Tue, 10 May 2022 14:55:32 GMT
etag: "439f5918d897e56e27d90b8e37cf8e0a"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-1.png
200 OK 471 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-1.png
IP
File type PNG image data, 790 x 445, 8-bit/color RGBA, non-interlaced\012- data
Size 471 kB (470980 bytes)
Hash 7744752546eec29e75081be15647e993
cf7a2a898f70bbc6e04499f280be8ec11e21cc13
4cf879fc58be043cd08c7591dd0fc4edf6b75657e634898ff62c547351a52dfa
GET /offerimages/folicrex/custom/images/transcript/image-1.png HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsBQ6aG-_huaCidfXuvsCZwXC3RLnJgvLaQs0NtjjaO16lIBj61pPoWHS_W_ivdfJu8zUwS8g2_FWGtcGQ2rHf2SaYPL0Qy
x-goog-generation: 1652194528197976
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 470980
x-goog-hash: crc32c=q3vY6Q==, md5=d0R1JUbuwp51CBvhVkfpkw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 470980
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Tue, 10 May 2022 14:55:28 GMT
etag: "7744752546eec29e75081be15647e993"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
storage.googleapis.com/offerimages/folicrex/images/products/prod9/6-bottles.png
200 OK 481 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/images/products/prod9/6-bottles.png
IP
File type PNG image data, 1078 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 481 kB (480671 bytes)
Hash 5c03492c409a2b1f0c92bae58e802e3a
faf2d8b65efbe3361ce104984b0e9270adaecbe0
4531b89025b15cf6a158723523a50744d23b489c1cfa51153d8c96165f61bcf1
GET /offerimages/folicrex/images/products/prod9/6-bottles.png HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsvmageNAg8lOzshgPSKtGH3f8UHpeuVHnMBtYoUg75wKSs5uvD0UUowjg4-8G1mX7587mQ1jr5enTILCWrxOB_39370fl0
x-goog-generation: 1652541363054494
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 480671
x-goog-hash: crc32c=ji7mkg==, md5=XANJLECaKx8MkrrljoAuOg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 480671
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Sat, 14 May 2022 15:16:03 GMT
etag: "5c03492c409a2b1f0c92bae58e802e3a"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=3&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=affiliate_id_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd2=806&z=1646075909
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=3&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=affiliate_id_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd2=806&z=1646075909
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=3&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=affiliate_id_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd2=806&z=1646075909 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
storage.googleapis.com/offerimages/folicrex/images/products/prod11/6-bottles.png
200 OK 481 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/images/products/prod11/6-bottles.png
IP
File type PNG image data, 1078 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 481 kB (480671 bytes)
Hash 5c03492c409a2b1f0c92bae58e802e3a
faf2d8b65efbe3361ce104984b0e9270adaecbe0
4531b89025b15cf6a158723523a50744d23b489c1cfa51153d8c96165f61bcf1
GET /offerimages/folicrex/images/products/prod11/6-bottles.png HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvBVLorqG9NzmkA93oRR6_bMEKabPOIjBnuW1PY9CmOXqD7TcsCwKJdTUGwZSH6v9Nx0lUWg5-MRBTe0-xsgRmJ2B6LUToY
x-goog-generation: 1652541152771571
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 480671
x-goog-hash: crc32c=ji7mkg==, md5=XANJLECaKx8MkrrljoAuOg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 480671
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Sat, 14 May 2022 15:12:32 GMT
etag: "5c03492c409a2b1f0c92bae58e802e3a"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=4&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=subid_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd3=mw1giaop0126folicrex&z=1592082762
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=4&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=subid_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd3=mw1giaop0126folicrex&z=1592082762
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=4&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=subid_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd3=mw1giaop0126folicrex&z=1592082762 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-4.jpg
200 OK 203 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-4.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1024x1024, components 3\012- data
Size 203 kB (203205 bytes)
Hash 82fbec6e82d85974c373bed271d11c45
d411412f628c8f33bc87ad97fe1855a290b3ead4
2a0017b4b74d89f5bfa7b401a69c7fa83170ba0029f273d8e1ceb4df6682161c
GET /offerimages/folicrex/custom/images/transcript/image-4.jpg HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsotq0AfbQZdoPO8xnboevh6UDOpOYfRWeYdI0gqjihq-3PW4og-zCE7JpPS6PnuHIq6xA_RFh6JB7VcuL9Q66XhpHVD91x
x-goog-generation: 1652194530934512
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 203205
x-goog-hash: crc32c=uQ1qfw==, md5=gvvsboLYWXTDc77ScdEcRQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 203205
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Tue, 10 May 2022 14:55:30 GMT
etag: "82fbec6e82d85974c373bed271d11c45"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=9&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_account_id_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=1985454978
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=9&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_account_id_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=1985454978
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=9&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_account_id_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=1985454978 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
