hh360trk.com/9660cdb1-a87e-43bd-aa47-5c11ae7a3381?sub1=207280275&sub2=77783&sub4=HT&sub5=1675261537.800999-207280275-77783
302 0 B URL HTTP/1.1 hh360trk.com/9660cdb1-a87e-43bd-aa47-5c11ae7a3381?sub1=207280275&sub2=77783&sub4=HT&sub5=1675261537.800999-207280275-77783
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /9660cdb1-a87e-43bd-aa47-5c11ae7a3381?sub1=207280275&sub2=77783&sub4=HT&sub5=1675261537.800999-207280275-77783 HTTP/1.1
Host: hh360trk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Wed, 01 Feb 2023 14:26:01 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.phtrck.com/3CG1M6F/DNPGN9/?uid=2987&sub2=77783&sub3=&sub4=HT&sub5=w657hhjroklthmam2981dvaa
Pragma: no-cache
Set-Cookie: 9660cdb1-a87e-43bd-aa47-5c11ae7a3381-v4=tDi0Dq7QLumkB7baDiv5k9M1uDHPCWw0zY-UY69Flx4; Max-Age=86400; Expires=Thu, 02-Feb-2023 14:26:01 GMT; Domain=hh360trk.com; Path=/; HttpOnly
cc-v4=fKUUwZmuxKXVcQDsx8JoGnLF7zHfeoUYmuk7FDymdb8RACYT7%2FX7EleGCdL5PylBZj%2BUNyNvOiavxzCVSPO0%2BFhpz%2BvbGHaJAgL%2BN3AKgHI5Ymxybx0h7WPRcVDnpKgw26cLyKZTbr15GWIrINj0jg%3D%3D; Max-Age=31536000; Expires=Thu, 01-Feb-2024 14:26:01 GMT; Domain=hh360trk.com; Path=/; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13850
Expires: Wed, 01 Feb 2023 18:16:51 GMT
Date: Wed, 01 Feb 2023 14:26:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15596
Expires: Wed, 01 Feb 2023 18:45:57 GMT
Date: Wed, 01 Feb 2023 14:26:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11604
Expires: Wed, 01 Feb 2023 17:39:25 GMT
Date: Wed, 01 Feb 2023 14:26:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 13:36:01 GMT
content-type: application/json
age: 3000
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NB/KY254awrs5GYXrhppmqTskC8AfXYI1RsTDjwEHLLPRssLk9ekg+ssQ4bmx6FIDr2oJLGb8Xs=
x-amz-request-id: RK47HCESVC7QWNEJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 13:51:35 GMT
age: 2066
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:01 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 13:49:05 GMT
age: 2217
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10790
Expires: Wed, 01 Feb 2023 17:25:52 GMT
Date: Wed, 01 Feb 2023 14:26:02 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: M6AR93aqNj4pI5cqsZB5Rw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wok++/LhfKJa15eUF/1Va6TcxVc=
www.phtrck.com/3CG1M6F/DNPGN9/?uid=2987&sub2=77783&sub3=&sub4=HT&sub5=w657hhjroklthmam2981dvaa
302 Found 255 B URL HTTP/2 www.phtrck.com/3CG1M6F/DNPGN9/?uid=2987&sub2=77783&sub3=&sub4=HT&sub5=w657hhjroklthmam2981dvaa
IP
File type HTML document, ASCII text
Hash 08445c2dde5878c793cd701a941ced66
3f614009e92192f7e4431c98227d02bf4b374c65
d62e47465156e41d089a8e31cb0b1dbf3133194e1742a57a03c9e9b157515a68
GET /3CG1M6F/DNPGN9/?uid=2987&sub2=77783&sub3=&sub4=HT&sub5=w657hhjroklthmam2981dvaa HTTP/1.1
Host: www.phtrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Wed, 01 Feb 2023 14:26:02 GMT
content-type: text/html; charset=utf-8
content-length: 255
location: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
set-cookie: uniqueClick_DNPGN9=205b2b2d-35e9-4b22-8d5a-185d1c826708:1675261562; Path=/; Expires=Thu, 02 Feb 2023 14:26:02 GMT; Secure; SameSite=None
transaction_id=f2c832afbb604d9083fd4a97c0631978; Path=/; Expires=Tue, 02 May 2023 14:26:02 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: ed2be7fd-edbd-49d5-9134-f1d10a35e818
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash dd03ccecc390671126840bd52dcd3f75
9de4361e2a2c7af5001821542e14a4253fd28893
2835559d41a8fc40988a25ae191166ee768eb21545d8ca1d26deb6170a0aee16
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 14:26:03 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 14:14:36 GMT
Expires: Sun, 05 Feb 2023 14:14:35 GMT
Etag: "9de4361e2a2c7af5001821542e14a4253fd28893"
Cache-Control: max-age=344311,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 792b5c214ce90b69-OSL
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/play-logo.png?v=1.1
200 OK 4.3 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/play-logo.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 58 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9d8ab8a821e356f885a93fe109b2b8
bcf1ad1b6632e19021d2cba95143e9159f5f3ab0
f581d2ee8cbefde9dd50df522be49ce3788158e6e890050aca7bcf678242efae
GET /vsl/med/v2_0_yt/images/play-logo.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 4332
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/add-to-cart-btn.png?v=1.1
200 OK 13 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/add-to-cart-btn.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 242 x 63, 8-bit/color RGBA, non-interlaced\012- data
Hash 64a5e156ec13dd96b4e0f6b247412dcd
3193365686d6fc38881686202e195e6ceead74e4
9d6478138354ee15afa299c9b963f0f1f1579ebdf384abc9f73a273174b3f291
GET /vsl/med/v2_0_yt/images/add-to-cart-btn.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 12742
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/alert.png
200 OK 2.1 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/alert.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 128 x 109, 8-bit/color RGBA, non-interlaced\012- data
Hash f669504809824cb78cd61210c75c40e1
8cec19e7ed21efad1dd505295667afd3c0597954
43efaa38dfd9069178e1ac6f1d3e4571aa3c20307b5d3b3d1df9fa1f73e9f3a9
GET /vsl/med/v2_0_yt/images/alert.png HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 2084
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/bottle-1.png?v=1.1
200 OK 20 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/bottle-1.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 81 x 136, 8-bit/color RGBA, non-interlaced\012- data
Hash 732056336529354d00d87a070bbcde03
ffdc36755474f19d3c33e1bc5e74289597d11b9d
c32718245f860d981caa517314bc7ba9f6c0ef5277c6a62c737c15de4daadb02
GET /vsl/med/v2_0_yt/images/bottle-1.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 20125
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
200 OK 28 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65305)
Hash 9e809125b4f45a82ba699c490010ba2f
2a6060f1c5f6874b918a7838222e6c328fd7583f
b79929834ca653c9dcf7fa61428db7d5e4a2a8e119f304c447bb2218f9087b6a
GET /npm/bootstrap@5.2.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"2f955-er7QcON84GDApWFXXx1Bp/JI/HQ"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:03 GMT
age: 4114757
x-served-by: cache-fra-eddf8230024-FRA, cache-bma1681-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27506
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/avatar3.png?v=1.1
200 OK 133 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/avatar3.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 258 x 258, 8-bit/color RGBA, non-interlaced\012- data
Size 133 kB (132993 bytes)
Hash 2dce04dc1e68e2325713566358c39dbc
fd1e55dfdd80fdf6767b5b9b5f87087df8635669
a28d489afb4cbc458fecf28fa11e4fb43bc16853ba79913657c7aa37a872aa70
GET /vsl/med/v2_0_yt/images/avatar3.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 132993
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
200 OK 16 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (60201)
Hash b62b81f2b58bdca4ceb7be2afcf4a316
9ad72c2cef4caaadb3843b2bf13fd25c5c77b084
b8d87804e82b54a382231a56b1a5c4a2d459bf0e80d43c5ca00064b95478b588
GET /npm/bootstrap@5.2.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.2
x-jsd-version-type: version
etag: W/"ec40-b7/b3b6FxXjeVZrcyNB8zLwW1RQ"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:03 GMT
age: 1919922
x-served-by: cache-fra-eddf8230119-FRA, cache-bma1681-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16147
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/guarantee.png?v=1.1
200 OK 19 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/guarantee.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 107 x 107, 8-bit/color RGBA, non-interlaced\012- data
Hash af0cf7d66733ec0b511ca4b72b9406a9
7bcc587541fe545b90c3fef26d129663b81dc35e
1aea248a3b81a0cb93ec7f0402470e8cbeb55da86bb2cc6b7379025378713924
GET /vsl/med/v2_0_yt/images/guarantee.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 18752
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/atc.jpg
200 OK 35 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/atc.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 448x244, components 3\012- data
Hash c6f6111e3cd8539a902e7d359edf1dc5
232bf2def2119e307810a6031d67a7acb3b86fa0
ecc8dd95882ba20272bdd5a4fc9a1401e3d43502a0d9ec49e763b07ae09d624a
GET /vsl/med/v2_0_yt/images/atc.jpg HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/jpeg
content-length: 35271
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/discover-1.png?v=1.1
200 OK 94 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/discover-1.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 274 x 188, 8-bit/color RGBA, non-interlaced\012- data
Hash 161343d8a0db6c54914cb0043f844245
322e9f5cc053dc1afc2fb8f195432c1a4303a530
dc5fbd4fd21349202c0cba8345b17fbc4a42bff302a0b89591e46b712bf870e3
GET /vsl/med/v2_0_yt/images/discover-1.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 93667
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.6.1.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.1.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 2c8fb5f779970f005faea6e0f60c7e85
c9b676abdb36ea6ccf133eb7641236a7f53dd815
d14d28eea362f345cb56e1ae1244737768d80bc60dea930f308bde89dfa0c0f1
GET /jquery-3.6.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:03 GMT
content-encoding: gzip
content-length: 30957
content-type: application/javascript; charset=utf-8
last-modified: Fri, 26 Aug 2022 17:36:05 GMT
accept-ranges: bytes
server: nginx
etag: W/"63090485-15e40"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1675261563.dop206.sk1.t,1675261563.cds226.sk1.hn,1675261563.cds206.sk1.c
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/discover-4.png?v=1.1
200 OK 68 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/discover-4.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 274 x 188, 8-bit/color RGBA, non-interlaced\012- data
