tpbproxyone.org/torrent/17718052/Debashish_Bhattacharya_-_Hawaii_To_Calcutta__A_Tribute_To_Tau_Mo
172.93.103.100200 OK 557 B URL HTTP/1.1 tpbproxyone.org/torrent/17718052/Debashish_Bhattacharya_-_Hawaii_To_Calcutta__A_Tribute_To_Tau_Mo
IP 172.93.103.100:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (557), with no line terminators
Hash c442f52fc22a62f4b81264e9319aacf0
c77d1d3e745224ccf877241543057db9fd571f93
1a8c062ba17b18ad88fed5b40dc1ca406d303962e47ec49a9c7e29bb51eb5b1b
GET /torrent/17718052/Debashish_Bhattacharya_-_Hawaii_To_Calcutta__A_Tribute_To_Tau_Mo HTTP/1.1
Host: tpbproxyone.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 557
content-type: text/html; charset=utf-8
date: Fri, 27 Jan 2023 02:03:28 GMT
server: nginx
set-cookie: sid=cae2c456-9de6-11ed-a4f5-e7a906f84c5b; path=/; domain=.tpbproxyone.org; expires=Wed, 14 Feb 2091 05:17:36 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6450
Expires: Fri, 27 Jan 2023 03:50:59 GMT
Date: Fri, 27 Jan 2023 02:03:29 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5506
Expires: Fri, 27 Jan 2023 03:35:15 GMT
Date: Fri, 27 Jan 2023 02:03:29 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 01:42:58 GMT
content-type: application/json
age: 1231
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7823
Expires: Fri, 27 Jan 2023 04:13:52 GMT
Date: Fri, 27 Jan 2023 02:03:29 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YRKIkkxHLGsymiyrJNJIfRxenbr3rJvz3QTYKjShr7qZbxk+A4AkyOqWdHTlUIHNwge+/BIb4jU=
x-amz-request-id: AH7YB748AXEVAFRZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 01:49:13 GMT
age: 856
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 02:03:29 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
tpbproxyone.org/favicon.ico
172.93.103.100404 Not Found 9 B URL HTTP/1.1 tpbproxyone.org/favicon.ico
IP 172.93.103.100:0
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: tpbproxyone.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tpbproxyone.org/torrent/17718052/Debashish_Bhattacharya_-_Hawaii_To_Calcutta__A_Tribute_To_Tau_Mo
Cookie: sid=cae2c456-9de6-11ed-a4f5-e7a906f84c5b
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Fri, 27 Jan 2023 02:03:29 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 01:49:02 GMT
age: 867
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4511
Expires: Fri, 27 Jan 2023 03:18:40 GMT
Date: Fri, 27 Jan 2023 02:03:29 GMT
Connection: keep-alive
tpbproxyone.org/torrent/17718052/Debashish_Bhattacharya_-_Hawaii_To_Calcutta__A_Tribute_To_Tau_Mo?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3NDc5MjIwOSwiaWF0IjoxNjc0Nzg1MDA5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3YwZzV0MmJmY2c0OWplbDgxdnFvMDkiLCJuYmYiOjE2NzQ3ODUwMDksInRzIjoxNjc0Nzg1MDA5MDI5NTMwfQ.9RloQpaAYmBjmT3jCRFIphBcPHYEdCGrqvhRaFyzRWs&sid=cae2c456-9de6-11ed-a4f5-e7a906f84c5b
172.93.103.100302 Found 11 B URL HTTP/1.1 tpbproxyone.org/torrent/17718052/Debashish_Bhattacharya_-_Hawaii_To_Calcutta__A_Tribute_To_Tau_Mo?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3NDc5MjIwOSwiaWF0IjoxNjc0Nzg1MDA5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3YwZzV0MmJmY2c0OWplbDgxdnFvMDkiLCJuYmYiOjE2NzQ3ODUwMDksInRzIjoxNjc0Nzg1MDA5MDI5NTMwfQ.9RloQpaAYmBjmT3jCRFIphBcPHYEdCGrqvhRaFyzRWs&sid=cae2c456-9de6-11ed-a4f5-e7a906f84c5b
IP 172.93.103.100:0
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /torrent/17718052/Debashish_Bhattacharya_-_Hawaii_To_Calcutta__A_Tribute_To_Tau_Mo?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3NDc5MjIwOSwiaWF0IjoxNjc0Nzg1MDA5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3YwZzV0MmJmY2c0OWplbDgxdnFvMDkiLCJuYmYiOjE2NzQ3ODUwMDksInRzIjoxNjc0Nzg1MDA5MDI5NTMwfQ.9RloQpaAYmBjmT3jCRFIphBcPHYEdCGrqvhRaFyzRWs&sid=cae2c456-9de6-11ed-a4f5-e7a906f84c5b HTTP/1.1