storage.googleapis.com/offerimages/folicrex/images/custom/exit-popup.png
200 OK 1.1 MB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/images/custom/exit-popup.png
IP
File type PNG image data, 1026 x 424, 16-bit/color RGBA, non-interlaced\012- data
Size 1.1 MB (1145759 bytes)
Hash b124a596f04ae619c86e8a8bfc9813a7
f5dc2267b832d5729259423d2111627831104972
44782d398cf79e980a5191833563db5a07626320437b7282a0e08716548478a5
GET /offerimages/folicrex/images/custom/exit-popup.png HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtvYT7ih_5n_4-o5XQOV6eo4mz4LZR3Qx-QxIJVJZ02XvBjvalbrKpFT2CtQAoKq3ah4kK7LN07BKqSh-qoJOFzgmXeEEl4
x-goog-generation: 1652194533440535
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1145759
x-goog-hash: crc32c=5Aeq9A==, md5=sSSllvBK5hnIboqL/JgTpw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 1145759
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Tue, 10 May 2022 14:55:33 GMT
etag: "b124a596f04ae619c86e8a8bfc9813a7"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=2&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=domain_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd1=folicrex.com&z=508194178
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=2&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=domain_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd1=folicrex.com&z=508194178
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=2&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=domain_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd1=folicrex.com&z=508194178 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c6242efe0a4bf4600a7cbfc5f35ad8e7
ccdeb3fa2318547b43aa09f2d1b18ac6c1e20e74
cd19cb1062eb3a02601dbd9d0658f4c966afd617b047e36542365dee500b6319
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-3.jpg
200 OK 120 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-3.jpg
IP
File type Targa image data - Mono 70 x 257 x 1 +18960 +18758 "`"\012- data
Size 120 kB (120362 bytes)
Hash f03ba89749032ea1fa325b8649c65820
0cab26c1ab7ae94aaf1a22bfe05b24875ac11428
01f1cd00aaca5bc25024f42b91e7405ed1632a6664a7f2ee116b5a9be6880306
GET /offerimages/folicrex/custom/images/transcript/image-3.jpg HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsXZUQUYG8aSBGzx8efIndR9ALravzE8FlyV2tVI85fHrznTSbbir6SHir8IA4DOFCpKuMHpof2tUNme1EgvMdn1w
x-goog-generation: 1652194530200772
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 120359
x-goog-hash: crc32c=FGggJQ==, md5=ufmt+GdRZ84Uw3iHG9B/sw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 120359
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Tue, 10 May 2022 14:55:30 GMT
etag: "b9f9adf8675167ce14c378871bd07fb3"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=5&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=merchant_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd4=buygoods&z=1475271384
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=5&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=merchant_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd4=buygoods&z=1475271384
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=5&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=merchant_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&cd4=buygoods&z=1475271384 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-2.jpg
200 OK 445 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1600x905, components 3\012- data
Size 445 kB (445275 bytes)
Hash b859bfe35a6d02460c66691ce266b0c4
b260912266f96125deba4a2743c8a175cca4d46f
d918416c4fab8f6165449bb6eeaefb7c41eea97ba01dfa1bc5d89a274bd44b68
GET /offerimages/folicrex/custom/images/transcript/image-2.jpg HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsfj47BeCN1ujbTK9RAB7D6srNuu2NMF1I2yOdUjo9oLhZhD49WijIXLks81nv9YhoZSQojksIUjRiIn3vsRA5Ivw
x-goog-generation: 1652194529252424
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 445275
x-goog-hash: crc32c=G2SBlg==, md5=uFm/41ptAkYMZmkc4mawxA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 445275
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Tue, 10 May 2022 14:55:29 GMT
etag: "b859bfe35a6d02460c66691ce266b0c4"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=2056175034&t=pageview&_s=1&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=4GBAAUABAAAAACAAI~&jid=1394124144&gjid=1040796481&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702&_r=1&_slc=1>m=2ou1p0&z=908494033
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=2056175034&t=pageview&_s=1&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=4GBAAUABAAAAACAAI~&jid=1394124144&gjid=1040796481&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702&_r=1&_slc=1>m=2ou1p0&z=908494033
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=2056175034&t=pageview&_s=1&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=4GBAAUABAAAAACAAI~&jid=1394124144&gjid=1040796481&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702&_r=1&_slc=1>m=2ou1p0&z=908494033 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://folicrex.com
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://folicrex.com
date: Thu, 26 Jan 2023 19:35:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-5.jpg
200 OK 405 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/custom/images/transcript/image-5.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1440x960, components 3\012- data
Size 405 kB (404588 bytes)
Hash a4fd4d6733cb865e365ed879b9866b52
f1c182b65185aa0ef92f3d5a1807ff2133c15c6f
434c4b65bf161b162b70e82a015b1aac727c9f7c87d263c1c266c125fedee413
GET /offerimages/folicrex/custom/images/transcript/image-5.jpg HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduFopZqy0XO7-cOJ1QgbKzghfoTFXIJpucvTGCcqQv6hBy46tgblyEivczw0ERo-Gf6ex-M65JBZkS6Gax7erKkSQqsrV4m