Hash 77d7145909f6306e00bbbc30a56e84fa
d9f0b363840b55119fa56d45e8aed4fcf2dd0e53
2824b4a20494c80a643e768c161242f73c478d0518103ec8fee77b257a538bfb
GET /vsl/med/v2_0_yt/images/discover-4.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 67777
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/discover-2.png?v=1.1
200 OK 100 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/discover-2.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 274 x 188, 8-bit/color RGBA, non-interlaced\012- data
Hash f9a1490f6e069f4dfa8ed94510e147ba
f0eade309e90f010a43500058b48984c1309f4f2
959164e77ac11120f3466c73abdcaec165fe46f2c4f5e46ecb2331b18e6e9a71
GET /vsl/med/v2_0_yt/images/discover-2.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 99950
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/discover-3.png?v=1.1
200 OK 119 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/discover-3.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 274 x 188, 8-bit/color RGBA, non-interlaced\012- data
Size 119 kB (118630 bytes)
Hash 63d6e28bd0b42388892d6157dbbf48f0
921c0aa9a2e735c3134c9c7c8fa17db5bfdfed4e
4eb3fabaa3a45bb6e65c0b101280b619418ee186f6600cd0a6aa73190b4de582
GET /vsl/med/v2_0_yt/images/discover-3.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 118630
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c004ef398fc2138876eac9e202e6e7c9
9b695108fe043113ee8dc3369be58234f1a73323
ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/avatar2.png?v=1.1
200 OK 106 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/avatar2.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 258 x 258, 8-bit/color RGBA, non-interlaced\012- data
Size 106 kB (106335 bytes)
Hash 9467f018a997d0d251095a9cbde32112
c282a4d51c5c4863a80611d12d657ed0dd4a8052
980a98be63a1e7df0dbf7d343370d5e4106cca7cdb66533aa4e25411dd695376
GET /vsl/med/v2_0_yt/images/avatar2.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 106335
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/avatar1.png?v=1.1
200 OK 147 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/avatar1.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 258 x 258, 8-bit/color RGBA, non-interlaced\012- data
Size 147 kB (147236 bytes)
Hash 4f5464fac0e25320bf31b4f4390ba590
802f5cd72870846116fc2a51ed766ed8d967a712
07078752e7f9e755fd5753c4803ecf6e113b59ef81d7e3dc8d37e5c9b6ee077a
GET /vsl/med/v2_0_yt/images/avatar1.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 147236
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/label2.png?v=1.1
200 OK 371 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/label2.png?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 739 x 699, 8-bit/color RGB, non-interlaced\012- data
Size 371 kB (371042 bytes)
Hash 0e9d63c7a497276ef69d63e7688193e1
ce0a1ab105d0234d5f2fc8adb492b0f03b538154
05a1c1f2f7698fb1030f17c75d168cc0b59d311a090c9ace9d2eee4f32ee83a8
GET /vsl/med/v2_0_yt/images/label2.png?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/png
content-length: 371042
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0dea93a9adb1e26a6ebfaf2e12c22cd5
e286810b718e374858f11adf0aae18dc65f27d66
73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash aab20c9967074d3a08309e52055ca8a7
a570896f870af0a25b0ce53d541b10c1ab040758
51ff3484d26b4e86c398c92e5429de0782736a002aa60ef492d0d67fc8a3eee9
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 14:26:03 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "A117BB1CFB662E8CF10BCCD95D98559F1D04598C"
Expires: Thu, 02 Feb 2023 01:00:00 GMT
Last-Modified: Wed, 01 Feb 2023 13:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1722
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792b5c23c9510b59-OSL
fast.wistia.com/assets/external/E-v1.js
200 OK 117 kB URL HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 117 kB (116767 bytes)
Hash 00492617eb8d73731c2c3fffe2501ed5
5b15229ef44fe829ca95b487517b9ee67e57582d
d9b87c8406d178661be9b75dfc2536f130f840f4406084104842ce0f21e62127
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63d2c5c4-1c81f"
last-modified: Thu, 26 Jan 2023 18:26:12 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:03 GMT
age: 3226
x-served-by: cache-iad-kiad7000159-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 41, 272
x-timer: S1675261563.464469,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 116767
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-743880376
200 OK 51 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-743880376
IP
File type ASCII text, with very long lines (1759)
Hash 5fa7a4d28c74a6ba56d9f2a83c5d0f11
39674304cf5ed66b6ce07797733086c60489103e
878ce5aaf082668b26ce78d47d393f3c50f776d5006c6c62d3285ea1250694cc
GET /gtag/js?id=AW-743880376 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 14:26:03 GMT
expires: Wed, 01 Feb 2023 14:26:03 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Feb 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 50692
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c004ef398fc2138876eac9e202e6e7c9
9b695108fe043113ee8dc3369be58234f1a73323
ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MVKKHJ3
200 OK 66 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MVKKHJ3
IP
File type ASCII text, with very long lines (5749)
Hash 0f7cf025b0822d64c6d594963513ec51
b5f804dccaede4eee76d4c7db15ca42abcd41cd9
1ac4dc82eaed7dce9481cc4a6d2ac0568e4553fd6b194f1dc6c55a45a1f41641
GET /gtm.js?id=GTM-MVKKHJ3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 14:26:03 GMT
expires: Wed, 01 Feb 2023 14:26:03 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Feb 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65770
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 7d5c448dc1c22392117e0a48c4835833
9095eb42524537dd34795ac05fa773ba3e7e75ec
ccfd64b2c404a06302df3397f4c316a2d2184db37d1fbd59767d0fb7d89a5cc8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5870
Cache-Control: max-age=111288
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Etag: "63d96f45-2d7"
Expires: Thu, 02 Feb 2023 21:20:51 GMT
Last-Modified: Tue, 31 Jan 2023 19:43:01 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 789b41f1f8027d4275a66ac9cb2f124d
c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79
e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Oswald:wght@400;500;700&family=Roboto:wght@400;500;700&display=swap
200 OK 19 kB URL HTTP/2 fonts.googleapis.com/css2?family=Oswald:wght@400;500;700&family=Roboto:wght@400;500;700&display=swap
IP
Hash d3954262ede7bd06f604d5ed17fcf21a
f260817e19a3aea98eb0e43b6dc5618acf5de6b1
80e01e8fc49c15b58f2cffb1d503844c6c2fa1abeebafb5166ba20d1c4104ed4
GET /css2?family=Oswald:wght@400;500;700&family=Roboto:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 Feb 2023 14:26:03 GMT
date: Wed, 01 Feb 2023 14:26:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 789b41f1f8027d4275a66ac9cb2f124d
c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79
e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fast.wistia.com/embed/medias/ddnaug5avj.jsonp
200 OK 1.6 kB URL HTTP/2 fast.wistia.com/embed/medias/ddnaug5avj.jsonp
IP
File type ASCII text, with very long lines (5069)
Hash 25fd19a1e787fd90421e16eebcd7f6b3
9e788151cdc2afa13c1d4ced11689479a7e7cb47
a78a6e2753f1d9fa39fc750115e334d6dfdec6ec9ebc657fcd94e807d16bb3e0
GET /embed/medias/ddnaug5avj.jsonp HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-encoding: br
content-type: application/javascript; charset=utf-8
etag: W/"5091b76cc464639ed9544033584cc1c3"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: fc6ce56101e1dd2c7dce57cb36d93da4
x-runtime: 0.048452
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:03 GMT
age: 4953
x-served-by: cache-iad-kjyo7100025-IAD, cache-bma1660-BMA
x-cache: HIT, MISS
x-cache-hits: 26, 0
x-timer: S1675261563.462971,VS0,VE91
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1628
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 22:02:00 GMT
expires: Mon, 29 Jan 2024 22:02:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 231843
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 789b41f1f8027d4275a66ac9cb2f124d
c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79
e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
shop.pe/widget/widget_async.js
301 Moved Permanently 178 B URL HTTP/2 shop.pe/widget/widget_async.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /widget/widget_async.js HTTP/1.1
Host: shop.pe
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: text/html
content-length: 178
location: https://d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
x-frame-options: deny
content-security-policy: frame-ancestors none;
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: no-referrer-when-downgrade
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CEIA9DRC77UDF971ARFG&lib=ttq
200 OK 1.3 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CEIA9DRC77UDF971ARFG&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2704)
Hash fe91de9b7867f3ffcc073677dbd3d86d
b75c4f52ab31510b5b95fa1bd448bd787d4934a5
f8be706843c31da413ae3e8c74a868fab40cf4d2e398cad8a7bbbcebf885c84d
GET /i18n/pixel/events.js?sdkid=CEIA9DRC77UDF971ARFG&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202302011426038756BFE42816A8032DD8
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb6d762dd76eaaf24a3f1d39c6cbdbf9bb04571a62b996503bee6003fb7e318f72fa5c38b3ffdf626a8efb43c751d16a62ebcf84cf5efe32f39110164d5f13be6761344c8e3d33b0200ce08e252d31aaa9e
content-encoding: gzip
expires: Wed, 01 Feb 2023 14:26:03 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 01 Feb 2023 14:26:03 GMT
content-length: 1322
x-cache: TCP_MISS from a95-101-10-124.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2L8nQpjoNcAPCVLmubKQg6h9cqN; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=1, origin; dur=96
x-origin-response-time: 96,95.101.10.124