Host: tpbproxyone.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tpbproxyone.org/torrent/17718052/Debashish_Bhattacharya_-_Hawaii_To_Calcutta__A_Tribute_To_Tau_Mo
Cookie: sid=cae2c456-9de6-11ed-a4f5-e7a906f84c5b
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Fri, 27 Jan 2023 02:03:30 GMT
location: http://btpnative.com/click?data=ZjlEeGtkLVF3MWJyd2htS2NBREVrODlocHJmeWhyQ3JKTS14Z0VuLW8yeVhIR2RmYkEwSndxdW9HYTYxeFBfRnEtaFpld0wwTmJxeW9LTGxMOFJtSEpha2drNDZDQUFYUHhJY09wd0ZSQWhYTTFYNFI4RFFoRUk5ay1ORExkXzRTa0p2WnF3eUNkOTVudG1OMFJtUExRMg2&id=1538063c-3f84-4b16-bab0-2464da8f806f
server: nginx
set-cookie: sid=cae2c456-9de6-11ed-a4f5-e7a906f84c5b; path=/; domain=.tpbproxyone.org; expires=Wed, 14 Feb 2091 05:17:37 GMT; max-age=2147483647; HttpOnly
push.services.mozilla.com/
44.228.217.71101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.228.217.71:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2aFFFFZ7hHbNLbpkX9aPcQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Hj9CTeipzaggF2EiJ9C4IQg7dsc=
btpnative.com/click?data=ZjlEeGtkLVF3MWJyd2htS2NBREVrODlocHJmeWhyQ3JKTS14Z0VuLW8yeVhIR2RmYkEwSndxdW9HYTYxeFBfRnEtaFpld0wwTmJxeW9LTGxMOFJtSEpha2drNDZDQUFYUHhJY09wd0ZSQWhYTTFYNFI4RFFoRUk5ay1ORExkXzRTa0p2WnF3eUNkOTVudG1OMFJtUExRMg2&id=1538063c-3f84-4b16-bab0-2464da8f806f
192.99.158.241200 OK 5.5 kB URL HTTP/1.1 btpnative.com/click?data=ZjlEeGtkLVF3MWJyd2htS2NBREVrODlocHJmeWhyQ3JKTS14Z0VuLW8yeVhIR2RmYkEwSndxdW9HYTYxeFBfRnEtaFpld0wwTmJxeW9LTGxMOFJtSEpha2drNDZDQUFYUHhJY09wd0ZSQWhYTTFYNFI4RFFoRUk5ay1ORExkXzRTa0p2WnF3eUNkOTVudG1OMFJtUExRMg2&id=1538063c-3f84-4b16-bab0-2464da8f806f
IP 192.99.158.241:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (349), with CRLF line terminators
Hash 57dc14f58e2303bff16473710fc06810
38a7b968eafced81f2671fc81338e8e60e8575e2
0b2953465c2ee08e8cd26065cdeca8e1c0cd0d059763814eb71d939f08515776
GET /click?data=ZjlEeGtkLVF3MWJyd2htS2NBREVrODlocHJmeWhyQ3JKTS14Z0VuLW8yeVhIR2RmYkEwSndxdW9HYTYxeFBfRnEtaFpld0wwTmJxeW9LTGxMOFJtSEpha2drNDZDQUFYUHhJY09wd0ZSQWhYTTFYNFI4RFFoRUk5ay1ORExkXzRTa0p2WnF3eUNkOTVudG1OMFJtUExRMg2&id=1538063c-3f84-4b16-bab0-2464da8f806f HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://tpbproxyone.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: HlhmuKLRkpSOujG=HlhmuKLRkpSOujG; path=/
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Fri, 27 Jan 2023 02:03:29 GMT
Content-Length: 5470
btpnative.com/Redirect/
192.99.158.241302 Found 1.8 kB IP 192.99.158.241:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1737), with CRLF line terminators
Hash 6670ed252e080445924988818d15274f
2e35d776341a1de6ae169956ceb2792a71b7337f
0b450bf748c067dbbd475b2d62f3906a2c4ed9dc2b1fd8708cf78a48af83db42
POST /Redirect/ HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 358
Origin: http://btpnative.com
Connection: keep-alive
Referer: http://btpnative.com/click?data=ZjlEeGtkLVF3MWJyd2htS2NBREVrODlocHJmeWhyQ3JKTS14Z0VuLW8yeVhIR2RmYkEwSndxdW9HYTYxeFBfRnEtaFpld0wwTmJxeW9LTGxMOFJtSEpha2drNDZDQUFYUHhJY09wd0ZSQWhYTTFYNFI4RFFoRUk5ay1ORExkXzRTa0p2WnF3eUNkOTVudG1OMFJtUExRMg2&id=1538063c-3f84-4b16-bab0-2464da8f806f
Cookie: HlhmuKLRkpSOujG=HlhmuKLRkpSOujG
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzx8Me0kzRtReLyT4nqgY4lUIKv2ZHTfRFmdNRMz_dvhc29XXvCS9-JLFXNSHgbbvMDcVgn291AC8_M1Mmbofr-ZKceZDQZtXA_b5np8cxJs0YFos_XX7JtPGVWViaJip_gzuORprI4qlt_7kfAZbXZ_3hitpdaEoqb0ydhoZZBqkiOFUSTI7wWesQ9eRj1dK3N-v8BIHlO6ic7m3ynBUcsyUE6MorZxE-9hV4AbS8Fh36g3txk1fZiBIiEGfLCfKHnQQ2Kfo2H--uEn4AkkWG5W9dKDCqaorJkjp3kQ3vjXpxcMc9t0-Ifg5jNi2LLofFcwWK4f86GKtq-BTbUqoyOTW-JGyDg7SXXq85s0cP1DnpEsfwoCuln4rymMpy1wzSkkYz9F6VKwaNuydrbih0BPnoqGn5uHZoui9WEKVZxZX9eOGDO9xP9fgY3t6xIW8DZiZGyfLoIBm_Y6UtOqiQgcDDhC0jlEh9x3A4I2R5IkXxuS3zXNnE691SLYXqlB_pYJBoTPX5eccLGIoYMCT98-0bEjzXcuSWhT39u56G-BU3LSDKxUn4VX7RHopvncO6dqysHoRPoUkMa13p3zeYeqiepGvAlG_wGbjUhtBttOcGvngmAdaxJcfcLSqECpzXfyrH0f6xV-jQPiuzYfez3NWjKAro-UUNnDX0gpdFb3-zxIbTGhkzHWaIy-R46lUGgfh3Y1MH56Zm1QpQRJMYmB2ECJBt9vwd-OwZWWftn_5RMLHybMVhST2W37oH6xfmZ_BxgeVkJ36yPH48JebCjsDaToxERLd_aCIlGoVRQJDpsednW4pcl0lD0N8hDzFtLU2t-tWAeTkbGb5ttCbdarrh42FPPTIkatSStWeSexnBDUsAjReqsD_9vB8WeHOtXUVHRmDslSP-u3h-xVXzPT1G9hWIPfG4vypP6Gv4GEE3DWR50Z1Pfe1kshk4uEIVZ_Ar4MXv0YVRsjWQ5nNK7Q_oWMzc9mADunUC4vEBOd3bjHJJZTeBrhXzOL0t3qHOVj3SOL618x1rtg5Yuugvl7nAA319rQT5Ud6a0Dn6eNJizYKweXujG-J7JnMs7EaWDzJE_6X2Ti4dOAadnGy3NlTx__A9RYUFvznADb-k-FvaPhhgtFwNiv1Zuxk9W74o-5mHSollN8_R_t7s-Wbdx2iW8yKyuTfRJpQ2ge7Uo-9Z8QWW7j6bn4-5zQAw_SMiJ2RWHusoL5zUJcK-tCgLZ_7tmCu0FGrrjjfuAeiMhH9i09DnHmQ_YXZr6uKawK-aMbb8JYUiQxlIfzFlSAXcs7_CNBpFgUsmOV3zN_KLpekrRsP_Bq3bDQGJnNnlKOal3VOmEFai1NXPym5nuuf77NgPXEcejJ6HXuQ0H6I80zSRHY61AC8Ejf9M6EZqYs7jxb41hPaEnMXudMAcAZikWDNvXFr9TiobNwStkQ3BLEVJh8MbOqq4oL2MCSpNQpOroVV4ZZAOeRBGW2M-edZHsAlzsFMzYGLPkZgDphevg7WD81WSt9dIK1Rlbiaxp54rQ4ZUirtJAe3_wsPGkMWr4h1rP0FF769nCH8xZUgF3LOzpV3p2woOwA1ZtKmSv8w1SH8xZUgF3LO5lBB2RbRzyFlkkLEB146pQ
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Fri, 27 Jan 2023 02:03:30 GMT
Content-Length: 1809
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 8b80e7658748fff1e5e0057a59a17c70
400803ffd9a77d82b96a9e1c1aeebedd8545eb9f
34a8f0f6a29cf9281d295aed68fac414a8ea887f9e9826d08e80826f50a017bc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 02:03:31 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 07:25:41 GMT
Expires: Thu, 02 Feb 2023 07:25:40 GMT
Etag: "400803ffd9a77d82b96a9e1c1aeebedd8545eb9f"
Cache-Control: max-age=537128,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78fde98fdb99b529-OSL
mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzx8Me0kzRtReLyT4nqgY4lUIKv2ZHTfRFmdNRMz_dvhc29XXvCS9-JLFXNSHgbbvMDcVgn291AC8_M1Mmbofr-ZKceZDQZtXA_b5np8cxJs0YFos_XX7JtPGVWViaJip_gzuORprI4qlt_7kfAZbXZ_3hitpdaEoqb0ydhoZZBqkiOFUSTI7wWesQ9eRj1dK3N-v8BIHlO6ic7m3ynBUcsyUE6MorZxE-9hV4AbS8Fh36g3txk1fZiBIiEGfLCfKHnQQ2Kfo2H--uEn4AkkWG5W9dKDCqaorJkjp3kQ3vjXpxcMc9t0-Ifg5jNi2LLofFcwWK4f86GKtq-BTbUqoyOTW-JGyDg7SXXq85s0cP1DnpEsfwoCuln4rymMpy1wzSkkYz9F6VKwaNuydrbih0BPnoqGn5uHZoui9WEKVZxZX9eOGDO9xP9fgY3t6xIW8DZiZGyfLoIBm_Y6UtOqiQgcDDhC0jlEh9x3A4I2R5IkXxuS3zXNnE691SLYXqlB_pYJBoTPX5eccLGIoYMCT98-0bEjzXcuSWhT39u56G-BU3LSDKxUn4VX7RHopvncO6dqysHoRPoUkMa13p3zeYeqiepGvAlG_wGbjUhtBttOcGvngmAdaxJcfcLSqECpzXfyrH0f6xV-jQPiuzYfez3NWjKAro-UUNnDX0gpdFb3-zxIbTGhkzHWaIy-R46lUGgfh3Y1MH56Zm1QpQRJMYmB2ECJBt9vwd-OwZWWftn_5RMLHybMVhST2W37oH6xfmZ_BxgeVkJ36yPH48JebCjsDaToxERLd_aCIlGoVRQJDpsednW4pcl0lD0N8hDzFtLU2t-tWAeTkbGb5ttCbdarrh42FPPTIkatSStWeSexnBDUsAjReqsD_9vB8WeHOtXUVHRmDslSP-u3h-xVXzPT1G9hWIPfG4vypP6Gv4GEE3DWR50Z1Pfe1kshk4uEIVZ_Ar4MXv0YVRsjWQ5nNK7Q_oWMzc9mADunUC4vEBOd3bjHJJZTeBrhXzOL0t3qHOVj3SOL618x1rtg5Yuugvl7nAA319rQT5Ud6a0Dn6eNJizYKweXujG-J7JnMs7EaWDzJE_6X2Ti4dOAadnGy3NlTx__A9RYUFvznADb-k-FvaPhhgtFwNiv1Zuxk9W74o-5mHSollN8_R_t7s-Wbdx2iW8yKyuTfRJpQ2ge7Uo-9Z8QWW7j6bn4-5zQAw_SMiJ2RWHusoL5zUJcK-tCgLZ_7tmCu0FGrrjjfuAeiMhH9i09DnHmQ_YXZr6uKawK-aMbb8JYUiQxlIfzFlSAXcs7_CNBpFgUsmOV3zN_KLpekrRsP_Bq3bDQGJnNnlKOal3VOmEFai1NXPym5nuuf77NgPXEcejJ6HXuQ0H6I80zSRHY61AC8Ejf9M6EZqYs7jxb41hPaEnMXudMAcAZikWDNvXFr9TiobNwStkQ3BLEVJh8MbOqq4oL2MCSpNQpOroVV4ZZAOeRBGW2M-edZHsAlzsFMzYGLPkZgDphevg7WD81WSt9dIK1Rlbiaxp54rQ4ZUirtJAe3_wsPGkMWr4h1rP0FF769nCH8xZUgF3LOzpV3p2woOwA1ZtKmSv8w1SH8xZUgF3LO5lBB2RbRzyFlkkLEB146pQ
52.116.53.155302 Found 0 B URL HTTP/2 mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzx8Me0kzRtReLyT4nqgY4lUIKv2ZHTfRFmdNRMz_dvhc29XXvCS9-JLFXNSHgbbvMDcVgn291AC8_M1Mmbofr-ZKceZDQZtXA_b5np8cxJs0YFos_XX7JtPGVWViaJip_gzuORprI4qlt_7kfAZbXZ_3hitpdaEoqb0ydhoZZBqkiOFUSTI7wWesQ9eRj1dK3N-v8BIHlO6ic7m3ynBUcsyUE6MorZxE-9hV4AbS8Fh36g3txk1fZiBIiEGfLCfKHnQQ2Kfo2H--uEn4AkkWG5W9dKDCqaorJkjp3kQ3vjXpxcMc9t0-Ifg5jNi2LLofFcwWK4f86GKtq-BTbUqoyOTW-JGyDg7SXXq85s0cP1DnpEsfwoCuln4rymMpy1wzSkkYz9F6VKwaNuydrbih0BPnoqGn5uHZoui9WEKVZxZX9eOGDO9xP9fgY3t6xIW8DZiZGyfLoIBm_Y6UtOqiQgcDDhC0jlEh9x3A4I2R5IkXxuS3zXNnE691SLYXqlB_pYJBoTPX5eccLGIoYMCT98-0bEjzXcuSWhT39u56G-BU3LSDKxUn4VX7RHopvncO6dqysHoRPoUkMa13p3zeYeqiepGvAlG_wGbjUhtBttOcGvngmAdaxJcfcLSqECpzXfyrH0f6xV-jQPiuzYfez3NWjKAro-UUNnDX0gpdFb3-zxIbTGhkzHWaIy-R46lUGgfh3Y1MH56Zm1QpQRJMYmB2ECJBt9vwd-OwZWWftn_5RMLHybMVhST2W37oH6xfmZ_BxgeVkJ36yPH48JebCjsDaToxERLd_aCIlGoVRQJDpsednW4pcl0lD0N8hDzFtLU2t-tWAeTkbGb5ttCbdarrh42FPPTIkatSStWeSexnBDUsAjReqsD_9vB8WeHOtXUVHRmDslSP-u3h-xVXzPT1G9hWIPfG4vypP6Gv4GEE3DWR50Z1Pfe1kshk4uEIVZ_Ar4MXv0YVRsjWQ5nNK7Q_oWMzc9mADunUC4vEBOd3bjHJJZTeBrhXzOL0t3qHOVj3SOL618x1rtg5Yuugvl7nAA319rQT5Ud6a0Dn6eNJizYKweXujG-J7JnMs7EaWDzJE_6X2Ti4dOAadnGy3NlTx__A9RYUFvznADb-k-FvaPhhgtFwNiv1Zuxk9W74o-5mHSollN8_R_t7s-Wbdx2iW8yKyuTfRJpQ2ge7Uo-9Z8QWW7j6bn4-5zQAw_SMiJ2RWHusoL5zUJcK-tCgLZ_7tmCu0FGrrjjfuAeiMhH9i09DnHmQ_YXZr6uKawK-aMbb8JYUiQxlIfzFlSAXcs7_CNBpFgUsmOV3zN_KLpekrRsP_Bq3bDQGJnNnlKOal3VOmEFai1NXPym5nuuf77NgPXEcejJ6HXuQ0H6I80zSRHY61AC8Ejf9M6EZqYs7jxb41hPaEnMXudMAcAZikWDNvXFr9TiobNwStkQ3BLEVJh8MbOqq4oL2MCSpNQpOroVV4ZZAOeRBGW2M-edZHsAlzsFMzYGLPkZgDphevg7WD81WSt9dIK1Rlbiaxp54rQ4ZUirtJAe3_wsPGkMWr4h1rP0FF769nCH8xZUgF3LOzpV3p2woOwA1ZtKmSv8w1SH8xZUgF3LO5lBB2RbRzyFlkkLEB146pQ
IP 52.116.53.155:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /aS/feedclick?s=HFz5zNIIs95ROWPasgEEzx8Me0kzRtReLyT4nqgY4lUIKv2ZHTfRFmdNRMz_dvhc29XXvCS9-JLFXNSHgbbvMDcVgn291AC8_M1Mmbofr-ZKceZDQZtXA_b5np8cxJs0YFos_XX7JtPGVWViaJip_gzuORprI4qlt_7kfAZbXZ_3hitpdaEoqb0ydhoZZBqkiOFUSTI7wWesQ9eRj1dK3N-v8BIHlO6ic7m3ynBUcsyUE6MorZxE-9hV4AbS8Fh36g3txk1fZiBIiEGfLCfKHnQQ2Kfo2H--uEn4AkkWG5W9dKDCqaorJkjp3kQ3vjXpxcMc9t0-Ifg5jNi2LLofFcwWK4f86GKtq-BTbUqoyOTW-JGyDg7SXXq85s0cP1DnpEsfwoCuln4rymMpy1wzSkkYz9F6VKwaNuydrbih0BPnoqGn5uHZoui9WEKVZxZX9eOGDO9xP9fgY3t6xIW8DZiZGyfLoIBm_Y6UtOqiQgcDDhC0jlEh9x3A4I2R5IkXxuS3zXNnE691SLYXqlB_pYJBoTPX5eccLGIoYMCT98-0bEjzXcuSWhT39u56G-BU3LSDKxUn4VX7RHopvncO6dqysHoRPoUkMa13p3zeYeqiepGvAlG_wGbjUhtBttOcGvngmAdaxJcfcLSqECpzXfyrH0f6xV-jQPiuzYfez3NWjKAro-UUNnDX0gpdFb3-zxIbTGhkzHWaIy-R46lUGgfh3Y1MH56Zm1QpQRJMYmB2ECJBt9vwd-OwZWWftn_5RMLHybMVhST2W37oH6xfmZ_BxgeVkJ36yPH48JebCjsDaToxERLd_aCIlGoVRQJDpsednW4pcl0lD0N8hDzFtLU2t-tWAeTkbGb5ttCbdarrh42FPPTIkatSStWeSexnBDUsAjReqsD_9vB8WeHOtXUVHRmDslSP-u3h-xVXzPT1G9hWIPfG4vypP6Gv4GEE3DWR50Z1Pfe1kshk4uEIVZ_Ar4MXv0YVRsjWQ5nNK7Q_oWMzc9mADunUC4vEBOd3bjHJJZTeBrhXzOL0t3qHOVj3SOL618x1rtg5Yuugvl7nAA319rQT5Ud6a0Dn6eNJizYKweXujG-J7JnMs7EaWDzJE_6X2Ti4dOAadnGy3NlTx__A9RYUFvznADb-k-FvaPhhgtFwNiv1Zuxk9W74o-5mHSollN8_R_t7s-Wbdx2iW8yKyuTfRJpQ2ge7Uo-9Z8QWW7j6bn4-5zQAw_SMiJ2RWHusoL5zUJcK-tCgLZ_7tmCu0FGrrjjfuAeiMhH9i09DnHmQ_YXZr6uKawK-aMbb8JYUiQxlIfzFlSAXcs7_CNBpFgUsmOV3zN_KLpekrRsP_Bq3bDQGJnNnlKOal3VOmEFai1NXPym5nuuf77NgPXEcejJ6HXuQ0H6I80zSRHY61AC8Ejf9M6EZqYs7jxb41hPaEnMXudMAcAZikWDNvXFr9TiobNwStkQ3BLEVJh8MbOqq4oL2MCSpNQpOroVV4ZZAOeRBGW2M-edZHsAlzsFMzYGLPkZgDphevg7WD81WSt9dIK1Rlbiaxp54rQ4ZUirtJAe3_wsPGkMWr4h1rP0FF769nCH8xZUgF3LOzpV3p2woOwA1ZtKmSv8w1SH8xZUgF3LO5lBB2RbRzyFlkkLEB146pQ HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 27 Jan 2023 02:03:31 GMT
content-length: 0
set-cookie: rhid=82776423868; Max-Age=15552000; Expires=Wed, 26-Jul-2023 02:03:31 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://p274639.mybettermb.com/adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCBBLFBRk1eiQ4ypU_IICyRP5V1c6EPCUBF8zHiEadnIXHca1CsuLEl2kGko8eoV6LiOFwlzkCkbzEzy7OBJtmOXCgzQbPSpPqqSSkl0jHkvawfpNa9imHsM1Pvdhx6h8GcMlvyNQu9ligKNm5HUY_GWjB2fjK6rwTJjim55TmpSzfpExJBMizSdKgbz0VF_-WH_9b8ky2I1bOt49-zifnPahCJDe0fs2e12k4XVJzHJX8mFgHSWE3TZCCpJ_Aq0_LLnTAHAGYpFgXZomooD2vuliVnQIGgxQDiU7ugF2M-yuw6VwzuvR-x3CQtVBA9Wp7n-oJi-H9AZDZAEJiK7vPzhVQGZYCU74sPmFASdx9uzLjhdEqJB6Nj2XmDvYXWw9hp-qFZn5gpnPqtE9sbJicJwX2fEbVjxB9kp2QAzznS8_6fjhgUFt3sQISiZ3D8mF7LCm2HeI0S938_gGwpSXr3tSAMcY_H2x07HFovOGSDpNKiXhLmiyflhHQ2DhJtv57AionTQ8bleb&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxS_OHH5_91uopa3TZiDo3oFQeGxH3zWxDcCYKCPgeiS2nQGaDLamGc5kJZCfct2JoVgP1rrlXSPKVbmKpyjNhW7A&si=1&oref=dae16bcb6b93b11e9cbacb290c7cfdf8&optunit=w6VwzuvR-x29ebjHufQcSA&rb=E-qvs9aXu7s&rr=0&abtg=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13973