x-goog-generation: 1652194531652272
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 404588
x-goog-hash: crc32c=uYkdiw==, md5=pP1NZzPLhl42Xth5uYZrUg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 404588
server: UploadServer
date: Thu, 26 Jan 2023 19:06:57 GMT
expires: Thu, 26 Jan 2023 20:06:57 GMT
cache-control: public, max-age=3600
age: 1685
last-modified: Tue, 10 May 2022 14:55:31 GMT
etag: "a4fd4d6733cb865e365ed879b9866b52"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=6&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_domain_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=195766168
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=6&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_domain_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=195766168
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=6&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_domain_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=195766168 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=7&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_affiliate_id_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=1516459271
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=7&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_affiliate_id_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=1516459271
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=7&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_affiliate_id_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=1516459271 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=8&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_subid_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=1222585616
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=8&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_subid_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=1222585616
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=8&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_subid_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=1222585616 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=10&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_merchant_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=800301276
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=10&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_merchant_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=800301276
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=10&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_merchant_dimension&_u=4GBAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-79&_gid=2114878473.1674761702>m=2ou1p0&z=800301276 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=2056175034&t=pageview&_s=1&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=4GDAAUABAAAAACAAI~&jid=791432540&gjid=407100132&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702&_r=1&_slc=1>m=2ou1p0&z=107123890
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=2056175034&t=pageview&_s=1&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=4GDAAUABAAAAACAAI~&jid=791432540&gjid=407100132&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702&_r=1&_slc=1>m=2ou1p0&z=107123890
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=2056175034&t=pageview&_s=1&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=4GDAAUABAAAAACAAI~&jid=791432540&gjid=407100132&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702&_r=1&_slc=1>m=2ou1p0&z=107123890 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://folicrex.com
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://folicrex.com
date: Thu, 26 Jan 2023 19:35:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=5&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_account_id_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd4=7021&z=1919761050
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=5&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_account_id_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd4=7021&z=1919761050
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=5&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_account_id_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd4=7021&z=1919761050 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=6&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_merchant_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd5=buygoods&z=2119728581
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=6&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_merchant_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd5=buygoods&z=2119728581
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=6&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_merchant_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd5=buygoods&z=2119728581 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=2&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_domain_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd1=7021_folicrex.com&z=983060085
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=2&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_domain_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd1=7021_folicrex.com&z=983060085
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=2&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_domain_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd1=7021_folicrex.com&z=983060085 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=3&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_affiliate_id_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd2=7021_806&z=24306237