x-akamai-request-id: 429827d5
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/images/favicon.ico
200 OK 4.2 kB URL HTTP/2 www.fighttinnitusnow.com/images/favicon.ico
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 4d6eb905337f0db00e14f9c6345a6b60
5d56675ad4128f12aa806dc9a568673442edfd33
40c57c53a8c3edc5f945ee72a700a0f12e57bc1f095e539ab55c6fa90b947ac9
GET /images/favicon.ico HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4; iTracker360=sou%3D1464%7Cmed%3DCPA%7Cter%3DHT%7Ccon%3Dw657hhjroklthmam2981dvaa%7Ccam%3DT911_1464%7Cref%3Dhttps%253A//www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php%253Futm_source%253D1464%2526utm_medium%253DCPA%2526utm_campaign%253DT911_1464%2526utm_term%253DHT%2526utm_content%253Dw657hhjroklthmam2981dvaa%2526oid%253D236%2526ustid%253Df2c832afbb604d9083fd4a97c0631978%7Cfirstlpurl%3Dhttps%253A//www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php%253Futm_source%253D1464%2526utm_medium%253DCPA%2526utm_campaign%253DT911_1464%2526utm_term%253DHT%2526utm_content%253Dw657hhjroklthmam2981dvaa%2526oid%253D236%2526ustid%253Df2c832afbb604d9083fd4a97c0631978%7Cgcl%3D%7Cmcl%3D%7Cfcl%3D%7Cgaclientid%3D%7Cfbp%3D%7Cfbc%3D%7Cleadsource%3D1464-cpa-t911_1464%7Cip%3D%7Ccustomfield1%3D-%7Ccustomfield2%3D-%7Ccustomfield3%3D-%7Ccustomfield4%3D-
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: image/x-icon
content-length: 4234
last-modified: Mon, 30 Jan 2023 08:27:21 GMT
cache-control: max-age=31536000, public
cache: HIT
x-cached-since: 2023-01-30T09:40:40+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 7d5c448dc1c22392117e0a48c4835833
9095eb42524537dd34795ac05fa773ba3e7e75ec
ccfd64b2c404a06302df3397f4c316a2d2184db37d1fbd59767d0fb7d89a5cc8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5870
Cache-Control: max-age=111288
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Etag: "63d96f45-2d7"
Expires: Thu, 02 Feb 2023 21:20:51 GMT
Last-Modified: Tue, 31 Jan 2023 19:43:01 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 727
analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
200 OK 70 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash 0ee951646422f4b1d0ba6bf1341c86e4
7c47b7ca2a0fe31278d5d46a15439bbaa73f5112
7468187adc69bb54e683428598fb1d15368c9a72cfee467fcd217e0a575f2a4c
GET /i18n/pixel/static/main.MWE2YWY2YTgzMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Cookie: _ttp=2L8nQpjoNcAPCVLmubKQg6h9cqN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175846C1594C909FD799AD743C
x-tt-trace-host: 01017a36535d16b01285413ef1c76fec440ee96c163840ba7b09f8be7849df9a3182eb32fd2dc99b4ee04181ce8ced2ac57f59ec3d3f4d224d1f2e04490b852e05195e15f26c44615f8c4113ead1bb47c8afe1f7083a2419bfe87288a4d0ddc6c0
content-encoding: gzip
content-length: 70494
date: Wed, 01 Feb 2023 14:26:03 GMT
x-cache: TCP_HIT from a95-101-10-124.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 4298282a
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 717cf52cfdc9e790ae36f7a4e1d19d16
03b71415f75565d67d059f1046fa363be72245e5
f76f4406c8796751e4b51ecff884ff3b3ea2bff4c60b6a8941d68b31951b4541
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2441
Cache-Control: max-age=134845
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Etag: "63d9d8af-1d7"
Expires: Fri, 03 Feb 2023 03:53:28 GMT
Last-Modified: Wed, 01 Feb 2023 03:12:47 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 01 Feb 2023 13:45:20 GMT
expires: Wed, 01 Feb 2023 15:45:20 GMT
cache-control: public, max-age=7200
age: 2443
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 5.9 kB IP
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BgWq5vheGkHvIJ5vtoOZZUzKCV3q7TpKOpDjTDg4GhEyOD8UEA9ZTsT397ZM1qZ7xi31KS9oA4U=
x-amz-request-id: DFSVPXDR1N04VF3G
date: Wed, 01 Feb 2023 14:15:10 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 654
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 8FIsDHnuZrUc2x+g/zET8GTOLciIkipqvdswAMeaHG7ceVofGay06PV8K/FKXMUYxFBckgvwJfNJxLnu0+VR0A==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1904183273
date: Wed, 01 Feb 2023 14:26:03 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 717cf52cfdc9e790ae36f7a4e1d19d16
03b71415f75565d67d059f1046fa363be72245e5
f76f4406c8796751e4b51ecff884ff3b3ea2bff4c60b6a8941d68b31951b4541
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2441
Cache-Control: max-age=134845
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Etag: "63d9d8af-1d7"
Expires: Fri, 03 Feb 2023 03:53:28 GMT
Last-Modified: Wed, 01 Feb 2023 03:12:47 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
200 OK 906 B URL HTTP/2 d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
IP
File type ASCII text, with very long lines (559)
Hash 2682a284b99b25508a523a1fe12a25e5
03b5b529b8bfa1f4b3393053527574e4327a5e96
7b6d0126f6368e2bdb5b03dfa7a3336821a0cdd1324bfb010167c35761c2615d
GET /widget/widget_async.js HTTP/1.1
Host: d3rr3d0n31t48m.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 906
last-modified: Mon, 30 Jan 2023 18:06:39 GMT
content-encoding: gzip
x-amz-meta-mtime: 1675101997.97
accept-ranges: bytes
server: AmazonS3
date: Wed, 01 Feb 2023 14:00:47 GMT
cache-control: max-age=3600, public
etag: "2682a284b99b25508a523a1fe12a25e5"
x-cache: Hit from cloudfront
via: 1.1 060df07995f24318e95556d506f04e12.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C1
x-amz-cf-id: aQpxhHpZu-DhZNDSvZKoZc0HL5Faxz8oiX4_7Kkwj8lERs2HvTAIsw==
age: 1522
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46e2bec06a11406d5cdcec9c0e76911d
edc777878dca7029c70577edae741264a22ab010
21f7443ebf888a28fb0f0010d1c83ca833b42c06f7d2c755f83a4b418de96854
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash e35cd3aeb48075134b13d5d593e609af
b967aced0b33616a54a9b7d5d3d092f28b9cca81
e25f7cb45c4d46dc9ebcf4cbe5209c87765cb94c15384780899eee7d888273e6
GET /i18n/pixel/static/identify_c4832.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Cookie: _ttp=2L8nQpjoNcAPCVLmubKQg6h9cqN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175825795F92399DF9E7BC6845
x-tt-trace-host: 01213c9428e1dc2e706424a5e4830ae2753a9403fe7ed2020932fc61a3c47c96784adda24a6c56428140d39df42ee71252f6133830581f45dad09e0f84f6c427e5570f8f5241c1349d3294ee56c52eab748dbda5cfd0ecad2a022e79233890d27b
content-encoding: gzip
date: Wed, 01 Feb 2023 14:26:03 GMT
content-length: 30930
x-cache: TCP_MEM_HIT from a95-101-10-124.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=1
x-akamai-request-id: 42982888
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/743880376/?random=1675261585581&cv=11&fst=1675261585581&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&tiba=Tinnitus%20911&auid=1792267354.1675261586&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/743880376/?random=1675261585581&cv=11&fst=1675261585581&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&tiba=Tinnitus%20911&auid=1792267354.1675261586&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2263), with no line terminators
Hash bd9e7c64a3c306bae9cd107779dc6a45
f93d998d76b5b6f4ffc15fc0577709998a07afd5
8a014064e23da492bddf42eee5fed985b91da20fba306fde0467b4e204a034c8
GET /pagead/viewthroughconversion/743880376/?random=1675261585581&cv=11&fst=1675261585581&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&tiba=Tinnitus%20911&auid=1792267354.1675261586&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 14:26:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1009
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 01-Feb-2023 14:41:03 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d3rr3d0n31t48m.cloudfront.net/widget/triggerRunner.js?v=c317b78
200 OK 3.8 kB URL HTTP/2 d3rr3d0n31t48m.cloudfront.net/widget/triggerRunner.js?v=c317b78
IP
File type ASCII text, with very long lines (583)
Hash f69f3a69b25884b652c4c43ed2e9986d
697d67faa68b72c64a63c55a9d2d288ccc4cbe45
beebf806085949d09a7a711735a4aa45c6a7cfe3a705551840672c9f79e8c0cb
GET /widget/triggerRunner.js?v=c317b78 HTTP/1.1
Host: d3rr3d0n31t48m.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 3772
date: Mon, 30 Jan 2023 18:07:14 GMT
last-modified: Mon, 30 Jan 2023 18:06:39 GMT
etag: "f69f3a69b25884b652c4c43ed2e9986d"
cache-control: max-age=2592000, public
content-encoding: gzip
x-amz-meta-mtime: 1675101997.96
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 060df07995f24318e95556d506f04e12.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C1
x-amz-cf-id: nT9zDWQ-V2EQ2FAIvD4cgDv0XngGeWUonyGWlrwR-tvc6MiN4HEThA==
age: 159530
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/css/styles.css?v=1.1
200 OK 4.5 kB URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/css/styles.css?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
Hash 86a4ed5302e3670f0b12a26c535258d9
b3a1377950e96a396b4b28c3f4f9b0c4e3ebb5ec
7462322a1125c53d538a1e5e041e00b49c6349d48e0088981dfab8435b9d6129
GET /vsl/med/v2_0_yt/css/styles.css?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: text/css
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=345600, public
cache: MISS
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a327176edf538c07784f9b0da660c22d
4a56cfcac291dfe1cc177bd3eff976f106731834
aae92a95f747be0bca6982ed7e3e58af8ac74ff69c799b55046ab38474e149dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d3rr3d0n31t48m.cloudfront.net/widget/widget.js?v=2085405
200 OK 48 kB URL HTTP/2 d3rr3d0n31t48m.cloudfront.net/widget/widget.js?v=2085405
IP
File type ASCII text, with very long lines (778)
Hash 42101fbe0e7e3c09f09ce5a8d939425e
a0e3af3f6850b83dca4e959b99abe80fc7cbdc23
495825e117d6e628c5c61d63ff44abb4ea2a03e5e57c5f86889017526846ae88
GET /widget/widget.js?v=2085405 HTTP/1.1
Host: d3rr3d0n31t48m.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 48092
date: Mon, 30 Jan 2023 18:07:14 GMT
last-modified: Mon, 30 Jan 2023 18:06:39 GMT
etag: "42101fbe0e7e3c09f09ce5a8d939425e"
cache-control: max-age=2592000, public
content-encoding: gzip
x-amz-meta-mtime: 1675101996.5