Expires: Fri, 27 Jan 2023 05:56:24 GMT
Date: Fri, 27 Jan 2023 02:03:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13973
Expires: Fri, 27 Jan 2023 05:56:24 GMT
Date: Fri, 27 Jan 2023 02:03:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13973
Expires: Fri, 27 Jan 2023 05:56:24 GMT
Date: Fri, 27 Jan 2023 02:03:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13973
Expires: Fri, 27 Jan 2023 05:56:24 GMT
Date: Fri, 27 Jan 2023 02:03:31 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b8fa26c-af88-46ea-a5c6-1122db65d6d4.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b8fa26c-af88-46ea-a5c6-1122db65d6d4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f3605538118d3aaef721a03d482b0f9a
2e2e770d552a05a0f24f4bbb1110266440b2bf76
1011d275125968599a8dd082810deca07e82770efad760b3f1ebf7f74ebab78e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b8fa26c-af88-46ea-a5c6-1122db65d6d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9063
x-amzn-requestid: 8eb82d16-63f8-4e6e-b9fe-1795c7703c03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIgq2EbSoAMFUwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce178-67a0958d7cd1f132605d93be;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:10:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: aTjiRrFeeC6zT_NzPDvKNs-aV__tUniMFfbwxsn1eIf3NQzXxgYETA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:47:53 GMT
age: 65738
etag: "2e2e770d552a05a0f24f4bbb1110266440b2bf76"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23169a26-33f3-4f92-9612-02bf2555d37c.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23169a26-33f3-4f92-9612-02bf2555d37c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d2506ac511dfbea29e29ab14ba10f85
b2e2972ffa82b103c62ffde0fca99454e12d95e6
fbe6f833114208d84033ba691a74da18d641e38f0f327c752333a339f1baae34
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23169a26-33f3-4f92-9612-02bf2555d37c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5263
x-amzn-requestid: d9ce236e-c2fa-42dc-b0ff-ffe53a03a5a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVr6RFnrIAMF3DA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d226a7-378aa8163ddd262944257578;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:07:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jbNIYT3pKuUF_8NaACEsgFv3KxUt5q_5tUqgsf1Bdtdsw7Oxf6kFfA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:38:46 GMT
age: 66285
etag: "b2e2972ffa82b103c62ffde0fca99454e12d95e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 18:35:59 GMT
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
age: 26852
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1695371c247eedad65b4cac82f01215d
50510052f0e22e23f747c761d57cdf72910ac533
aadde426229f04f6a489b87d6949a485b19d4fd035cb244b6094549efc08013f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6394
x-amzn-requestid: 215e6698-30e7-45b0-8f8f-96a05c5f6992
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOirZG1doAMFW_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf4b15-3e1bec6759816cf84467339b;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 03:05:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tG3T0HguJWldw-LJ9SJSuuUT4ubLCWViwQFB-dZhNfEswMEexb7Tcw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 04:23:28 GMT
age: 78003
etag: "50510052f0e22e23f747c761d57cdf72910ac533"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d91ae98-1f78-4bbd-98ab-6e6d92c7fef2.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d91ae98-1f78-4bbd-98ab-6e6d92c7fef2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7364957de1b4c82a923bd947f0cce750