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=3&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_affiliate_id_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd2=7021_806&z=24306237
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=3&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_affiliate_id_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd2=7021_806&z=24306237 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=4&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_subid_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd3=7021_mw1giaop0126folicrex&z=829716163
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&a=2056175034&t=event&_s=4&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_subid_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd3=7021_mw1giaop0126folicrex&z=829716163
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=2056175034&t=event&_s=4&dl=https%3A%2F%2Ffolicrex.com%2Freport%3Faff_id%3D806%26subid%3Dmw1giaop0126folicrex&dr=https%3A%2F%2Femdlvr.com%2F&ul=en-us&de=UTF-8&dt=Full%20Head%20Of%20Hair&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=general&ea=global_subid_dimension&_u=4GDAAUABAAAAACAAI~&jid=&gjid=&cid=290373823.1674761702&tid=UA-62785402-76&_gid=2114878473.1674761702>m=2ou1p0&cd3=7021_mw1giaop0126folicrex&z=829716163 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 26 Jan 2023 18:08:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 5188
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/www-widgetapi.vflset/www-widgetapi.js
200 OK 63 kB URL HTTP/2 www.youtube.com/s/player/4248d311/www-widgetapi.vflset/www-widgetapi.js
IP
File type ASCII text, with very long lines (817)
Hash f02565101c5e23455bc9cb529917079f
d191ba22867a37580b73c62e85cafec8934445cc
adbc433ec3318badba117cecfe624154f8211ca424260f8626f1c5aa97340e6a
GET /s/player/4248d311/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 62798
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 16:19:47 GMT
expires: Tue, 23 Jan 2024 16:19:47 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 270915
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17940
Expires: Fri, 27 Jan 2023 00:34:02 GMT
Date: Thu, 26 Jan 2023 19:35:02 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 04cb7fc8b1e2a65a0b198cc53eb5e5cd
6d04611612d81108e856467f0e4b0479cbb37d33
1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KY05WKpINERD5g9o2QLYdsNMSuuy_YKn2Tl7Qkn7YaAOaPTDfLteeA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:40 GMT
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
age: 78322
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13cd008fb3e2739ec7caadadbd427655
c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1
a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8822
x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwF2KIAMFjDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3Q-kz6GkBHp82E__crWSeqbfxme8c9y1BAAq3TW8NlwJy4eSy7gy7Q==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:07 GMT
age: 78355
etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17e1b6f3caa98b0e0972802408dd3f93
07e48bf3565e00d093d72dd4ada606f5d39a4838
7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9285
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYT2HzvoAMFYYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:52:28 GMT
age: 78154
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f62e9b7bdca82d18c945851912d8fea8
a7ca44d337c43bc5c6145b26778661c71cc50484
5da02cc405c1cada55813ffe376844375f1d6ad222cbb63405348b1f5132a0b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9595
x-amzn-requestid: c257bfbe-1bd7-4540-bbfa-e4c49a2624a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXwfGigoAMFvBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a002-226c08656eeefbfa3c2dddb6;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k9njnQmggD7UkVJzZqSzo90HJJjTjGK0QIoPU0HWYKrSstjM6s1rOw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:37 GMT
age: 78325
etag: "a7ca44d337c43bc5c6145b26778661c71cc50484"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
storage.googleapis.com/offerimages/folicrex/images/custom/shortcut-icon.png
200 OK 1.5 kB URL HTTP/2 storage.googleapis.com/offerimages/folicrex/images/custom/shortcut-icon.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash d125b73dbaeea547f10fc4fb73b38f46
30f59e34a851e66365c059701769e5aa4bf71476
e9ebe0ca198faa47d8c5c4eef81507590b9e6542196a5579597be93002085b1b
GET /offerimages/folicrex/images/custom/shortcut-icon.png HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvNy9yudrE3UN1iptF5vZnN5i2YLmrHpIXaFRQZW6n3EmEjBn9GWbH3bx0FpN4VOB1gED48dzGwYkSL3QE5YaKacw
expires: Thu, 26 Jan 2023 20:35:02 GMT
date: Thu, 26 Jan 2023 19:35:02 GMT
cache-control: public, max-age=3600
last-modified: Tue, 10 May 2022 14:55:34 GMT
etag: "d125b73dbaeea547f10fc4fb73b38f46"
x-goog-generation: 1652194534623170
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1467
content-type: image/png
x-goog-hash: crc32c=Rp15tA==, md5=0SW3PbrupUfxD8T7c7OPRg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 1467
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F302c83f3-fc0d-4aa1-a74b-ca3da86a6193.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F302c83f3-fc0d-4aa1-a74b-ca3da86a6193.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb86eb4c771d04fbe14536002327ee2
2ce08b3000a62157a4c39b4857a818dc53841757
436ea54ad85871bafde614cbbbdd0b79fe7f583826935190258ff7c26b84e22d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F302c83f3-fc0d-4aa1-a74b-ca3da86a6193.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11443