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 060df07995f24318e95556d506f04e12.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C1
x-amz-cf-id: wQDlhYmWdCU1vZ32pWkVY2B4zyvycA5HNp1AQsGBpJSeC0jjy4GlPw==
age: 159529
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/eHEZJuX3RYg
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/eHEZJuX3RYg
IP
Hash 9bfd0089e80e1df80b42e9127fd5eb15
02e9bd3c2a2ea478624196fa8d31b4358eac6d43
92c28b2d59040f90d23f9176338486501e847bade25c5a40d887e8dfdbf36adf
POST /s/gts1d4/eHEZJuX3RYg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b4c9a8ce96aa57d27a6bd55df00f08ac
180302ed4863fb5b22b45ab0cc7c770a12a8c63d
3707163ad693f536f95ed3331f045060ad51b12e95d55690d341a4a93e7f1d12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fast.wistia.com/assets/external/wistia-mux.js
200 OK 31 kB URL HTTP/2 fast.wistia.com/assets/external/wistia-mux.js
IP
File type ASCII text, with very long lines (65468)
Hash 28328fdccbc799365ef07b65a7205f52
f21354d9cd402a15a5f0a32d4f08762e0cfa9b8f
a03fcf9175dbd717914f64d48c742c58de0ec8213a44727314cc353c0f1cff14
GET /assets/external/wistia-mux.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63d2c5c4-7a35"
last-modified: Thu, 26 Jan 2023 18:26:12 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:04 GMT
age: 3227
x-served-by: cache-iad-kcgs7200128-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 41, 148
x-timer: S1675261564.000814,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 31285
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/743880376/?random=1675261585581&cv=11&fst=1675260000000&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&tiba=Tinnitus%20911&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3413368969&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/743880376/?random=1675261585581&cv=11&fst=1675260000000&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&tiba=Tinnitus%20911&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3413368969&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/743880376/?random=1675261585581&cv=11&fst=1675260000000&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&tiba=Tinnitus%20911&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3413368969&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 14:26:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
b-code.liadm.com/a-0817.min.js
200 OK 12 kB URL HTTP/2 b-code.liadm.com/a-0817.min.js
IP
Hash 4be07e351e77a6a18c0b716f8d166b40
e3a4135f6e07043565e57e0feb24398115f0d3a4
83aaaf6814c7d179a227162809c67aa8d9b99325134b7abcf258828234eb2a68
GET /a-0817.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 01 Feb 2023 02:46:52 GMT
cache-control: "public, max-age=86400"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uRDkt7vCQ0RCpIp94sX8w0v5pcXBov08DbKmRDLsQTa6_f1amE27Gg==
age: 41951
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7456
Expires: Wed, 01 Feb 2023 16:30:20 GMT
Date: Wed, 01 Feb 2023 14:26:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7456
Expires: Wed, 01 Feb 2023 16:30:20 GMT
Date: Wed, 01 Feb 2023 14:26:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7456
Expires: Wed, 01 Feb 2023 16:30:20 GMT
Date: Wed, 01 Feb 2023 14:26:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7456
Expires: Wed, 01 Feb 2023 16:30:20 GMT
Date: Wed, 01 Feb 2023 14:26:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78fe9a77211d6f9a462f625af0c6f9bc
ac0b58423d7578e7a1b60a62220c0a57924dda82
e047466c3ae0a55509f4ace49d0476f94271b5a25e71caa3b06ec468a238b652
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14041
x-amzn-requestid: 2be6655d-3b0e-4e65-b44b-11682610b640
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRGFpIAMFbMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-5554d18d5db235913afa77a2;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jJHVbOXepgkVHjuNJG9wPcMjDcGbAc-NIpv_KUECG6c-AnJZoIW0zg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:42:56 GMT
age: 60188
etag: "ac0b58423d7578e7a1b60a62220c0a57924dda82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e0bc98d03057dabba1334b62bea0975b
b358a8123908fe4b1c94a1273cac45c4e23b212e
10ef320ba825ca0e17d039b66fd2f321f4d2c687a8734d226fa25e9b45e109d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4bb3a6fba496d54cdbbccaf2b9600386
8e30002699e9fbf2047f9ac11a36d2175fc9c591
927bf3a04b011b4e3bc8d8772a3d5813507f7f523312d43627767b64615562f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pU_436f27nMZKPxZZWqZekERHFTvcG5NT5p_CYEXHRPtIWjDtSA-uA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:27:41 GMT
age: 25103
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 5b258f18228999a34880d18d77940263
fbb38bc63f18a8aa370060cd3369cbb5674bf6bd
9f88f9b1c499dafb6cd1d30b6804b9e9da17bb1a0940dc6aa8eb2709fc8f4306
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 01 Feb 2023 14:26:03 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 31 Jan 2023 21:23:03 GMT
Expires: Wed, 01 Feb 2023 21:23:03 GMT
ETag: "fbb38bc63f18a8aa370060cd3369cbb5674bf6bd"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec7e808a5e82552c46c3417a5b32b836
f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd
f16d982224dfeb0753eaf9d4eb87d80fd1111f682fd8fa36f3177aad5bf926a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6819
x-amzn-requestid: a0368695-4182-40bd-9a28-c50ae783a7a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRHGnoAMF0Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-624285eb16110b8c2360dec5;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: daAf58GNG6Oy-ov_8TUeXnTcvZyW5eL_qwWz7dapr2Sy_5XSiS-3Mw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:42:56 GMT
age: 60188
etag: "f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 02:29:58 GMT
age: 42966
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b4c9a8ce96aa57d27a6bd55df00f08ac
180302ed4863fb5b22b45ab0cc7c770a12a8c63d
3707163ad693f536f95ed3331f045060ad51b12e95d55690d341a4a93e7f1d12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 23db22ce2120fbb0ae6109e1a046062d
2068c8d9a5bc30a17be658e198e26c64a80703cf
f307ba6c4929d9f0c9354334b7baea878da379138489d9689bb777c4da308dab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: f466c962-7b12-4923-a4be-7ff9fce372a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaWFP_IAMF9wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-7a8c027d58f5b9132bb68a33;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XtqfgDxskGIUmZdRj2nrGDpo9KvECk528eLZV29xNx3h7CLOu49mnQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:42:19 GMT
age: 60225
etag: "2068c8d9a5bc30a17be658e198e26c64a80703cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 949
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Cookie: _ttp=2L8nQpjoNcAPCVLmubKQg6h9cqN
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202302011426038756BFE42816A8032DEA
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb6d762dd76eaaf24a3f1d39c6cbdbf9bb04571a62b996503bee6003fb7e318f72f7427ed318b16b3666b807ec61f4d919928929c2b6a37bf96d2836c38dd2ffc8d7463b7799cf2616bb9e2a603cc8c45bb
expires: Wed, 01 Feb 2023 14:26:04 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 01 Feb 2023 14:26:04 GMT
x-cache: TCP_MISS from a95-101-10-124.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=104, cdn-cache; desc=MISS, edge; dur=6, origin; dur=195
x-origin-response-time: 196,95.101.10.124
x-akamai-request-id: 42982895
X-Firefox-Spdy: h2
ip.itracker360.com/
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash e1202a1e126cc3dbdef5e9ee56e3154d
6a6607724f0bf01b571695902fb304aabd0448ad
fb545cfda0b8bba1fab58a18f6e98555313102050bdc7c54ccf4396401dc8619
GET / HTTP/1.1
Host: ip.itracker360.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache
content-type: text/plain
access-control-allow-origin: *
content-encoding: gzip
x-cloud-trace-context: 1465c77a36099b51912e19880289d7d7
vary: Accept-Encoding
date: Wed, 01 Feb 2023 14:26:04 GMT
server: Google Frontend
content-length: 32
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/engines/hls_video.js
200 OK 114 kB URL HTTP/2 fast.wistia.com/assets/external/engines/hls_video.js
IP
File type ASCII text, with very long lines (65469)
Size 114 kB (114519 bytes)
Hash 8b1898cc1548792036659e0a0c7900dc
8ac782abb31dd4a6d8f0ce4b327cf443296ca465
352cc21161c4159cbc44e391a6e374fe2c3ac640e2a811df6f9b2fe706cefd47
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63d2c5c4-1bf57"
last-modified: Thu, 26 Jan 2023 18:26:12 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:04 GMT
age: 3226
x-served-by: cache-iad-kiad7000086-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 15, 105
x-timer: S1675261564.160872,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 114519
X-Firefox-Spdy: h2
s.pinimg.com/ct/core.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1146), with no line terminators
Hash 91c4ea42bc7f1df938d8cd8de8d598db
ccecbe4405d83510ca1a6291c374ea8ab1da33d9
aacfea800a59766fdd3672fad8e5eba13abae2dab105014fc9214cb0c1409925
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "91c4ea42bc7f1df938d8cd8de8d598db"
content-type: application/javascript
fastly-restarts: 1
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=7200
date: Wed, 01 Feb 2023 14:26:04 GMT
content-length: 1146
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 101 kB IP
File type gzip compressed data, from Unix\012- data
Size 101 kB (100797 bytes)
Hash 199980f98f902381c7416e95b012a3f7
8e1bf60d51d957d4d750e9dc7993aa9ca6f3c866
93531145d22f66cad6a9a5540f7147fccc904b4920c49dfab2117f1b191c2d16
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4843
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:26:04 GMT
Last-Modified: Wed, 01 Feb 2023 13:05:21 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
fast.wistia.com/assets/images/blank.gif
200 OK 1.2 kB URL HTTP/2 fast.wistia.com/assets/images/blank.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=315360000, public
content-type: image/gif