d8aa55b64a65757e043b4b1b63efd93c8261d275
f1f7059968d08adfa1c775c906ecb6e5b752210af0bcdcebfa77c2ba6f15bbf4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d91ae98-1f78-4bbd-98ab-6e6d92c7fef2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7573
x-amzn-requestid: 2946b91b-1d7e-4eba-966d-600ae368cd3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLzVxGw1oAMF-xQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce328b-04037751257e13ca156eee8d;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:08:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4TidB2H164ziAxKhEORFw4BBF0FB2pkkwNq3iMQfS4t7yObXCA59Pw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 14:49:11 GMT
age: 40460
etag: "d8aa55b64a65757e043b4b1b63efd93c8261d275"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a181da5-9eaa-4508-9ba5-ce3527c87698.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a181da5-9eaa-4508-9ba5-ce3527c87698.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a01352e094fda751e3227191ca74469
7ad63fabc3d52f7fc3f2f648d11edf7241e24368
8c06a16bab3b9c3130a8d8d91e52a01073b685d4831d1ba7129ac571bd7d0bc3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a181da5-9eaa-4508-9ba5-ce3527c87698.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7525
x-amzn-requestid: a7a05ec2-92ae-4813-b087-c4f32df1f7f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fB5k7GgkoAMF6eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca3c85-3c08d20509992a0d031213ad;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 07:02:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PyRhsgixwVqdtaNructs84RGA6AYOgTbqE_lUViwIZCHFMosWEo_8w==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 19:24:42 GMT
age: 23929
etag: "7ad63fabc3d52f7fc3f2f648d11edf7241e24368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
p274639.mybettermb.com/adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCBBLFBRk1eiQ4ypU_IICyRP5V1c6EPCUBF8zHiEadnIXHca1CsuLEl2kGko8eoV6LiOFwlzkCkbzEzy7OBJtmOXCgzQbPSpPqqSSkl0jHkvawfpNa9imHsM1Pvdhx6h8GcMlvyNQu9ligKNm5HUY_GWjB2fjK6rwTJjim55TmpSzfpExJBMizSdKgbz0VF_-WH_9b8ky2I1bOt49-zifnPahCJDe0fs2e12k4XVJzHJX8mFgHSWE3TZCCpJ_Aq0_LLnTAHAGYpFgXZomooD2vuliVnQIGgxQDiU7ugF2M-yuw6VwzuvR-x3CQtVBA9Wp7n-oJi-H9AZDZAEJiK7vPzhVQGZYCU74sPmFASdx9uzLjhdEqJB6Nj2XmDvYXWw9hp-qFZn5gpnPqtE9sbJicJwX2fEbVjxB9kp2QAzznS8_6fjhgUFt3sQISiZ3D8mF7LCm2HeI0S938_gGwpSXr3tSAMcY_H2x07HFovOGSDpNKiXhLmiyflhHQ2DhJtv57AionTQ8bleb&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxS_OHH5_91uopa3TZiDo3oFQeGxH3zWxDcCYKCPgeiS2nQGaDLamGc5kJZCfct2JoVgP1rrlXSPKVbmKpyjNhW7A&si=1&oref=dae16bcb6b93b11e9cbacb290c7cfdf8&optunit=w6VwzuvR-x29ebjHufQcSA&rb=E-qvs9aXu7s&rr=0&abtg=0
52.116.53.155302 Found 0 B URL HTTP/2 p274639.mybettermb.com/adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCBBLFBRk1eiQ4ypU_IICyRP5V1c6EPCUBF8zHiEadnIXHca1CsuLEl2kGko8eoV6LiOFwlzkCkbzEzy7OBJtmOXCgzQbPSpPqqSSkl0jHkvawfpNa9imHsM1Pvdhx6h8GcMlvyNQu9ligKNm5HUY_GWjB2fjK6rwTJjim55TmpSzfpExJBMizSdKgbz0VF_-WH_9b8ky2I1bOt49-zifnPahCJDe0fs2e12k4XVJzHJX8mFgHSWE3TZCCpJ_Aq0_LLnTAHAGYpFgXZomooD2vuliVnQIGgxQDiU7ugF2M-yuw6VwzuvR-x3CQtVBA9Wp7n-oJi-H9AZDZAEJiK7vPzhVQGZYCU74sPmFASdx9uzLjhdEqJB6Nj2XmDvYXWw9hp-qFZn5gpnPqtE9sbJicJwX2fEbVjxB9kp2QAzznS8_6fjhgUFt3sQISiZ3D8mF7LCm2HeI0S938_gGwpSXr3tSAMcY_H2x07HFovOGSDpNKiXhLmiyflhHQ2DhJtv57AionTQ8bleb&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxS_OHH5_91uopa3TZiDo3oFQeGxH3zWxDcCYKCPgeiS2nQGaDLamGc5kJZCfct2JoVgP1rrlXSPKVbmKpyjNhW7A&si=1&oref=dae16bcb6b93b11e9cbacb290c7cfdf8&optunit=w6VwzuvR-x29ebjHufQcSA&rb=E-qvs9aXu7s&rr=0&abtg=0