x-amzn-requestid: 305a8be0-f495-4c5c-a09e-1129ce9022fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fH9BfF3ZoAMFXKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cca86f-542ef19e000475b61a066bf9;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 03:07:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9TK6paKJzZLkss5Sl6FaTPOImIjU_j_GfMkcwZrIlQKhs0xQ7achfw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:50:26 GMT
age: 42276
etag: "2ce08b3000a62157a4c39b4857a818dc53841757"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7458f7a9b2070055df6f1d496794e43e
0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9
373097662c419eef9f4a19ce9f3bcead70f6eafbf0acf44806685eece43ce251
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12758
x-amzn-requestid: c3540562-8c62-4957-9528-7ae952daebaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9gf1E87oAMFpsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c87acb-49fd3f78275937e24d23fca3;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 23:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mjK4GJ3UCEuHk4XqmXdZCWHTVvJeX8Z2HFaem2GYzqfqlPSd_h6DfA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 05:14:39 GMT
age: 51623
etag: "0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7b8dcc42710b2f68c0ec782d2b2a3ae3
b865da423aa26e774270b8e3942b6fbe76793133
2da0fcf67d020f7c563946fca7ade89803cbe7cfe484f123640f8a9950b3f2b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f5748fe61285ac561342d29f791caa95
590c2a121202a33abc837dd6210aaf0c8f54d3fd
69003e7446655b4935fb38652b1552e4763eab5bede555e53eba97ee304d61e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Thu, 26 Jan 2023 19:35:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 19:27:52 GMT
expires: Thu, 26 Jan 2023 19:42:52 GMT
cache-control: public, max-age=900
age: 431
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dda854cb90cda40c6a6dbc19eb186eca
0d23775c5af739aac0a41844d09c704ab850a1bd
7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f5748fe61285ac561342d29f791caa95
590c2a121202a33abc837dd6210aaf0c8f54d3fd
69003e7446655b4935fb38652b1552e4763eab5bede555e53eba97ee304d61e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 26 Jan 2023 19:35:03 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e53b1d8b1f244c97e073382328e5c650
d1933a186c3b5351a8539f18e3f4f74237aefccc
2b3e14ffcd8e42c946fc8a66a44a97e543849ac1fd3fdefd85f774c86839716e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f1c882e889af7d53d9f37b816bbfb4e5
2aad9d63fd2c206638a95d11f8f946326775d95f
eea60f3ca43a6dddc9c4e295ac867f7c5ab868649bf2bf2fbc9060b094ee106a
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 26 Jan 2023 19:35:03 GMT
server: ESF
cache-control: private
content-length: 30820
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js
IP
File type ASCII text, with very long lines (36171)
Hash a13a76dd17af226d4a24bd16ef702377
c364171cd0f66eb4a1a8dde04e1e083154d81dbd
1dd3352cbdb7561b142954006a2bb94008486c22760c3d5ebb1b6fffeb325173
GET /js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14250
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Jan 2023 18:38:28 GMT
expires: Sat, 20 Jan 2024 18:38:28 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 03 Jan 2023 15:00:00 GMT
content-type: text/javascript
age: 521795
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 215f16014778a0ef8fe0ae045469592c
8eb2bb842d2cbe49b94309d7297309a61c837ccb
df25507f0dd6bcb47ee79846962171e9a0660f6a356f941b8cb7a5cd3bdf2762
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/B9J8DiysQTY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgZShlMA8=&rs=AOn4CLAT0I1erZFTjsOKu259D62wzDS0dg
200 OK 29 kB URL HTTP/2 i.ytimg.com/vi/B9J8DiysQTY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgZShlMA8=&rs=AOn4CLAT0I1erZFTjsOKu259D62wzDS0dg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 43f1e63d98566039b035f95fd5971dda
f787faac86f1221e6d61c064ef96150cc65d7003
10d67c59880b09e60704b07ccd1e21e3094a15bce6fe4c65ae55c6b891137242
GET /vi/B9J8DiysQTY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgZShlMA8=&rs=AOn4CLAT0I1erZFTjsOKu259D62wzDS0dg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 28932
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 19:07:03 GMT
expires: Thu, 26 Jan 2023 21:07:03 GMT
cache-control: public, max-age=7200
age: 1680
etag: "0"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 215f16014778a0ef8fe0ae045469592c
8eb2bb842d2cbe49b94309d7297309a61c837ccb
df25507f0dd6bcb47ee79846962171e9a0660f6a356f941b8cb7a5cd3bdf2762
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f57a83befb5510821576265e691190f
136d15f2cbbc6416d808afcb8f48a19b346937fc
b3d3b78aaea9273c95224d6242a3817bac9be7fc46800e741da32bba13db5fa6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AL5GRJXXKVpdIdS6g_0jvCnFI5Z453EmS1yhi2D33TIqKeJA-NxiKnrAyhw3Gtt-KLVr=s68-c-k-c0x00ffffff-no-rj
200 OK 924 B URL HTTP/2 yt3.ggpht.com/ytc/AL5GRJXXKVpdIdS6g_0jvCnFI5Z453EmS1yhi2D33TIqKeJA-NxiKnrAyhw3Gtt-KLVr=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 4017c69565452bc9748876b8c0d21ed7
1b0e75c73f5c31871cb3a8bdf8fdcc2b8c6cd2d7
53e5228a50a6726e95c788e69459c9521b881e8b007940569a885fdaf739af09
GET /ytc/AL5GRJXXKVpdIdS6g_0jvCnFI5Z453EmS1yhi2D33TIqKeJA-NxiKnrAyhw3Gtt-KLVr=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 924
x-xss-protection: 0
date: Thu, 26 Jan 2023 16:34:42 GMT
expires: Fri, 27 Jan 2023 16:34:42 GMT
cache-control: public, max-age=86400, no-transform
content-type: image/jpeg
age: 10821
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f3ebba38babe4484f955dedf12d71e2
4fc3d61579aa2e035bf84b9439cc1933fe564ca8
b34dc34d61bb90a46615c1f99dd079bb05f662da984beb44233a85f7d3546a47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 810bf2bf9f302d0a65b1e0b447b549ef
d6ddcc1e64a1392f5942c0fc45864a282a93854e
f61096b63e6f62872d6d30aac7671c72403bba82f4f5c555add8e0997675f712
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1f4c8e17a668764556ab61c7c31e53c7
ada5ee5917ab9faf3d55a6da1d5bfc3077e42de2
8ac89ed8b6650ea140c2eac1b1dd61f8498e97e278e6bd6debfd803a588e2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-62785402-79&cid=290373823.1674761702&jid=1394124144&gjid=1040796481&_gid=2114878473.1674761702&_u=4GBAAUAAAAAAACAAI~&z=1127848398
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-62785402-79&cid=290373823.1674761702&jid=1394124144&gjid=1040796481&_gid=2114878473.1674761702&_u=4GBAAUAAAAAAACAAI~&z=1127848398
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-62785402-79&cid=290373823.1674761702&jid=1394124144&gjid=1040796481&_gid=2114878473.1674761702&_u=4GBAAUAAAAAAACAAI~&z=1127848398 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://folicrex.com
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://folicrex.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 26 Jan 2023 19:35:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-62785402-76&cid=290373823.1674761702&jid=791432540&gjid=407100132&_gid=2114878473.1674761702&_u=4GDAAUABAAAAACAAI~&z=163039099
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-62785402-76&cid=290373823.1674761702&jid=791432540&gjid=407100132&_gid=2114878473.1674761702&_u=4GDAAUABAAAAACAAI~&z=163039099
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-62785402-76&cid=290373823.1674761702&jid=791432540&gjid=407100132&_gid=2114878473.1674761702&_u=4GDAAUABAAAAACAAI~&z=163039099 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://folicrex.com
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://folicrex.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 26 Jan 2023 19:35:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 26 Jan 2023 19:35:04 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 810bf2bf9f302d0a65b1e0b447b549ef
d6ddcc1e64a1392f5942c0fc45864a282a93854e
f61096b63e6f62872d6d30aac7671c72403bba82f4f5c555add8e0997675f712
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 375237749aaa27efb3e580de1edc3436
e20ac3f2edfd24a17015aeeb78a683fc1ef9ce3f
b8c8b7bb7847ec3a64590c423bd8ce2c18c3344d3be2f736afc36b3083001849
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 980
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 26 Jan 2023 19:35:04 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4bf30f4bdb03b93a21056252853b4e21
b79b6b31360202b2775c8423e73af7ce6c96b44f
7563990b2ddd973bf92485dbfebb87a5b3156f8f22e6a9b3e7df7aa496ca0256
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ca3c090d0cc301cfe4fa4cda8bf41802
ed6864826e547748d899c40e1994c3839a1b5a41
6954d32a8f580fe79b9a8694a3c8bed1f3d3d88b457e36d14e3d400ffc8c29dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1674783304&ei=6NXSY6LDD8iayAWN2YC4AQ&ip=91.90.42.154&id=o-AHkRfUrKMnEgaHp8T4Y6IM27bRD0QbOQvmaDlFbguBIW&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=JC&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1623750&spc=H3gIhjlHTLgv1s3CKUTWVQZ2z4ex2r4&vprv=1&mime=video%2Fwebm&ns=b_LSWApsi9980WYJLeU_JdYL&gir=yes&clen=40587903&dur=3585.733&lmt=1652550620937792&mt=1674761158&fvip=2&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5437434&n=xm3qrYsITtENhA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRgIhAK86rvgI39Z7Wf7EqrthVGZQLSnFzEIruWztCDwWYFhhAiEA0Fl08ByzEITkrXT6ch8FYcjwpuc2GnHczdaAJiiqgNQ%3D&alr=yes&sig=AOq0QJ8wRAIgNMBydZVbZ_fZiqnDKqZTVMsmlJcM7IYGC2l2iu9k0yACIBJ9wkowXnWZuNw7dXEcs5nDcsW6v5NVIEMgfpeWDJeP&cpn=CglycPtd1GuKHP1S&cver=1.20230111.01.00&range=0-197407&rn=1&rbuf=0&pot=D90eKmnA0k643SVhixhox1lbyyoI2cycpxWRHujoyo2b9cTYVfhS3K-QETBGErKdJrvFya-LxnjVmDpkjDsktuMH5eMYj9qajOBeRKc5kuEdAs-qXpSTsyIoAdModBYzLXFNlkJbPsU=
200 OK 1.2 kB URL HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1674783304&ei=6NXSY6LDD8iayAWN2YC4AQ&ip=91.90.42.154&id=o-AHkRfUrKMnEgaHp8T4Y6IM27bRD0QbOQvmaDlFbguBIW&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=JC&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1623750&spc=H3gIhjlHTLgv1s3CKUTWVQZ2z4ex2r4&vprv=1&mime=video%2Fwebm&ns=b_LSWApsi9980WYJLeU_JdYL&gir=yes&clen=40587903&dur=3585.733&lmt=1652550620937792&mt=1674761158&fvip=2&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5437434&n=xm3qrYsITtENhA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRgIhAK86rvgI39Z7Wf7EqrthVGZQLSnFzEIruWztCDwWYFhhAiEA0Fl08ByzEITkrXT6ch8FYcjwpuc2GnHczdaAJiiqgNQ%3D&alr=yes&sig=AOq0QJ8wRAIgNMBydZVbZ_fZiqnDKqZTVMsmlJcM7IYGC2l2iu9k0yACIBJ9wkowXnWZuNw7dXEcs5nDcsW6v5NVIEMgfpeWDJeP&cpn=CglycPtd1GuKHP1S&cver=1.20230111.01.00&range=0-197407&rn=1&rbuf=0&pot=D90eKmnA0k643SVhixhox1lbyyoI2cycpxWRHujoyo2b9cTYVfhS3K-QETBGErKdJrvFya-LxnjVmDpkjDsktuMH5eMYj9qajOBeRKc5kuEdAs-qXpSTsyIoAdModBYzLXFNlkJbPsU=
IP
ASN #50304 Blix Solutions AS
File type ASCII text, with very long lines (1242), with no line terminators
Hash 2914f4fef6563781bb284f5f7f3ffe47
4c134373c8737f66e7d9b9133cad674437a71844
75674e83f67c7a8e8160470abc5d3308b94d9a1b919c8df92885fb0cea8b3893
POST /videoplayback?expire=1674783304&ei=6NXSY6LDD8iayAWN2YC4AQ&ip=91.90.42.154&id=o-AHkRfUrKMnEgaHp8T4Y6IM27bRD0QbOQvmaDlFbguBIW&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=JC&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1623750&spc=H3gIhjlHTLgv1s3CKUTWVQZ2z4ex2r4&vprv=1&mime=video%2Fwebm&ns=b_LSWApsi9980WYJLeU_JdYL&gir=yes&clen=40587903&dur=3585.733&lmt=1652550620937792&mt=1674761158&fvip=2&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5437434&n=xm3qrYsITtENhA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRgIhAK86rvgI39Z7Wf7EqrthVGZQLSnFzEIruWztCDwWYFhhAiEA0Fl08ByzEITkrXT6ch8FYcjwpuc2GnHczdaAJiiqgNQ%3D&alr=yes&sig=AOq0QJ8wRAIgNMBydZVbZ_fZiqnDKqZTVMsmlJcM7IYGC2l2iu9k0yACIBJ9wkowXnWZuNw7dXEcs5nDcsW6v5NVIEMgfpeWDJeP&cpn=CglycPtd1GuKHP1S&cver=1.20230111.01.00&range=0-197407&rn=1&rbuf=0&pot=D90eKmnA0k643SVhixhox1lbyyoI2cycpxWRHujoyo2b9cTYVfhS3K-QETBGErKdJrvFya-LxnjVmDpkjDsktuMH5eMYj9qajOBeRKc5kuEdAs-qXpSTsyIoAdModBYzLXFNlkJbPsU= HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Thu, 26 Jan 2023 19:35:04 GMT