etag: "63da6986-4be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 01 Feb 2023 13:30:46 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:04 GMT
age: 3228
x-served-by: cache-iad-kiad7000052-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 38, 115
x-timer: S1675261564.332293,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1214
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash add4f8c179f3ade6e33d4e7bd7e50ba5
f88ce65e8fe920bc8d4af7ca3cb45420c05847fe
cca5f504b2f673a2b27f38757b1feca5484b14304361b03fb981c6bbd44347ed
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 14:26:04 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 16:59:03 GMT
Expires: Tue, 07 Feb 2023 16:59:02 GMT
Etag: "f88ce65e8fe920bc8d4af7ca3cb45420c05847fe"
Cache-Control: max-age=526977,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 792b5c290caf0b69-OSL
s.yimg.com/wi/config/10189847.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10189847.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 100999fecd9566d917252f94a8aefe31
9e2771628a574b4d2d68949f405f6428628c9bf9
f8c50fe75a4ea842d8559c3988f4333fe98ec717c4c50f1c8c3a159a55db4d3d
GET /wi/config/10189847.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZhmjXWPoWFNw3KHAbtHMI1DMujeTtboD57fCeUcGc15ZRHU79YzlW6/+NC6onLUAl3Y2c76YcJw=
x-amz-request-id: WGNZD1G7TP8AYWC8
date: Wed, 01 Feb 2023 14:26:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 13 Oct 2022 22:00:29 GMT
x-amz-expiration: expiry-date="Sat, 18 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: 6DZTHZFTI95hlkWF52ulyM22ammupGDF
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
etag: "100999fecd9566d917252f94a8aefe31"
age: 2
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/ddnaug5avj.m3u8
200 OK 914 B URL HTTP/2 fast.wistia.com/embed/medias/ddnaug5avj.m3u8
IP
Hash 7e01cd68f193f9f0651734ff94fa6ac7
c133235ca8ee3a2bd9ead86f8ab2354ae0838268
3a0d9303beef5e3f6d4ea49d545269fec8e8c06f48884cb14079c743d93a0937
GET /embed/medias/ddnaug5avj.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-type: application/x-mpegURL
etag: W/"3a0d9303beef5e3f6d4ea49d545269fe"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: ce4154364673e9beffddb9fdd45779d8
x-runtime: 0.037046
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:04 GMT
age: 0
x-served-by: cache-iad-kiad7000100-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 1017, 1
x-timer: S1675261564.326940,VS0,VE91
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 914
X-Firefox-Spdy: h2
embed-fastly.wistia.com/deliveries/aa5639d96a14db035a65eb8786115ad719ffff74.m3u8
200 OK 3.2 kB URL HTTP/2 embed-fastly.wistia.com/deliveries/aa5639d96a14db035a65eb8786115ad719ffff74.m3u8
IP
Hash 3c4195508290facb48080a0ce1feb00b
71eb8b2dcedf259169b66caa9f85ebec359b8e3b
71f144154e85d00f0a3b48269c30884749c70f0a5ed319f66c902cdcf7db8402
GET /deliveries/aa5639d96a14db035a65eb8786115ad719ffff74.m3u8 HTTP/1.1
Host: embed-fastly.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
expires: Wed, 10 Jan 2024 20:01:31 GMT
cache-control: max-age=31536000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: aa5639d96a14db035a65eb8786115ad719ffff74-hls-segment 575be076c6a7044102ef1f308349eab3ff93cb5d
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:04 GMT
age: 1880673
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kjyo7100103-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 2727, 1
x-timer: S1675261564.494190,VS0,VE1
vary: Accept-Encoding
content-length: 3190
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1675261585759&aid=a-0817&se=e30&duid=1afbc895fcee--01gr6nya6yv47v3ear8t4f4120&tna=v2.6.0&pu=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&wpn=lc-bundle&c=PHRpdGxlPlRpbm5pdHVzIDkxMTwvdGl0bGU-PGgxPkZyZXF1ZW50bHkgQXNrZWQgUXVlc3Rpb25zPC9oMT48aDE-IExPVyBTVE9DSyBBTEVSVDwvaDE-
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1675261585759&aid=a-0817&se=e30&duid=1afbc895fcee--01gr6nya6yv47v3ear8t4f4120&tna=v2.6.0&pu=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&wpn=lc-bundle&c=PHRpdGxlPlRpbm5pdHVzIDkxMTwvdGl0bGU-PGgxPkZyZXF1ZW50bHkgQXNrZWQgUXVlc3Rpb25zPC9oMT48aDE-IExPVyBTVE9DSyBBTEVSVDwvaDE-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1675261585759&aid=a-0817&se=e30&duid=1afbc895fcee--01gr6nya6yv47v3ear8t4f4120&tna=v2.6.0&pu=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&wpn=lc-bundle&c=PHRpdGxlPlRpbm5pdHVzIDkxMTwvdGl0bGU-PGgxPkZyZXF1ZW50bHkgQXNrZWQgUXVlc3Rpb25zPC9oMT48aDE-IExPVyBTVE9DSyBBTEVSVDwvaDE- HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 01 Feb 2023 14:26:04 GMT
content-length: 0
trace-id: 8fa36ca0a88555eb
vary: Origin
location: /j?dtstmp=1675261585759&aid=a-0817&se=e30&duid=1afbc895fcee--01gr6nya6yv47v3ear8t4f4120&tna=v2.6.0&pu=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&wpn=lc-bundle&c=PHRpdGxlPlRpbm5pdHVzIDkxMTwvdGl0bGU-PGgxPkZyZXF1ZW50bHkgQXNrZWQgUXVlc3Rpb25zPC9oMT48aDE-IExPVyBTVE9DSyBBTEVSVDwvaDE-&n3pc=true
set-cookie: lidid=72d43f3e-4e32-4aef-8dbd-2b9151a19f78; Max-Age=63072000; Expires=Fri, 31 Jan 2025 14:26:04 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://www.fighttinnitusnow.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
embed-fastly.wistia.com/deliveries/c2dec67c72a9c9effeeac286ff2c6f9666174e2c.m3u8
200 OK 3.2 kB URL HTTP/2 embed-fastly.wistia.com/deliveries/c2dec67c72a9c9effeeac286ff2c6f9666174e2c.m3u8
IP
Hash 742856991d46f8d39bc048ce57be73ec
67b3413e6967e9bfbc6ffe1e7c6ed31552b70a29
779666bec7566f2568fee83b27d9e8e39070a9a70ec128c12af2a4fd18861ce3
GET /deliveries/c2dec67c72a9c9effeeac286ff2c6f9666174e2c.m3u8 HTTP/1.1
Host: embed-fastly.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
expires: Fri, 19 Jan 2024 06:00:52 GMT
cache-control: max-age=31536000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: c2dec67c72a9c9effeeac286ff2c6f9666174e2c-hls-segment 575be076c6a7044102ef1f308349eab3ff93cb5d
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:04 GMT
age: 1153512
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kiad7000021-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 4064, 1
x-timer: S1675261565.519025,VS0,VE8
vary: Accept-Encoding
content-length: 3201
X-Firefox-Spdy: h2
embed-fastly.wistia.com/deliveries/c2dec67c72a9c9effeeac286ff2c6f9666174e2c.m3u8/seg-1-v1-a1.ts
200 OK 524 kB URL HTTP/2 embed-fastly.wistia.com/deliveries/c2dec67c72a9c9effeeac286ff2c6f9666174e2c.m3u8/seg-1-v1-a1.ts
IP
File type MPEG transport stream data\012- data
Size 524 kB (523768 bytes)
Hash 626e6fadd3c130e17e2c6c0be9286939
a684ed72041deaab723d1b2dd05ca3c554a88228
c6fdf19a8871bca58539df6ed16b775de3069d9f25e7c35a89605b118b5bf93a
GET /deliveries/c2dec67c72a9c9effeeac286ff2c6f9666174e2c.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-fastly.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
expires: Sat, 30 Dec 2023 22:11:22 GMT
cache-control: max-age=31536000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: c2dec67c72a9c9effeeac286ff2c6f9666174e2c-hls-segment 575be076c6a7044102ef1f308349eab3ff93cb5d
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:04 GMT
age: 2823282
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kiad7000170-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 4296, 1
x-timer: S1675261565.560825,VS0,VE3
content-length: 523768
X-Firefox-Spdy: h2
app.truconversion.com/ti-js/15274/d6e80.js
200 OK 267 B URL HTTP/2 app.truconversion.com/ti-js/15274/d6e80.js
IP
File type ASCII text, with no line terminators
Hash 15bc6fc752293f78b89de696adfd2cd8
6c101c46a24fab67a45e3a9bf4e81f0beb42610f
3ea0ae12147c76e3b4e6ad26bfb580121295c8aa91480dee7b7e579dd00eb23d
GET /ti-js/15274/d6e80.js HTTP/1.1
Host: app.truconversion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:04 GMT
content-type: application/javascript
content-length: 267
last-modified: Wed, 01 Feb 2023 14:24:23 GMT
etag: "63da7617-10b"
expires: Wed, 01 Feb 2023 14:29:04 GMT
pragma: public
cache-control: max-age=180, public, stale-while-revalidate=10, stale-if-error=10
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self'; frame-src 'self' *.truconversion.com http: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: blob:; style-src 'self' 'unsafe-inline' http: https:; img-src http: https: data: blob:; connect-src wss://*.truconversion.com wss://*.intercom.io wss://*.appcues.net wss://*.wistia.com wss://*.crisp.chat http: https: data: blob:; font-src http: https: data: blob:; object-src http: https:; media-src http: https: data: blob:; form-action 'self' http://*.truconversion.com https://*.truconversion.com;
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
embed-ssl.wistia.com/deliveries/c8c3dbeca58f43902fadb4a9ec78bf70.webp?image_crop_resized=1280x720
200 OK 50 kB URL HTTP/2 embed-ssl.wistia.com/deliveries/c8c3dbeca58f43902fadb4a9ec78bf70.webp?image_crop_resized=1280x720
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0eb0210e035de7e91e49bb0368b65238
09c679ba57adf7d5fc88d0cc06f344736a1a91d0
f64e5b54017beb04c83adbc0d10f839d5011c6efddb457389873f093a0a45e21
GET /deliveries/c8c3dbeca58f43902fadb4a9ec78bf70.webp?image_crop_resized=1280x720 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
access-control-expose-headers: Origin, Content-Type, Accept, Server, x-amz-version-id, X-Cache
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: c8c3dbeca58f43902fadb4a9ec78bf70
last-modified: Tue, 09 Mar 2021 16:13:58 UTC
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:04 GMT
age: 2416773
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kiad7000057-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 727, 1
x-timer: S1675261565.747797,VS0,VE1
content-length: 50050
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8818b447df9f13aafd8ac90dceab64b2
ca1c848069db6f0076d5e2db3549f80adfaa2d8d
1ebc2f2f025d08decf5ccbe68f41430f825d5ce291eb29aec1d8f5b2df0879b1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=149247
Date: Wed, 01 Feb 2023 14:26:04 GMT
Etag: "63da0449-1d7"
Expires: Fri, 03 Feb 2023 07:53:31 GMT
Last-Modified: Wed, 01 Feb 2023 06:18:49 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pS5ot5eynBMlIrB1PFDPQotcHNDENnK0tjma4cueHVQOjm4lHMHcFQ==
Age: 5682
fg8vvsvnieiv3ej16jby.litix.io/
200 OK 0 B URL HTTP/1.1 fg8vvsvnieiv3ej16jby.litix.io/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: fg8vvsvnieiv3ej16jby.litix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fighttinnitusnow.com/
Content-Type: text/plain
Origin: https://www.fighttinnitusnow.com
Content-Length: 2387
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Methods: POST, GET
Access-Control-Allow-Origin: *
Date: Wed, 01 Feb 2023 14:26:04 GMT
Content-Length: 0
Connection: keep-alive
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 5b258f18228999a34880d18d77940263
fbb38bc63f18a8aa370060cd3369cbb5674bf6bd
9f88f9b1c499dafb6cd1d30b6804b9e9da17bb1a0940dc6aa8eb2709fc8f4306
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 01 Feb 2023 14:26:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 31 Jan 2023 21:23:03 GMT
Expires: Wed, 01 Feb 2023 21:23:03 GMT
ETag: "fbb38bc63f18a8aa370060cd3369cbb5674bf6bd"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.facebook.com/tr/?id=1893248017562670&ev=PageView&dl=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&rl=&if=false&ts=1675261585976&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675261585969.932859195&it=1675261585686&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1893248017562670&ev=PageView&dl=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&rl=&if=false&ts=1675261585976&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675261585969.932859195&it=1675261585686&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1893248017562670&ev=PageView&dl=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&rl=&if=false&ts=1675261585976&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675261585969.932859195&it=1675261585686&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 01 Feb 2023 14:26:06 GMT
X-Firefox-Spdy: h2
assets.privy.com/packs/js/755-086626e486c3e2950d93.js
200 OK 31 kB URL HTTP/2 assets.privy.com/packs/js/755-086626e486c3e2950d93.js
IP
File type ASCII text, with very long lines (65454)
Hash aeaeca64eb4868e3fdef879ecd12bcbd
c3c39b9503f957c6e69c28c4371efc4e87bb49d0
d6fb7496487612ec7939528598b2a3a3f04805b3d1d740bfa1464a08c8a88eb0
GET /packs/js/755-086626e486c3e2950d93.js HTTP/1.1
Host: assets.privy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:06 GMT
content-type: application/javascript
content-length: 31072
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 23:38:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 vegur, 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rEsx0bvjeu59mqUw5ahFiqzZnkOM8AbI9rmV36FHE5oKZS-vEEk8dA==
age: 6866
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 792b5c3899e0b50c-OSL
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1893248017562670&ev=Microdata&dl=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&rl=&if=false&ts=1675261587509&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Tinnitus%20911%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.95&r=stable&ec=1&o=30&fbp=fb.1.1675261585969.932859195&it=1675261585686&coo=false&es=automatic&tm=3&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1893248017562670&ev=Microdata&dl=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&rl=&if=false&ts=1675261587509&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Tinnitus%20911%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.95&r=stable&ec=1&o=30&fbp=fb.1.1675261585969.932859195&it=1675261585686&coo=false&es=automatic&tm=3&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1893248017562670&ev=Microdata&dl=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&rl=&if=false&ts=1675261587509&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Tinnitus%20911%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.95&r=stable&ec=1&o=30&fbp=fb.1.1675261585969.932859195&it=1675261585686&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 01 Feb 2023 14:26:06 GMT
X-Firefox-Spdy: h2
assets.privy.com/packs/js/908-000e1ac551df9d63c8a5.js
200 OK 12 kB URL HTTP/2 assets.privy.com/packs/js/908-000e1ac551df9d63c8a5.js
IP
File type ASCII text, with very long lines (39320)
Hash 50e022c30e2100c1269363c44b8d0bb2
12547cd6cf0113671a56bc9540cac74bc595699b
9357e6a8bcc9888776e6d6cc10761dd150dd33b924dbc813b689af643cdaf07a
GET /packs/js/908-000e1ac551df9d63c8a5.js HTTP/1.1
Host: assets.privy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:06 GMT
content-type: application/javascript
content-length: 12368
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 23:38:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 vegur, 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OgsUU2NcPS13zAcfoiE5BJ-lUkKVOpnJ-LS7DEqIPNNh1Y1dUsgdVQ==
age: 2386
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 792b5c3899e9b50c-OSL
X-Firefox-Spdy: h2
assets.privy.com/packs/js/864-f9538eba7e93bec99a2f.js
200 OK 6.2 kB URL HTTP/2 assets.privy.com/packs/js/864-f9538eba7e93bec99a2f.js
IP
File type ASCII text, with very long lines (19065)
Hash fe1fff527b526ae291a8ea87c76cd20b
f504d89393bfb72f2a8c76dd35b8f63732dfb7e5
3fe9bbda3170a3a1cd86ea31bd486e36328e17def97503673d6e7c59370216a9
GET /packs/js/864-f9538eba7e93bec99a2f.js HTTP/1.1
Host: assets.privy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:06 GMT
content-type: application/javascript
content-length: 6183
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 23:38:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 vegur, 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kqaiCPi1dOOK5klBmB8nKQrQa_dZjRX1QfImz9TmZJLqarkXIO_5kA==
age: 5986
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 792b5c3899eab50c-OSL
X-Firefox-Spdy: h2
assets.privy.com/packs/js/538-805fe981917f253d98ff.js
200 OK 32 kB URL HTTP/2 assets.privy.com/packs/js/538-805fe981917f253d98ff.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9aedb5a0de7912df2096150d85c272e8
1fd37d4d9abd8753832f2a9526de6fa12435199e
617ae752333a3eba3ee972958a78b6cdce2580d15cbdbf6622996341cf1370d1
GET /packs/js/538-805fe981917f253d98ff.js HTTP/1.1
Host: assets.privy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:06 GMT
content-type: application/javascript
content-length: 31843
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 23:38:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 vegur, 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: x5L8g3IFUmxsAjC9ZlCNi40Y9KKepJxQc6RwRTqCaOVwqnnhcaeoew==
age: 334
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 792b5c3899f0b50c-OSL
X-Firefox-Spdy: h2
assets.privy.com/packs/js/legacy_widget-82c58b253f70cfe8abb6.chunk.js
200 OK 29 kB URL HTTP/2 assets.privy.com/packs/js/legacy_widget-82c58b253f70cfe8abb6.chunk.js
IP
File type ASCII text, with very long lines (65438)
Hash b460c594a647488ae0335ccce1e73226
d46465f1375fe40fcb990bc00d70238fb18bdf96
e56a33d2a8a388a41d0a1b1e84a37a5d03bedd278eabc0cb6efb75a749d9d97d
GET /packs/js/legacy_widget-82c58b253f70cfe8abb6.chunk.js HTTP/1.1
Host: assets.privy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:06 GMT
content-type: application/javascript
content-length: 29074
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 23:38:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 vegur, 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OZF8AtL4UrQSWpD3k7Lv9yzZnKTTF7tjS9tULlTQhBCMLnUiwHIH8A==
age: 5987
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 792b5c38ba03b50c-OSL
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1675261585759&aid=a-0817&se=e30&duid=1afbc895fcee--01gr6nya6yv47v3ear8t4f4120&tna=v2.6.0&pu=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&wpn=lc-bundle&c=PHRpdGxlPlRpbm5pdHVzIDkxMTwvdGl0bGU-PGgxPkZyZXF1ZW50bHkgQXNrZWQgUXVlc3Rpb25zPC9oMT48aDE-IExPVyBTVE9DSyBBTEVSVDwvaDE-&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1675261585759&aid=a-0817&se=e30&duid=1afbc895fcee--01gr6nya6yv47v3ear8t4f4120&tna=v2.6.0&pu=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&wpn=lc-bundle&c=PHRpdGxlPlRpbm5pdHVzIDkxMTwvdGl0bGU-PGgxPkZyZXF1ZW50bHkgQXNrZWQgUXVlc3Rpb25zPC9oMT48aDE-IExPVyBTVE9DSyBBTEVSVDwvaDE-&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1675261585759&aid=a-0817&se=e30&duid=1afbc895fcee--01gr6nya6yv47v3ear8t4f4120&tna=v2.6.0&pu=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&wpn=lc-bundle&c=PHRpdGxlPlRpbm5pdHVzIDkxMTwvdGl0bGU-PGgxPkZyZXF1ZW50bHkgQXNrZWQgUXVlc3Rpb25zPC9oMT48aDE-IExPVyBTVE9DSyBBTEVSVDwvaDE-&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Referer: https://www.fighttinnitusnow.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:06 GMT
content-type: application/json
content-length: 13
trace-id: 4f86675eb999b28d
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: c22a48c4-0465-4dbc-ac8c-201026519523
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://www.fighttinnitusnow.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-71193211-1&cid=144038884.1675261586&jid=1481932686&gjid=828966774&_gid=636565410.1675261586&_u=IEBAAEAAAAAAACAAI~&z=569080608
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-71193211-1&cid=144038884.1675261586&jid=1481932686&gjid=828966774&_gid=636565410.1675261586&_u=IEBAAEAAAAAAACAAI~&z=569080608
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-71193211-1&cid=144038884.1675261586&jid=1481932686&gjid=828966774&_gid=636565410.1675261586&_u=IEBAAEAAAAAAACAAI~&z=569080608 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.fighttinnitusnow.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 01 Feb 2023 14:26:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.privy.com/assets/widget-f7bedc88f5d7f36c2240bbbfdd34b1550a86336a959c1e8553e5604b955bb2da.css
200 OK 25 kB URL HTTP/2 assets.privy.com/assets/widget-f7bedc88f5d7f36c2240bbbfdd34b1550a86336a959c1e8553e5604b955bb2da.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash db43c1feb1994f72d80c6f1f51e4290a
6cbaf880b040ff3b31c5dc3e14b72ffa596a5d1b
0e3d9b4d67e2165d3e7314fa0c922986fe90b7ec4dab7c6d340cf2745e255327
GET /assets/widget-f7bedc88f5d7f36c2240bbbfdd34b1550a86336a959c1e8553e5604b955bb2da.css HTTP/1.1
Host: assets.privy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:06 GMT
content-type: text/css
content-length: 25091
last-modified: Mon, 16 May 2022 16:06:38 GMT
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 vegur, 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GgHLKAqoEaM2IvPIY_6hSAA_-oOKDkBlqGP6II4fRKpIz-i6oqkqLg==
age: 5057
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 792b5c397b37b50c-OSL
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2001%20Feb%202023%2014%3A26%3A26%20GMT&n=0&b=Tinnitus%20911&.yp=10189847&f=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2001%20Feb%202023%2014%3A26%3A26%20GMT&n=0&b=Tinnitus%20911&.yp=10189847&f=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Wed%2C%2001%20Feb%202023%2014%3A26%3A26%20GMT&n=0&b=Tinnitus%20911&.yp=10189847&f=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:06 GMT
expires: Wed, 01 Feb 2023 14:26:06 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBH522mMCENDRUS0VVgw-hPUkHXeQTigFEgEBAQHH22PkYwAAAAAA_eMAAA&S=AQAAAjORHDXNtGyOpTaVywfLh9I; Expires=Thu, 1 Feb 2024 20:26:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2613221260852&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1675261588603&dep=2%2CPAGE_LOAD
200 OK 375 B URL HTTP/2 ct.pinterest.com/user/?tid=2613221260852&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1675261588603&dep=2%2CPAGE_LOAD
IP
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash f23754c0cabb23c00d00ec7cd0708b27
8b2826c766d44ba22ab77c66ba8b3389e3c1d482
1a26de1b3b0d3dbc8d54d94feeeb6ac92d05fbbe3132e2a2167caec156ac7796
GET /user/?tid=2613221260852&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1675261588603&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU1Ea3pNMlUyWWprdE9HSXpOaTAwWldKakxXRm1aakF0TXpNNU1XRTVNV1F4TXpNeg
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.fighttinnitusnow.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 375
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 5928322038788617
date: Wed, 01 Feb 2023 14:26:07 GMT
vary: Accept-Encoding
akamai-grn: 0.540a655f.1675261567.1c7579fd
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2613221260852&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1675261588605
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2613221260852&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1675261588605
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2613221260852&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1675261588605 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1788757671192699
date: Wed, 01 Feb 2023 14:26:07 GMT
akamai-grn: 0.540a655f.1675261567.1c7579fe
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613221260852&cb=1675261588604&dep=5%2CEVENT_TAGS_ABSENT
200 OK 375 B URL HTTP/2 ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613221260852&cb=1675261588604&dep=5%2CEVENT_TAGS_ABSENT
IP
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash f23754c0cabb23c00d00ec7cd0708b27
8b2826c766d44ba22ab77c66ba8b3389e3c1d482
1a26de1b3b0d3dbc8d54d94feeeb6ac92d05fbbe3132e2a2167caec156ac7796
GET /user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613221260852&cb=1675261588604&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVpHTTJNRGsxTUdZdE16ZGpNUzAwT1RJekxXRmpOVFl0WkdFM016SmxPRGxqWVRNMg
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.fighttinnitusnow.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 375
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 4077964084555771
date: Wed, 01 Feb 2023 14:26:07 GMT
vary: Accept-Encoding
akamai-grn: 0.540a655f.1675261567.1c757a01
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/playPauseLoadingControl.js
200 OK 16 kB URL HTTP/2 fast.wistia.com/assets/external/playPauseLoadingControl.js
IP
File type ASCII text, with very long lines (60297), with no line terminators
Hash 76b626b8d206bf49642305aa13f401a6
1607caa95745652db0647deaa9a02365c08bf6fd
9b474f09792c8a1bf01b2cca74f8b62deb7ac6c856921b458fafda8dcefc91f8
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63d2c5c4-3ea3"
last-modified: Thu, 26 Jan 2023 18:26:12 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:07 GMT
age: 3230
x-served-by: cache-iad-kcgs7200113-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 31, 192
x-timer: S1675261568.604152,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 16035
X-Firefox-Spdy: h2
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
content-length: 323
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 2847887415726217
date: Wed, 01 Feb 2023 14:26:07 GMT
vary: Accept-Encoding
akamai-grn: 0.540a655f.1675261567.1c757b02
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
api.privy.com/businesses/6A66DE61CFCCFFB30A608DC3/campaigns.json?s=j&l=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&user_uuid=7505806d-cc20-4ba3-a0a2-eb1f35ba6baf&fence=1
200 OK 29 kB URL HTTP/2 api.privy.com/businesses/6A66DE61CFCCFFB30A608DC3/campaigns.json?s=j&l=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&user_uuid=7505806d-cc20-4ba3-a0a2-eb1f35ba6baf&fence=1
IP
Hash 2f9bcde7f9b33801bae92bca62ab9773
ed15f6ca27478bf145e2718f47dba247e05868a8
de86ddd8965508bd8e49606ae45a3f227bce5b82f0e5ebaee1c99f3e2c1e2f08
GET /businesses/6A66DE61CFCCFFB30A608DC3/campaigns.json?s=j&l=https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978&user_uuid=7505806d-cc20-4ba3-a0a2-eb1f35ba6baf&fence=1 HTTP/1.1
Host: api.privy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:04 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
access-control-request-method: *
access-control-expose-headers: X-IPCountry, X-IPRegion, X-IPPostalCode
x-ipcountry: NO
x-ipregion: NO_
x-ippostalcode:
etag: W/"eb736b8bd293c89be4e4ecba349450d8"
cache-control: max-age=0, private, must-revalidate
x-request-id: ebc02b01-c9b5-4b71-91f1-4390eab973e9
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 vegur
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792b5c281ca6b509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash df7722286a2098f02efddf9426d6348d
d16f15ab1db3e2a28a35b893fb547fa133c39d86
08bfec86d108a6533fd146d543004f234678349da5ea8ea38c817cf7a72749d0
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127150
Date: Wed, 01 Feb 2023 14:26:07 GMT
Etag: "63d9abc0-1d7"
Expires: Fri, 03 Feb 2023 01:45:17 GMT
Last-Modified: Wed, 01 Feb 2023 00:01:04 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: R50xyN-z27auolFQBsUnv68KRJ4jfChTAUAJW5W4nytSJdRLwH-Vvw==
Age: 6253
shopper.shop.pe/input.js
200 OK 8.9 kB IP
File type ASCII text, with very long lines (17023)
Hash 277671bdc75ca43b2c48464d6ab4278f
fa3f6cfe3a34a0586917b256c7d5b8f9b4c1a205
cb280dde0bd7b5868891421254e239ef63551cc351cb246a68e9bc69bd4e0e8e
GET /input.js HTTP/1.1
Host: shopper.shop.pe
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdt_3IfGHqMBpGmFZSfdmszUtc6bC089FamNqlsUQ_zDr-qO2FIZ1NCuh_7qAq159zyVlSIOGjns35j-U87gF-nBoA
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1667301507739079
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 8877
content-encoding: gzip
x-goog-hash: crc32c=d2ag2w==, md5=J3ZxvcdcpDssSEZNarQnjw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 8877
access-control-allow-origin: *
access-control-expose-headers: Access-Control-Allow-Origin
server: UploadServer
date: Wed, 01 Feb 2023 11:16:02 GMT
expires: Wed, 01 Feb 2023 15:16:02 GMT
cache-control: public, max-age=14400
age: 11406
last-modified: Tue, 01 Nov 2022 11:18:27 GMT
etag: "277671bdc75ca43b2c48464d6ab4278f"
content-type: application/javascript; charset=utf-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
distillery.wistia.com/x
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1694
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 01 Feb 2023 14:26:08 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
200 OK 2 B URL HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/x-www-form-urlencoded
Content-Length: 7088
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:08 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c644a73d518a8a2348eb5b434842e6ce
3ea3d6025c17f60713ec37e8c4ddc02eba5128e3
5d113be969619c442c2b4b048990d9756efce76dda98148d2832ae6893d8f17b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171851
Date: Wed, 01 Feb 2023 14:26:08 GMT
Etag: "63da6dce-1d7"
Expires: Fri, 03 Feb 2023 14:10:19 GMT
Last-Modified: Wed, 01 Feb 2023 13:49:02 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: roZwPJ-rlOSfWq_8FAFzUV_Y3hk8ZMkanEwoU8vWuZqe1-UCGQoNeA==
Age: 1277
addshoppers.s3.amazonaws.com/customize/62fe5281eaf45204d3e94240/6ff721a381644a81a3e4d5240ac68c35.js?_t=1674574271
200 OK 448 B URL HTTP/1.1 addshoppers.s3.amazonaws.com/customize/62fe5281eaf45204d3e94240/6ff721a381644a81a3e4d5240ac68c35.js?_t=1674574271
IP
File type ASCII text, with very long lines (765), with no line terminators
Hash b1ff7b3d2adfc40edb94cf14422013bf
a23b0249eba7889b58ce84bd31c5ffeaa715ba58
fd82d798ccde9e0df926d737f69f7b2f3cde3ac3edb1ed525cb7b0c4ebcc214e
GET /customize/62fe5281eaf45204d3e94240/6ff721a381644a81a3e4d5240ac68c35.js?_t=1674574271 HTTP/1.1
Host: addshoppers.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: PnApkbSupmhO4pq1heajDlJ7dILwRgI6yu2daUM73F2sUtkui48+587cOwcW+fGhE9TMpRu4BM0=
x-amz-request-id: FEK0BP19XP29Y8DT
Date: Wed, 01 Feb 2023 14:26:09 GMT
Last-Modified: Tue, 24 Jan 2023 15:31:12 GMT
ETag: "b1ff7b3d2adfc40edb94cf14422013bf"
Cache-Control: max-age=2592000, public
Content-Encoding: gzip
x-amz-version-id: osAiULbIusRY.Zh1q2WJnCrAcpyv6qKv
Accept-Ranges: bytes
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Length: 448
ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613221260852&cb=1675261589429&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU1Ea3pNMlUyWWprdE9HSXpOaTAwWldKakxXRm1aakF0TXpNNU1XRTVNV1F4TXpNeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613221260852&cb=1675261589429&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU1Ea3pNMlUyWWprdE9HSXpOaTAwWldKakxXRm1aakF0TXpNNU1XRTVNV1F4TXpNeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613221260852&cb=1675261589429&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU1Ea3pNMlUyWWprdE9HSXpOaTAwWldKakxXRm1aakF0TXpNNU1XRTVNV1F4TXpNeg%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.fighttinnitusnow.com%2Fvsl%2Fmed%2Fv2_0_yt%2Fvideo.php%3Futm_source%3D1464%26utm_medium%3DCPA%26utm_campaign%3DT911_1464%26utm_term%3DHT%26utm_content%3Dw657hhjroklthmam2981dvaa%26oid%3D236%26ustid%3Df2c832afbb604d9083fd4a97c0631978%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22f6304d83%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 4
referrer-policy: origin
x-pinterest-rid: 2748329364046424
date: Wed, 01 Feb 2023 14:26:08 GMT
set-cookie: _pinterest_ct_ua="TWc9PSZPb09zVitxUVBkN05kdmFVMDdzL0ljVXFVWTU3M2UrVHVWRnlFNjVOaWI4SGF6OW92L3hMdFNIL2h0Sjdnb2Y4bUR4QUJubTFRUEdzNTFGblZFYVltYnB1c2ozSDN1ZjFCMDcxZVlhQ0RNVT0mV2doRTRkODhPTkM0ZlJ6VHFwUFFBSTU2azQ4PQ=="; Expires=Thu, 01 Feb 2024 14:26:08 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
akamai-grn: 0.540a655f.1675261568.1c757c9c
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/allIntegrations.js
200 OK 5.6 kB URL HTTP/2 fast.wistia.com/assets/external/allIntegrations.js
IP
File type ASCII text, with very long lines (21637), with no line terminators
Hash 98d8f1350f159ef9d630464f2677623c
ee33382759ec18abebe452fb065599627d729114
0bcc59bc6540d08234fceefb99483c915ced9406d7b30173817cb18553c462b3
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63d2c5c4-15f7"
last-modified: Thu, 26 Jan 2023 18:26:12 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 14:26:08 GMT
age: 3231
x-served-by: cache-iad-kiad7000146-IAD, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 109, 86
x-timer: S1675261569.616303,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 5623
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 227c2f3a3f4503ca66ffed1fa4a4b39a
d4a57406d5c5083f76eb99d1ef59f56cf3b39d64
aa6bc3c9d8284934dc3676cce4139455e9d71ce388bca913ee570e18a0883091
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=144675
Date: Wed, 01 Feb 2023 14:26:08 GMT
Etag: "63d9fead-1d7"
Expires: Fri, 03 Feb 2023 06:37:23 GMT
Last-Modified: Wed, 01 Feb 2023 05:54:53 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9v0YlHHtet6aEcDD4qT9OmDkS55m6o91fyHcV4nc4QmLWWx7ZFiS3g==
Age: 2550
nytrng.com/iframe?vcp=4dd5h0np&as_id=6800a992d95f4801a52d047135c8a3d2
200 OK 423 B URL HTTP/2 nytrng.com/iframe?vcp=4dd5h0np&as_id=6800a992d95f4801a52d047135c8a3d2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (423), with no line terminators
Hash 33da2879a006d2eb704523d9eea3075c
b6acda5818ddf1208cbaa5c39105ab55dd7f4ebe
4a923b5566113de56581aa0a028e032ef44a4119cd9dd7cad9c7f7181321cf06
GET /iframe?vcp=4dd5h0np&as_id=6800a992d95f4801a52d047135c8a3d2 HTTP/1.1
Host: nytrng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:09 GMT
content-type: text/html; charset=utf-8
content-length: 423
server: gunicorn
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 222d48b46cdf9b1ba9fcd0a6e24ad5af
edc3c77c381a1d4b985b0d5cfe79a58072a00247
55be43e4e439be23eee81d76b3f2958b9098f78c302382561d87f3b92ab42bd3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103544
Date: Wed, 01 Feb 2023 14:26:09 GMT
Etag: "63d95e6a-1d7"
Expires: Thu, 02 Feb 2023 19:11:53 GMT
Last-Modified: Tue, 31 Jan 2023 18:31:06 GMT
Server: ECS (dcb/7F15)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hQ6GYwGFVLiEH-JC9QBcKFNmkeOqNpfD-bBdxr_BPFbJaQrzhTuhNQ==
Age: 2447
cdn.nytrng.com/pl.2.2.min.js
200 OK 0 B URL HTTP/2 cdn.nytrng.com/pl.2.2.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pl.2.2.min.js HTTP/1.1
Host: cdn.nytrng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nytrng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/plain
content-length: 0
date: Sat, 14 Jan 2023 01:24:22 GMT
last-modified: Wed, 31 Jul 2019 16:57:19 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E_ObE68RiwiJ2CaexxP5MjV_mRsDfpNt6hEOddcnW7cQ1ZcDHvPssg==
age: 1602107
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/sound.svg
200 OK 0 B URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/images/sound.svg
IP
ASN #58286 Electric-IT Business S.R.L.
GET /vsl/med/v2_0_yt/images/sound.svg HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/css/app_new.css?v=1.1
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4; iTracker360=sou%3D1464%7Cmed%3DCPA%7Cter%3DHT%7Ccon%3Dw657hhjroklthmam2981dvaa%7Ccam%3DT911_1464%7Cref%3Dhttps%253A//www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php%253Futm_source%253D1464%2526utm_medium%253DCPA%2526utm_campaign%253DT911_1464%2526utm_term%253DHT%2526utm_content%253Dw657hhjroklthmam2981dvaa%2526oid%253D236%2526ustid%253Df2c832afbb604d9083fd4a97c0631978%7Cfirstlpurl%3Dhttps%253A//www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php%253Futm_source%253D1464%2526utm_medium%253DCPA%2526utm_campaign%253DT911_1464%2526utm_term%253DHT%2526utm_content%253Dw657hhjroklthmam2981dvaa%2526oid%253D236%2526ustid%253Df2c832afbb604d9083fd4a97c0631978%7Cgcl%3D%7Cmcl%3D%7Cfcl%3D%7Cgaclientid%3D%7Cfbp%3D%7Cfbc%3D%7Cleadsource%3D1464-cpa-t911_1464%7Cip%3D%7Ccustomfield1%3D-%7Ccustomfield2%3D-%7Ccustomfield3%3D-%7Ccustomfield4%3D-; _gcl_au=1.1.1792267354.1675261586; _li_dcdm_c=.fighttinnitusnow.com; _lc2_fpi=1afbc895fcee--01gr6nya6yv47v3ear8t4f4120; _ga=GA1.2.144038884.1675261586; _gid=GA1.2.636565410.1675261586; _gat=1; _tt_enable_cookie=1; _ttp=QhZaJ6ofT0kS4UrrTAxINSpvWr_; _privy_6A66DE61CFCCFFB30A608DC3=%7B%22uuid%22%3A%227505806d-cc20-4ba3-a0a2-eb1f35ba6baf%22%7D; _fbp=fb.1.1675261585969.932859195
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:04 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=31536000, public
cache: MISS
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
events.privy.com/v2/collect
200 OK 0 B URL HTTP/2 events.privy.com/v2/collect
IP
POST /v2/collect HTTP/1.1
Host: events.privy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 343
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:26:07 GMT
content-type: text/html
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
access-control-request-method: *
cache-control: no-cache
x-request-id: 8375a047-1eb2-4d8d-a0f6-e83ec8c69bd6
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 vegur
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792b5c397e51b509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
app.shop.pe/app/datapartners/status?usersite_id=62fe5281eaf45204d3e94240
200 OK 0 B URL HTTP/2 app.shop.pe/app/datapartners/status?usersite_id=62fe5281eaf45204d3e94240
IP
GET /app/datapartners/status?usersite_id=62fe5281eaf45204d3e94240 HTTP/1.1
Host: app.shop.pe
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fighttinnitusnow.com
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:08 GMT
content-type: application/json; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type, X-XSRFToken
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PATCH
p3p: policyref="/w3c/p3p.xml", CP="CAO PSA OUR"
etag: W/"0467ba22658b680d6de72dc567071b5bc495547f"
set-cookie: _xsrf=2|9ba8d5a1|9c644827f1015d8e1c861c62aca41337|1675261568; Path=/
x-frame-options: deny
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d2ieqaiwehnqqp.cloudfront.net/td38c8aed344364811190ba39629368e4.js
200 OK 0 B URL HTTP/2 d2ieqaiwehnqqp.cloudfront.net/td38c8aed344364811190ba39629368e4.js
IP
GET /td38c8aed344364811190ba39629368e4.js HTTP/1.1
Host: d2ieqaiwehnqqp.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 23 Aug 2022 17:17:42 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 01 Feb 2023 14:26:03 GMT
etag: W/"346818dfa0bf961b9380f56aa57d8ab1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y4ghownpIEQ2-BGhkxa3Dp7jET3ibkrWRKtCAQuaH_JvjvcU2MxerQ==
age: 36879
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
200 OK 0 B URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
IP
ASN #58286 Electric-IT Business S.R.L.
GET /vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4; path=/
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache, no-store, must-revalidate
pragma: no-cache, no-cache
expires: Thu, 19 Nov 1981 08:52:00 GMT, 0
cache: MISS
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/css/app_new.css?v=1.1
200 OK 0 B URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/css/app_new.css?v=1.1
IP
ASN #58286 Electric-IT Business S.R.L.
GET /vsl/med/v2_0_yt/css/app_new.css?v=1.1 HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/video.php?utm_source=1464&utm_medium=CPA&utm_campaign=T911_1464&utm_term=HT&utm_content=w657hhjroklthmam2981dvaa&oid=236&ustid=f2c832afbb604d9083fd4a97c0631978
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: text/css
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=345600, public
cache: MISS
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
www.fighttinnitusnow.com/vsl/med/v2_0_yt/fonts/plusjakarta.css
200 OK 0 B URL HTTP/2 www.fighttinnitusnow.com/vsl/med/v2_0_yt/fonts/plusjakarta.css
IP
ASN #58286 Electric-IT Business S.R.L.
GET /vsl/med/v2_0_yt/fonts/plusjakarta.css HTTP/1.1
Host: www.fighttinnitusnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fighttinnitusnow.com/vsl/med/v2_0_yt/css/styles.css?v=1.1
Cookie: PHPSESSID=t191si2gkm8hd56jkjq66ml3c4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:26:03 GMT
content-type: text/css
last-modified: Wed, 01 Feb 2023 14:22:31 GMT
cache-control: max-age=345600, public
cache: MISS
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
18.184.38.55
142.250.74.40
151.101.84.84
212.82.100.181
104.18.20.226
23.36.76.226
93.184.220.29
185.244.209.62