IP 52.116.53.155:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCBBLFBRk1eiQ4ypU_IICyRP5V1c6EPCUBF8zHiEadnIXHca1CsuLEl2kGko8eoV6LiOFwlzkCkbzEzy7OBJtmOXCgzQbPSpPqqSSkl0jHkvawfpNa9imHsM1Pvdhx6h8GcMlvyNQu9ligKNm5HUY_GWjB2fjK6rwTJjim55TmpSzfpExJBMizSdKgbz0VF_-WH_9b8ky2I1bOt49-zifnPahCJDe0fs2e12k4XVJzHJX8mFgHSWE3TZCCpJ_Aq0_LLnTAHAGYpFgXZomooD2vuliVnQIGgxQDiU7ugF2M-yuw6VwzuvR-x3CQtVBA9Wp7n-oJi-H9AZDZAEJiK7vPzhVQGZYCU74sPmFASdx9uzLjhdEqJB6Nj2XmDvYXWw9hp-qFZn5gpnPqtE9sbJicJwX2fEbVjxB9kp2QAzznS8_6fjhgUFt3sQISiZ3D8mF7LCm2HeI0S938_gGwpSXr3tSAMcY_H2x07HFovOGSDpNKiXhLmiyflhHQ2DhJtv57AionTQ8bleb&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxS_OHH5_91uopa3TZiDo3oFQeGxH3zWxDcCYKCPgeiS2nQGaDLamGc5kJZCfct2JoVgP1rrlXSPKVbmKpyjNhW7A&si=1&oref=dae16bcb6b93b11e9cbacb290c7cfdf8&optunit=w6VwzuvR-x29ebjHufQcSA&rb=E-qvs9aXu7s&rr=0&abtg=0 HTTP/1.1
Host: p274639.mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Cookie: rhid=82776423868
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 27 Jan 2023 02:03:31 GMT
content-length: 0
set-cookie: rhid=82776423868; Max-Age=15552000; Expires=Wed, 26-Jul-2023 02:03:31 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
loi=ad_490233_off_142374_aff_3322_cid_274639-575551883-TPBPROXYONE.ORG_ts_1674785011; Max-Age=3600; Expires=Fri, 27-Jan-2023 03:03:31 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://myfood.ltd/?v=20171031&s1=0
X-Firefox-Spdy: h2
myfood.ltd/?v=20171031&s1=0
151.139.128.10200 OK 2.9 kB URL HTTP/2 myfood.ltd/?v=20171031&s1=0
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6859), with no line terminators
Hash 029ccb01ef612a9e6748494c60d24b69
d385f7671725be11701998c27571e94b1950f991
7ac429dc45b509b1bed9bdcdc5610868d510d979ce3cc06d48870511bf0425f5
GET /?v=20171031&s1=0 HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 02:03:31 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 2896
content-type: text/html
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: W/"603cb731-1ad4"
x-hw: 1674785011.cds213.sk1.hn,1674785011.cds236.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/main/css/style.css
151.139.128.10200 OK 19 kB URL HTTP/2 myfood.ltd/main/css/style.css
IP 151.139.128.10:0
File type Unicode text, UTF-8 text, with very long lines (65134), with no line terminators
Hash a95a0c8bd1273406b8c8053fb3527d56
2a461dcfa2c4bf1d22727bfd7c3c2abc85d44343
55b46146d32f4ee365d4ca91d8b3b1c504a062b15bbc1ed60a22ac2d05be1db5
GET /main/css/style.css HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 02:03:31 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 18933
content-type: text/css
last-modified: Mon, 01 Mar 2021 09:43:15 GMT
accept-ranges: bytes
server: nginx
etag: W/"603cb733-1b1ac"
x-hw: 1674785011.cds213.sk1.hn,1674785011.cds261.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_1.jpg
151.139.128.10200 OK 74 kB URL HTTP/2 myfood.ltd/images/Superfood_1.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x420, components 3\012- data
Hash c2c3ec0e55e648c2a85d4499714a9c11
073f2990a52da59a7d3b73583b30be3c2cf45523
b66cf7365382753dc6340bfa2fba89c368ca3b930a0833d8f64c4c34525fc2ec
GET /images/Superfood_1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 02:03:31 GMT
cache-control: max-age=30
content-length: 74204
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-121dc"
x-hw: 1674785011.cds213.sk1.hn,1674785011.cds247.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_2.jpg
151.139.128.10200 OK 52 kB URL HTTP/2 myfood.ltd/images/Superfood_2.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x341, components 3\012- data
Hash b87af7248a82f58fe2ea5d0c7b030886
1d5a5b9752d7978c68b0d4a1689b3d8e6d322f0a
14da8c39c357dad0441b26d575c0000a9529c76d785680306a3cf51abe4cae81
GET /images/Superfood_2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 02:03:31 GMT
cache-control: max-age=30
content-length: 51830
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: "603cb731-ca76"
x-hw: 1674785011.cds213.sk1.hn,1674785011.cds220.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-1.jpg
151.139.128.10200 OK 11 kB URL HTTP/2 myfood.ltd/images/avatar-1.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash 62d0b6a649ac10e72bcb6ea3bbf57564