Expires: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1242
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
www.youtube.com/iframe_api
200 OK 1.7 kB URL HTTP/2 www.youtube.com/iframe_api
IP
File type ASCII text, with very long lines (509)
Hash 9b4c0f0aa468a85512a25d8acdc8b4c2
f8d58562a23aefaba2143dd92e0ee83f7784c5b8
96b1b2dea43073c5d218868a667f8cccc35d0a1ba0725cb5c441d92aa1cf1572
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Thu, 26 Jan 2023 19:35:02 GMT
date: Thu, 26 Jan 2023 19:35:02 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=Be-rjHa3Tio; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TXpBME5qYzBNREkwTWpRMU5EQTROdz09EOary54GGOary54G; Domain=.youtube.com; Expires=Tue, 25-Jul-2023 19:35:02 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=H3ECkAbIqv0; Domain=.youtube.com; Expires=Tue, 25-Jul-2023 19:35:02 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+635; expires=Sat, 25-Jan-2025 19:35:02 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ca3c090d0cc301cfe4fa4cda8bf41802
ed6864826e547748d899c40e1994c3839a1b5a41
6954d32a8f580fe79b9a8694a3c8bed1f3d3d88b457e36d14e3d400ffc8c29dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 71d348389324a61d7d058e79a0d4bff5
a18ff4fe43a879d67b75d310c4b5fae434a022e8
2533b2b5d55c8750e7dc0bb639a35f8d711dfd529bfb05b921b9bb8a221124d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 71d348389324a61d7d058e79a0d4bff5
a18ff4fe43a879d67b75d310c4b5fae434a022e8
2533b2b5d55c8750e7dc0bb639a35f8d711dfd529bfb05b921b9bb8a221124d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr2---sn-5go7ynlk.googlevideo.com/videoplayback?expire=1674783304&ei=6NXSY6LDD8iayAWN2YC4AQ&ip=91.90.42.154&id=o-AHkRfUrKMnEgaHp8T4Y6IM27bRD0QbOQvmaDlFbguBIW&itag=251&source=youtube&requiressl=yes&spc=H3gIhjlHTLgv1s3CKUTWVQZ2z4ex2r4&vprv=1&mime=audio%2Fwebm&ns=b_LSWApsi9980WYJLeU_JdYL&gir=yes&clen=51335144&dur=3585.761&lmt=1652551163653809&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5432434&n=xm3qrYsITtENhA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRgIhAJH3o_UmC5MLDz2StDveGeJKFJaXnGvDjVUtxxMM-MmJAiEAhSGv-NCJ5OzyMw61n-cc_H09QrEkyW0yutlqhqV3zbQ%3D&cpn=CglycPtd1GuKHP1S&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=JC&mm=29&mn=sn-5go7ynlk&ms=rdu&mt=1674761602&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgUGwL7yNEnFC5tDMsr3l88LEq8plY1RKhSyP98EEdc6kCIQC6FbZA-l0Y1cOeUATglAA65Uat9wJqknvycHMMMCq9Dw%3D%3D&range=0-72147&rn=3&rbuf=0&pot=D90eKmnA0k643SVhixhox1lbyyoI2cycpxWRHujoyo2b9cTYVfhS3K-QETBGErKdJrvFya-LxnjVmDpkjDsktuMH5eMYj9qajOBeRKc5kuEdAs-qXpSTsyIoAdModBYzLXFNlkJbPsU=
200 OK 72 kB URL HTTP/1.1 rr2---sn-5go7ynlk.googlevideo.com/videoplayback?expire=1674783304&ei=6NXSY6LDD8iayAWN2YC4AQ&ip=91.90.42.154&id=o-AHkRfUrKMnEgaHp8T4Y6IM27bRD0QbOQvmaDlFbguBIW&itag=251&source=youtube&requiressl=yes&spc=H3gIhjlHTLgv1s3CKUTWVQZ2z4ex2r4&vprv=1&mime=audio%2Fwebm&ns=b_LSWApsi9980WYJLeU_JdYL&gir=yes&clen=51335144&dur=3585.761&lmt=1652551163653809&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5432434&n=xm3qrYsITtENhA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRgIhAJH3o_UmC5MLDz2StDveGeJKFJaXnGvDjVUtxxMM-MmJAiEAhSGv-NCJ5OzyMw61n-cc_H09QrEkyW0yutlqhqV3zbQ%3D&cpn=CglycPtd1GuKHP1S&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=JC&mm=29&mn=sn-5go7ynlk&ms=rdu&mt=1674761602&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgUGwL7yNEnFC5tDMsr3l88LEq8plY1RKhSyP98EEdc6kCIQC6FbZA-l0Y1cOeUATglAA65Uat9wJqknvycHMMMCq9Dw%3D%3D&range=0-72147&rn=3&rbuf=0&pot=D90eKmnA0k643SVhixhox1lbyyoI2cycpxWRHujoyo2b9cTYVfhS3K-QETBGErKdJrvFya-LxnjVmDpkjDsktuMH5eMYj9qajOBeRKc5kuEdAs-qXpSTsyIoAdModBYzLXFNlkJbPsU=
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 40f75ced265ba8ddfa7d029fc90a6bba
14db47952cd62b8791268246a6fc124676045d08
d51eea337be604b8f6ba4cbeb9a162b403ebd4702b8ebf06628554f5ec1a11f3
POST /videoplayback?expire=1674783304&ei=6NXSY6LDD8iayAWN2YC4AQ&ip=91.90.42.154&id=o-AHkRfUrKMnEgaHp8T4Y6IM27bRD0QbOQvmaDlFbguBIW&itag=251&source=youtube&requiressl=yes&spc=H3gIhjlHTLgv1s3CKUTWVQZ2z4ex2r4&vprv=1&mime=audio%2Fwebm&ns=b_LSWApsi9980WYJLeU_JdYL&gir=yes&clen=51335144&dur=3585.761&lmt=1652551163653809&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5432434&n=xm3qrYsITtENhA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRgIhAJH3o_UmC5MLDz2StDveGeJKFJaXnGvDjVUtxxMM-MmJAiEAhSGv-NCJ5OzyMw61n-cc_H09QrEkyW0yutlqhqV3zbQ%3D&cpn=CglycPtd1GuKHP1S&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=JC&mm=29&mn=sn-5go7ynlk&ms=rdu&mt=1674761602&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgUGwL7yNEnFC5tDMsr3l88LEq8plY1RKhSyP98EEdc6kCIQC6FbZA-l0Y1cOeUATglAA65Uat9wJqknvycHMMMCq9Dw%3D%3D&range=0-72147&rn=3&rbuf=0&pot=D90eKmnA0k643SVhixhox1lbyyoI2cycpxWRHujoyo2b9cTYVfhS3K-QETBGErKdJrvFya-LxnjVmDpkjDsktuMH5eMYj9qajOBeRKc5kuEdAs-qXpSTsyIoAdModBYzLXFNlkJbPsU= HTTP/1.1
Host: rr2---sn-5go7ynlk.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 14 May 2022 17:59:23 GMT
Content-Type: audio/webm
Date: Thu, 26 Jan 2023 19:35:04 GMT
Expires: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 72148
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr2---sn-5go7ynlk.googlevideo.com/videoplayback?expire=1674783304&ei=6NXSY6LDD8iayAWN2YC4AQ&ip=91.90.42.154&id=o-AHkRfUrKMnEgaHp8T4Y6IM27bRD0QbOQvmaDlFbguBIW&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=H3gIhjlHTLgv1s3CKUTWVQZ2z4ex2r4&vprv=1&mime=video%2Fwebm&ns=b_LSWApsi9980WYJLeU_JdYL&gir=yes&clen=40587903&dur=3585.733&lmt=1652550620937792&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5437434&n=xm3qrYsITtENhA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgNMBydZVbZ_fZiqnDKqZTVMsmlJcM7IYGC2l2iu9k0yACIBJ9wkowXnWZuNw7dXEcs5nDcsW6v5NVIEMgfpeWDJeP&cpn=CglycPtd1GuKHP1S&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=JC&mm=29&mn=sn-5go7ynlk&ms=rdu&mt=1674761602&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAP47Hrg7cYMsuR4RX-fDswH5VpijrSmMgd949JYOMxcIAiBjWBDR4WmPZXqj1Dyj0NiaLO9bW5c52WlWOiRxu9z1RQ%3D%3D&range=0-197407&rn=4&rbuf=0&pot=D90eKmnA0k643SVhixhox1lbyyoI2cycpxWRHujoyo2b9cTYVfhS3K-QETBGErKdJrvFya-LxnjVmDpkjDsktuMH5eMYj9qajOBeRKc5kuEdAs-qXpSTsyIoAdModBYzLXFNlkJbPsU=
200 OK 197 kB URL HTTP/1.1 rr2---sn-5go7ynlk.googlevideo.com/videoplayback?expire=1674783304&ei=6NXSY6LDD8iayAWN2YC4AQ&ip=91.90.42.154&id=o-AHkRfUrKMnEgaHp8T4Y6IM27bRD0QbOQvmaDlFbguBIW&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=H3gIhjlHTLgv1s3CKUTWVQZ2z4ex2r4&vprv=1&mime=video%2Fwebm&ns=b_LSWApsi9980WYJLeU_JdYL&gir=yes&clen=40587903&dur=3585.733&lmt=1652550620937792&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5437434&n=xm3qrYsITtENhA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgNMBydZVbZ_fZiqnDKqZTVMsmlJcM7IYGC2l2iu9k0yACIBJ9wkowXnWZuNw7dXEcs5nDcsW6v5NVIEMgfpeWDJeP&cpn=CglycPtd1GuKHP1S&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=JC&mm=29&mn=sn-5go7ynlk&ms=rdu&mt=1674761602&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAP47Hrg7cYMsuR4RX-fDswH5VpijrSmMgd949JYOMxcIAiBjWBDR4WmPZXqj1Dyj0NiaLO9bW5c52WlWOiRxu9z1RQ%3D%3D&range=0-197407&rn=4&rbuf=0&pot=D90eKmnA0k643SVhixhox1lbyyoI2cycpxWRHujoyo2b9cTYVfhS3K-QETBGErKdJrvFya-LxnjVmDpkjDsktuMH5eMYj9qajOBeRKc5kuEdAs-qXpSTsyIoAdModBYzLXFNlkJbPsU=
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Size 197 kB (197408 bytes)
Hash 733da430c3f6cf0ae3121ed0e968c836
f8332a52f83d566b468c968718a9deac76b246d7
1c1219b59ddb9dddc5dfc0f7bdae71c4c464d187cbf6a49727efae881eb970fd
POST /videoplayback?expire=1674783304&ei=6NXSY6LDD8iayAWN2YC4AQ&ip=91.90.42.154&id=o-AHkRfUrKMnEgaHp8T4Y6IM27bRD0QbOQvmaDlFbguBIW&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=H3gIhjlHTLgv1s3CKUTWVQZ2z4ex2r4&vprv=1&mime=video%2Fwebm&ns=b_LSWApsi9980WYJLeU_JdYL&gir=yes&clen=40587903&dur=3585.733&lmt=1652550620937792&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=5437434&n=xm3qrYsITtENhA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgNMBydZVbZ_fZiqnDKqZTVMsmlJcM7IYGC2l2iu9k0yACIBJ9wkowXnWZuNw7dXEcs5nDcsW6v5NVIEMgfpeWDJeP&cpn=CglycPtd1GuKHP1S&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=JC&mm=29&mn=sn-5go7ynlk&ms=rdu&mt=1674761602&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAP47Hrg7cYMsuR4RX-fDswH5VpijrSmMgd949JYOMxcIAiBjWBDR4WmPZXqj1Dyj0NiaLO9bW5c52WlWOiRxu9z1RQ%3D%3D&range=0-197407&rn=4&rbuf=0&pot=D90eKmnA0k643SVhixhox1lbyyoI2cycpxWRHujoyo2b9cTYVfhS3K-QETBGErKdJrvFya-LxnjVmDpkjDsktuMH5eMYj9qajOBeRKc5kuEdAs-qXpSTsyIoAdModBYzLXFNlkJbPsU= HTTP/1.1
Host: rr2---sn-5go7ynlk.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 14 May 2022 17:50:20 GMT
Content-Type: video/webm
Date: Thu, 26 Jan 2023 19:35:04 GMT
Expires: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 197408
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 71d348389324a61d7d058e79a0d4bff5
a18ff4fe43a879d67b75d310c4b5fae434a022e8
2533b2b5d55c8750e7dc0bb639a35f8d711dfd529bfb05b921b9bb8a221124d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 19:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
emdlvr.com/gy3r
200 OK 0 B IP
Analyzer Verdict Alert fortinet Phishing
GET /gy3r HTTP/1.1
Host: emdlvr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 19:35:00 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
x-robots-tag: noindex, nofollow
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 07 Jul 1777 07:07:07 GMT
x-redirect-powered-by: Pretty Link Executive 3.2.6 http://prettylink.com
set-cookie: prli_click_155=gy3r; expires=Sat, 25-Feb-2023 19:35:00 GMT; Max-Age=2592000; path=/
prli_visitor=63d2d5e4afe52; expires=Fri, 26-Jan-2024 19:35:00 GMT; Max-Age=31536000; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: MISS
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qOCQGn1AYMNH2gajhhpPk2VyLS8a3AExZ8zEa6zv3w3NNfK4hxqjGRU%2BS0cPbtQZ8esk3Pkx83j6tTqSlYxnHOubuTYylZPqLrcw9P9Nh%2FA6fjoBy2qpFBWONb46"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fbb0749e30b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Sacramento
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Sacramento
IP
GET /css2?family=Sacramento HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 26 Jan 2023 19:35:01 GMT
date: Thu, 26 Jan 2023 19:35:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Oswald:wght@400;500;600;700;800
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Oswald:wght@400;500;600;700;800
IP
GET /css2?family=Oswald:wght@400;500;600;700;800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 26 Jan 2023 19:35:01 GMT
date: Thu, 26 Jan 2023 19:35:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
click.ajourneyforhealth.net/?t=c&ids=NTczMzgwMTc2__MTQ5MTI=__NDk1MjgwNTI=__Njgw__831&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGZ3kzcg==
200 OK 0 B URL HTTP/2 click.ajourneyforhealth.net/?t=c&ids=NTczMzgwMTc2__MTQ5MTI=__NDk1MjgwNTI=__Njgw__831&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGZ3kzcg==
IP
GET /?t=c&ids=NTczMzgwMTc2__MTQ5MTI=__NDk1MjgwNTI=__Njgw__831&url=aHR0cHMlM0ElMkYlMkZlbWRsdnIuY29tJTJGZ3kzcg== HTTP/1.1
Host: click.ajourneyforhealth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 19:35:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: EXPIRED
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400
IP
GET /css2?family=Roboto:wght@400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://folicrex.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 26 Jan 2023 19:35:01 GMT
date: Thu, 26 Jan 2023 19:35:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
170.187.185.18
34.160.144.191
93.184.220.29
95.101.11.115
104.21.51.219