3e333889b0b66bfc6a32499f4c55878e2102b463
58dddc0a77632d920d096da6c6e2587c5859a4b4dd7af6dcd6eb8009ebc23ba6
GET /images/avatar-1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 02:03:31 GMT
cache-control: max-age=30
content-length: 11304
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-2c28"
x-hw: 1674785011.cds213.sk1.hn,1674785011.cds211.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-2.jpg
151.139.128.10200 OK 11 kB URL HTTP/2 myfood.ltd/images/avatar-2.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash dd3881ed1b5b03b1d571edf89e12c466
61ca68c1c2d2ae7d286dfc0540f4ca8b357fdf3d
97b65e41dd547b310e1e860d2ae4717dba1d97bd36c0cd06c35749caa515e207
GET /images/avatar-2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 02:03:31 GMT
cache-control: max-age=30
content-length: 10665
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-29a9"
x-hw: 1674785011.cds213.sk1.hn,1674785011.cds202.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/main/js/main.js
151.139.128.10200 OK 39 kB URL HTTP/2 myfood.ltd/main/js/main.js
IP 151.139.128.10:0
File type Unicode text, UTF-8 text, with very long lines (60220)
Hash 181e3fa3b1de97ff4efd259bc2a2c8c7
52edf1dc36109cb57bea12689a48442e27f06ad1
ffa8984bea3bf0c0a0cb282e9a5a98b3435e63fb6a26dfe0351979fa9f827c40
GET /main/js/main.js HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 02:03:31 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 38656
content-type: application/javascript
last-modified: Mon, 01 Mar 2021 09:43:14 GMT
accept-ranges: bytes
server: nginx
etag: "603cb732-1d57b"
x-hw: 1674785011.cds213.sk1.hn,1674785011.cds228.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 02:03:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 02:03:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
142.250.74.35200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 14564, version 1.0\012- data
Hash 60c866748ff15f5b347fdba64596b1b1
34f486906decb7c8cf7a02d4758add9a2408c7a5
5278c0f6063ca9ad85653b18a2ddf1aa57e3ab40b7973a69b09acf859db8264d
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myfood.ltd
Connection: keep-alive
Referer: https://myfood.ltd/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 10:17:18 GMT
expires: Thu, 25 Jan 2024 10:17:18 GMT
cache-control: public, max-age=31536000
age: 143173
last-modified: Wed, 11 Oct 2017 21:49:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
142.250.74.35200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 14544, version 1.0\012- data
Hash 223a277bd88d8a90c8cdf24cda0ad5f5
24234c1c81b3948758c1a0be8e5a65386ca94c52
d61b45b8b3cded238a65ee0aac4043b989f11cee56acfe5c889777f961f241a2
GET /s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myfood.ltd
Connection: keep-alive
Referer: https://myfood.ltd/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14544
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 18:54:03 GMT
expires: Wed, 24 Jan 2024 18:54:03 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:52 GMT
content-type: font/woff2
age: 198568
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
myfood.ltd/favicon.ico
151.139.128.10200 OK 1.2 kB IP 151.139.128.10:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash b671b0407b8abf4ffb9946ee1596d992
79a116ffd13f1888451abd3cb8751cb2140f2fa4
1515616a51664df153b03397585ee45469cb936100992f870419514b17820649
GET /favicon.ico HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 02:03:31 GMT
cache-control: max-age=30
content-length: 1150
content-type: image/x-icon
last-modified: Wed, 28 Mar 2018 14:00:16 GMT
accept-ranges: bytes
server: nginx
etag: "5abb9ff0-47e"
x-hw: 1674785011.cds213.sk1.hn,1674785011.cds240.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 02:03:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN