r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c7a8ba48383a0e56baca8c8c41b81a04
b04c1f1e730a71f17ff639c9db697c532d4e5421
7860552382285e6eddddc5226c6f6400caa3f6fc3cb4b8a2d550c6fc653f78bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7860552382285E6EDDDDC5226C6F6400CAA3F6FC3CB4B8A2D550C6FC653F78BB"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4159
Expires: Tue, 08 Nov 2022 05:25:11 GMT
Date: Tue, 08 Nov 2022 04:15:52 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9fd081ea88e8b8563986b3e558496d21
60700393dce5eb42c0db0d5feef340f4832e3c65
d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1935
Cache-Control: max-age=110861
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:52 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 11:03:33 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d8c32b2fb818533a5b3fe5c69157bde9
93594fd3fc50d9d444c28660eabba1edbe4f0588
df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6096
Expires: Tue, 08 Nov 2022 05:57:28 GMT
Date: Tue, 08 Nov 2022 04:15:52 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hz2MWA08xaX4yZpm47vfoOAv2vL3AAig6S9eQjtdYP7Bo0aTr8/LtkGnwoIdO0q7Rh0HPU3jUgM=
x-amz-request-id: DQBZFD27JVVQW23T
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 08 Nov 2022 03:48:21 GMT
age: 1651
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 08 Nov 2022 04:15:52 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e6f4643306be10417c47176a6e67306f
940a13818904add9e1cacd12610f37ba1efd7bc5
67e51095b5da59b3eeda8a28c81789e69064a0a19a93347c2fcb05fd4b21e6d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5031
Cache-Control: max-age=108884
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:53 GMT
Etag: "6368caa6-1d7"
Expires: Wed, 09 Nov 2022 10:30:37 GMT
Last-Modified: Mon, 07 Nov 2022 09:06:46 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
lifeday.club/ZlJkMnhBWWVvbGJGVWxsY1BmdXZwRklSYjdPYlp1ZDlVcVl0eW5ILzVpMHd6cU1xYW5aL0ZkYXBwYXU4V2ZsU1JxOUNXZFVYeGVEdlBNR3FKSitzdEE9PQ__
302 Found 163 B URL HTTP/1.1 lifeday.club/ZlJkMnhBWWVvbGJGVWxsY1BmdXZwRklSYjdPYlp1ZDlVcVl0eW5ILzVpMHd6cU1xYW5aL0ZkYXBwYXU4V2ZsU1JxOUNXZFVYeGVEdlBNR3FKSitzdEE9PQ__
IP
ASN #198432 Ipcore Datacenters S.L
File type HTML document, ASCII text, with no line terminators
Hash 12f9b624d99d45656640c5f0fec799a5
749b1d1cadf459042f7d93d33f69ce74be9ab7a1
fa2359745066ef5d6e2a823ef0952ebcab8353c162150d8d5084b01434e03183
Analyzer Verdict Alert fortinet Phishing
GET /ZlJkMnhBWWVvbGJGVWxsY1BmdXZwRklSYjdPYlp1ZDlVcVl0eW5ILzVpMHd6cU1xYW5aL0ZkYXBwYXU4V2ZsU1JxOUNXZFVYeGVEdlBNR3FKSitzdEE9PQ__ HTTP/1.1
Host: lifeday.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 08 Nov 2022 04:15:52 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
X-Powered-By: PHP/7.1.33
Location: https://www.tulatrades.com/6NP2CC7/X9BX7X8/?creative_id=13725&sub1=1&sub2=7137_11&sub3=46_211114_309_380681_md
Content-Length: 163
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3IU0WS35hsuMpU0/FoC8Jg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: obPHDsL34+5MdB58zQxXf2W2bk8=
ocsp.sectigo.com/
200 OK 472 B IP
Hash 3f18a8ba1237049eae38cb0bc663c475
1e103aaf505e143924faa56ce6c86fb1eec8d6b1
81a0f72468564cae852b833d422ae2bf479e707f1c99b410d2342f1abe67ea49
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 08 Nov 2022 04:15:53 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 07 Nov 2022 02:19:44 GMT
Expires: Mon, 14 Nov 2022 02:19:43 GMT
Etag: "1e103aaf505e143924faa56ce6c86fb1eec8d6b1"
Cache-Control: max-age=510829,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 766b7d76ac180afa-OSL
www.tulatrades.com/6NP2CC7/X9BX7X8/?creative_id=13725&sub1=1&sub2=7137_11&sub3=46_211114_309_380681_md
302 Found 264 B URL HTTP/1.1 www.tulatrades.com/6NP2CC7/X9BX7X8/?creative_id=13725&sub1=1&sub2=7137_11&sub3=46_211114_309_380681_md
IP
ASN #61317 Ipxo Uk Limited
File type HTML document, ASCII text
Hash 4bf8eb50c88eb5325f2f558c73e2a667
254887ea3f60ad76860a7a2fc7229df752b2644a
a64c2434feecd59fcbd33e93272f3c0f9f68f385449de13f8ff51c3db2d51356
GET /6NP2CC7/X9BX7X8/?creative_id=13725&sub1=1&sub2=7137_11&sub3=46_211114_309_380681_md HTTP/1.1
Host: www.tulatrades.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 08 Nov 2022 04:15:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 264
Location: https://www.tulatrades.com/6NP2CC7/X8FXBNB/?__rpt=0&__po=14847&__ptid=6e253a46f49d4194917d8cfb0a541fa8&__rpa=1&__rc=1&sub1=1&sub2=7137_11&sub3=46_211114_309_380681_md&sub4=&sub5=&source_id=&__pcd=9
Set-Cookie: uniqueClick_X9BX7X8=83208aed-1000-4fcb-b6c7-2bee59cec27e:1667880953; Path=/; Expires=Thu, 08 Dec 2022 04:15:53 GMT; SameSite=None
Vary: Origin
X-Eflow-Request-Id: b9c1587e-9cc2-40a4-907c-15991dead057
www.tulatrades.com/6NP2CC7/X8FXBNB/?__rpt=0&__po=14847&__ptid=6e253a46f49d4194917d8cfb0a541fa8&__rpa=1&__rc=1&sub1=1&sub2=7137_11&sub3=46_211114_309_380681_md&sub4=&sub5=&source_id=&__pcd=9
302 Found 299 B URL HTTP/1.1 www.tulatrades.com/6NP2CC7/X8FXBNB/?__rpt=0&__po=14847&__ptid=6e253a46f49d4194917d8cfb0a541fa8&__rpa=1&__rc=1&sub1=1&sub2=7137_11&sub3=46_211114_309_380681_md&sub4=&sub5=&source_id=&__pcd=9
IP
ASN #61317 Ipxo Uk Limited
File type HTML document, ASCII text
Hash bea99460d970a7f31931498a6061cc4e
880cf244061018ab279b8af381ebace7a6561d39
381c21d01e81a171f8c8401b0e7ee48268a9b47404476198e4a0fca64ed7339a
GET /6NP2CC7/X8FXBNB/?__rpt=0&__po=14847&__ptid=6e253a46f49d4194917d8cfb0a541fa8&__rpa=1&__rc=1&sub1=1&sub2=7137_11&sub3=46_211114_309_380681_md&sub4=&sub5=&source_id=&__pcd=9 HTTP/1.1
Host: www.tulatrades.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 08 Nov 2022 04:15:54 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 299
Location: https://fungustherapypro.com/?widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518
Set-Cookie: uniqueClick_X8FXBNB=66c56af3-49fe-419a-bb4d-a667747aaa28:1667880954; Path=/; Expires=Thu, 08 Dec 2022 04:15:54 GMT; SameSite=None
transaction_id=ccb1bf7bab4f481da69b3bcbc53d8f05; Path=/; Expires=Mon, 06 Feb 2023 04:15:54 GMT; SameSite=None
Vary: Origin
X-Eflow-Request-Id: 5613bf99-f4f6-437f-b2c4-44274b88fa76
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7ed7036078433f02c4f2d7ca923505cc
90c50698d50e0e76049017d95640ed5e7059f1f7
fb3b9f076d582991a976727bef3b24fd3657339e48260014cffa2c2791c0ee6e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FB3B9F076D582991A976727BEF3B24FD3657339E48260014CFFA2C2791C0EE6E"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 08 Nov 2022 10:15:54 GMT
Date: Tue, 08 Nov 2022 04:15:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4599ea4ab89bca0461dfc4e86cf90610
d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a
6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7486
Expires: Tue, 08 Nov 2022 06:20:40 GMT
Date: Tue, 08 Nov 2022 04:15:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4599ea4ab89bca0461dfc4e86cf90610
d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a
6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7486
Expires: Tue, 08 Nov 2022 06:20:40 GMT
Date: Tue, 08 Nov 2022 04:15:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4599ea4ab89bca0461dfc4e86cf90610
d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a
6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7486
Expires: Tue, 08 Nov 2022 06:20:40 GMT
Date: Tue, 08 Nov 2022 04:15:54 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b64fcd58491917edfc8ffb57c1382cd0
edf97aab58dacd11fa52924b1382c2bf1ede5e55
a2c60a2f7780085b4643ab7f521fb6c858ca72c3170e6f3acd2250b9c3b14cc5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12662
x-amzn-requestid: edaa58fb-c3eb-4af0-ad32-be8c7cf14421
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKLHSBoAMFsxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a40-4c35cd455ff7a829756eeb56;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7FjjrCP8dJDZrk38J0SqWxN2Ya4O3-hcO_uW5ULwOQTREh4-MU_szA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:01 GMT
age: 23753
etag: "edf97aab58dacd11fa52924b1382c2bf1ede5e55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7772848f-5e9d-4c88-8eda-7a1da08adeda.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7772848f-5e9d-4c88-8eda-7a1da08adeda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 622de189afa4ff7e67653ba9adcaebac
72ce138ed60bc1986442fafe59083f01ab4ddc28
bdc6c1f647405ab258a490c3bfc7525e958c9dcb426f6ca20fc44e77bab09707
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7772848f-5e9d-4c88-8eda-7a1da08adeda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13818
x-amzn-requestid: fa564f18-0399-4715-b6e5-99c2c8be7938
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bM83vGwHoAMFRSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636841ca-3e0d62c17d479cdc7d2acb16;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 23:22:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: odwJ56DtBB_kGVPEUjdYlY3Qejm7eHRtPKVmFGuGqkn2Iw0XmTOwag==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 11:44:00 GMT
age: 59514
etag: "72ce138ed60bc1986442fafe59083f01ab4ddc28"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde9b751e-0e32-4ea5-900c-3462f6158d52.jpeg
200 OK 3.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde9b751e-0e32-4ea5-900c-3462f6158d52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 72231937a3dcac7e725011cda50e6a5e
13e766c1e33f7d880985a52ad2b8c9a90b63551e
3e5bd9710e41ceff548e4f08a0aacc4ef2f4d790c307b2ab87f38c6ecd72447f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde9b751e-0e32-4ea5-900c-3462f6158d52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3227
x-amzn-requestid: bfacf4b1-4364-476a-958b-3d3d461fcedc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQALBHzYIAMFg9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a46-5d8c327759b3b17f0ff22c2f;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:06 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p0MOUwClrulAvPHnCT105dlm3ToeJTZ8MuEz2R8rSsFtD33-3gFSYQ==
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:42:41 GMT
age: 23593
etag: "13e766c1e33f7d880985a52ad2b8c9a90b63551e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f82801-6f26-493e-9038-7e48dff62c0b.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f82801-6f26-493e-9038-7e48dff62c0b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a141cbda515c166225f5b3b8314dcd03
26f7bacb597a67119bb763d1d03a81a5222a2c91
b375f0cf094cd89cbd52ab013df87f76181a8023715f1ed8b1fe4a20d44f5579
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f82801-6f26-493e-9038-7e48dff62c0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12525
x-amzn-requestid: 0b15f964-6154-44ce-a537-4c8402e387c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bHRLCFBpoAMFsMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6365fbe0-177041f7562907be268f5a10;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 06:00:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bWLlArevalY-MpKc8DlT38lwNyHhY8omPAbeGu7kys1QjBwMe-t2IQ==
via: 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 00:41:33 GMT
age: 12861
etag: "26f7bacb597a67119bb763d1d03a81a5222a2c91"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: C7GYpM3mXSf0hVyGO9Zzlxa3IHXHdyPlXsvr3i0GoQnaPZF6lO-OwA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 06:28:00 GMT
age: 78474
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f590111-905a-44a3-861d-b8905ff72231.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f590111-905a-44a3-861d-b8905ff72231.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8c1ed79376a3bf9dfc9713189c36039
26ef76be8b675a4eeaf5ee428ee56d1a1181c6af
45f6891db04614dd3309e7951b90fafdac07e57e1932ebda66c852d6f9b65e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f590111-905a-44a3-861d-b8905ff72231.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10719
x-amzn-requestid: 04634220-90c5-403b-a531-c0a984379b33
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKNGK0IAMFxrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a41-543f03665ed83c4e63c47c7b;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LTQmBemUPmWSCxl0h3fQagTJ4MWll9KF_j-hWP9M4WvVikdImmwj-Q==
via: 1.1 7f06047c304d80ea094816a27c933914.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:01 GMT
age: 23753
etag: "26ef76be8b675a4eeaf5ee428ee56d1a1181c6af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css
200 OK 10 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css
IP
File type ASCII text, with very long lines (59158)
Hash 77c1af627ac0cf4a26f1f230c3328544
f99817795a5ae027a7212b040438e49248a483b6
0496a11101ffd6d8230b041623cc1bf58971b25acd684a23fe91d702c486d2c8
GET /ajax/libs/font-awesome/5.15.3/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:54 GMT
content-type: text/css; charset=utf-8
content-length: 10480
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60510736-e7d0"
last-modified: Tue, 16 Mar 2021 19:29:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 988758
expires: Sun, 29 Oct 2023 04:15:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gCYQmwC5D5ndBYKP044xCnTfDHB7ZWRILx8PHIfowA2Htyata37R3uLu%2Fps9dTl9YhzZHfHJvftB1CGVRZgZDBgvp9V6e4yWniXHSFMdlUvkPIaBcJxACDfW9BZHVbpYNp4fdo1z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 766b7d800c690b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 27 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 77bd61b98f7b67af56639229724f8dd4
f04f07dd8ff53e58c32b738f81b71a014bca441d
8ce54c3b77bf31899b27b29188ff4936b580f2bd2b3222d43dda2851ba272e24
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 27433
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1538f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2270381
expires: Sun, 29 Oct 2023 04:15:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n6PNpo6Q%2BqQeDqn3HVIZ47Z5C0RHSHbrIW6o3U2rv875DK1gXj1Z23t%2F8CDqKaSKZyrrBI1ZaVNkVV4SqmP9SAXu0xm3uTEy8zCpFOMik7xhMavuOOyh5ggvuEfwJqgz2%2F%2BYT%2Bdx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 766b7d801ad3b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/moment.js/2.20.1/moment-with-locales.min.js
200 OK 52 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/moment.js/2.20.1/moment-with-locales.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b59ccb7a8706be03f5567910340c987e
f92610db428e47c7654d1d23eee78896f22520b8
9e33fc8dc5449ce08d61d12405ad1ed2d9a1662ba3f8128a2ddea66998984472
GET /ajax/libs/moment.js/2.20.1/moment-with-locales.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 52012
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f26-4c8c5"
last-modified: Mon, 04 May 2020 16:13:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 13321248
expires: Sun, 29 Oct 2023 04:15:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CpottRjXmluD1ttRLvpzhAtXjg9wQeqZu4%2BOmlLjIxSpDw%2FaDwYCFPYW9NWu24ZjaWmo50giJeRdNiBA2FYt13u0rh1Yl8jz%2FUmKyX9SB5MHGFpHaK0FFlOr%2BN7xE5iP1LIDu9s%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 766b7d802ad6b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
browser.sentry-cdn.com/6.17.4/bundle.min.js
200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/6.17.4/bundle.min.js
IP
File type ASCII text, with very long lines (64556)
Hash 456782718f10c0d95baf1a859662a1e9
ed821b6fff07ce3882c70771d1409728516a2995
cc835658a5d6fa4d21247c24307e6f75154a3d80ca1e798cfe08e4fa1493b5dc
GET /6.17.4/bundle.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 11 Oct 2023 04:39:12 GMT
last-modified: Wed, 02 Feb 2022 15:42:58 GMT
etag: "456782718f10c0d95baf1a859662a1e9"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Tue, 08 Nov 2022 04:15:54 GMT
age: 2417802
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20491
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 96791bd486db22c41012d25318835bdf
b32c813f16b84a6b2660bd527843da5e368af8eb
61a4589c35910af9f8d20ff0c7eca296a77a336ab00730573fe9ce7cf2cc72c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advproduct10.jpg
200 OK 39 kB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advproduct10.jpg
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced\012- data
Hash 7a39ba2849e4b4b5f0105fc4593262a8
559364aa88f888471564e7d916f91c9233ae32e0
28b8d2cf833204c9df2cc8d006627c81c0b493f548d91dd424fb7588aa0daa71
GET /assets/products/60080db43a5305412b311b22/advproduct10.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:54 GMT
content-type: image/jpeg
content-length: 39151
last-modified: Tue, 08 Feb 2022 10:41:53 GMT
etag: "620248f1-98ef"
access-control-allow-origin: *
x-accel-expires: @1667925597
server: CDN77-Turbo
x-77-nzt: AblMCQ008Tv/HaMAAA
x-77-nzt-ray: fffffffff06082e9fad76963b19ec638
x-cache: HIT
x-age: 41757
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/firebasejs/5.5.3/firebase-app.js
200 OK 12 kB URL HTTP/2 www.gstatic.com/firebasejs/5.5.3/firebase-app.js
IP
File type ASCII text, with very long lines (34802)
Hash 85e24b6246c780bf9d5fc6cc1f2d79a9
a3f6f593f14e735289627a0e753eb5f248da8ef5
ac51df4ea72ed05c6eaba63cedf926a95f681967d7f52c1134d49fc836fdc890
GET /firebasejs/5.5.3/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 12419
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 05 Nov 2022 13:24:57 GMT
expires: Sun, 05 Nov 2023 13:24:57 GMT
cache-control: public, max-age=31536000
age: 226257
last-modified: Thu, 04 Oct 2018 21:56:42 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta3/dist/css/bootstrap.min.css
200 OK 23 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta3/dist/css/bootstrap.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65300)
Hash 77493e970187bd6e1f81ee54f45d97b1
67d66426912a003e54930e46f07c869076a482e4
ac37e1c6843d58febd8e1b631f4f1951d873ff06299c9ec7a625c252cd2782d7
GET /npm/bootstrap@5.0.0-beta3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.0.0-beta3
x-jsd-version-type: version
etag: W/"25cfb-UcVSpq1X1XvRNJScPVMSiB9RqJM"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 08 Nov 2022 04:15:54 GMT
age: 16747123
x-served-by: cache-fra19150-FRA, cache-bma1674-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22890
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta3/dist/js/bootstrap.bundle.min.js
200 OK 22 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta3/dist/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65293)
Hash 554dbd9e1c9c2c5adbd542d9eda126b6
63e19edf81d2d6724343f19f468f49cf66f85c27
b1a35f0fa90ee45f3aaf4da4abeb9780594217315e77d579f21aebc326778981
GET /npm/bootstrap@5.0.0-beta3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.0-beta3
x-jsd-version-type: version
etag: W/"13a2b-LayF+MVECCdqC/PP+pHf1O96P1E"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 08 Nov 2022 04:15:54 GMT
age: 15052555
x-served-by: cache-fra19177-FRA, cache-bma1674-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22361
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/5.5.3/firebase-messaging.js
200 OK 10 kB URL HTTP/2 www.gstatic.com/firebasejs/5.5.3/firebase-messaging.js
IP
File type ASCII text, with very long lines (35625)
Hash 4cdcb53c426bb5434c8907f88bea516c
c01a12f3e57b77c354200ddb6d6e6fe198156d5d
82cc6b49cc703ee9309d207d1cb34fb1b7118f17549fb6b8e2a437e24df57891
GET /firebasejs/5.5.3/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10045
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 06 Nov 2022 00:48:41 GMT
expires: Mon, 06 Nov 2023 00:48:41 GMT
cache-control: public, max-age=31536000
age: 185233
last-modified: Thu, 04 Oct 2018 21:56:42 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 3e932fdc8d916b13b129950436e2625a
60e96035ae16f9b92c533eafaa4bbc09bb0a9d26
7792cf8551d6fdc440bcea0e535c15f08b4e0a4c61817eb86e4e97d83133555d
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 08 Nov 2022 04:15:55 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "7BE077E1FC403D2EC742F83DEC6B110C71304468"
Expires: Tue, 08 Nov 2022 15:00:00 GMT
Last-Modified: Tue, 08 Nov 2022 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 140
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b7d80df8a1c12-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.widitrade.com/assets/products/60080db43a5305412b311b22/sitelogopositive.png
200 OK 5.2 kB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/sitelogopositive.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 214 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash f150b7669143ee6e723bdcc24185e663
6257d73488cd79ffecab4ca54be609d917a8811d
801078ef6b69e61a24f022f0f0003d09b4573c780fd24d7bd9f7e70f16fc28d3
GET /assets/products/60080db43a5305412b311b22/sitelogopositive.png HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/png
content-length: 5203
last-modified: Thu, 21 Jan 2021 12:48:48 GMT
etag: "60097830-1453"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ2En9qh
x-77-nzt-ray: fffffffff06082e9fad769635552de38
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 96791bd486db22c41012d25318835bdf
b32c813f16b84a6b2660bd527843da5e368af8eb
61a4589c35910af9f8d20ff0c7eca296a77a336ab00730573fe9ce7cf2cc72c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d6dbaa7f1a697305cfaabdc859cdb9d3
680fa363852fb33b9b76b83d3ba5c0a4c51499cb
2ccc20d4d484d91da7e9fb07056d62a620af07b21f495be49f54e7e83c988dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner15.jpg
200 OK 40 kB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner15.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 730x400, components 3\012- data
Hash 51221aa968551d2cbbaf5372244da53a
6476c267678d59de5ce19482fa488e86c99eece5
7a2a5ae11b22f718bb03f732ef95f312e42ba64433c8ecb925e0875c93190eaf
GET /assets/products/60080db43a5305412b311b22/advbanner15.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 39954
last-modified: Wed, 26 May 2021 11:35:33 GMT
etag: "60ae3285-9c12"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ2Uzp3B
x-77-nzt-ray: fffffffff06082e9fad76963e5552639
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner16.jpg
200 OK 48 kB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner16.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 730x400, components 3\012- data
Hash 1df72da8ec4c68fe422bb979277988bb
5c89596fc815deea2d859b38fb63da6cdeed986a
a608d54c03d3db033f8a234a70df5aa40c8b137671abf74ec091c7596826fe08
GET /assets/products/60080db43a5305412b311b22/advbanner16.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 48256
last-modified: Wed, 26 May 2021 11:35:38 GMT
etag: "60ae328a-bc80"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ3M58qh
x-77-nzt-ray: fffffffff06082e9fad7696392152039
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 4bd9629b844183e2ef31818af5e417fb
4065ae376bdc91e4b9a8d3c2cf937da6d146f5ed
656ec49e14350ce03478a8c5959274d5dfa2b34720c3362f4c95b98f165fdd3d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 08 Nov 2022 04:15:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 07 Nov 2022 23:43:13 GMT
Expires: Tue, 08 Nov 2022 23:43:13 GMT
ETag: "4065ae376bdc91e4b9a8d3c2cf937da6d146f5ed"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner18.jpg
200 OK 50 kB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner18.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 730x400, components 3\012- data
Hash fd103391bd2f4cf93bfd4e96969385ee
1b147dec613fba097ab05e624bdd19d0263982e5
908aeb22d996ad3c6e421b120de5c23b6ca1ce401648041d7d23e901478075c9
GET /assets/products/60080db43a5305412b311b22/advbanner18.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 50263
last-modified: Wed, 26 May 2021 11:35:56 GMT
etag: "60ae329c-c457"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ2e+Sah
x-77-nzt-ray: fffffffff06082e9fad769637e062a39
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner13.jpg
200 OK 30 kB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner13.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 730x400, components 3\012- data
Hash fd06e354142c1822ca0169458350e3bd
1aa5c0d35c114d0b06b0692b37db11b6234311a5
47016d90c38b069e8cf73981d94acd72e77a9f4f339fb889fe9f28fbadaec259
GET /assets/products/60080db43a5305412b311b22/advbanner13.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 29504
last-modified: Tue, 08 Feb 2022 10:42:43 GMT
etag: "62024923-7340"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ2w1xyh
x-77-nzt-ray: fffffffff06082e9fad7696376ade438
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap
200 OK 93 kB URL HTTP/2 fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap
IP
Hash 75470934655780c4accc0d1f61f47f4a
57d55066ae8a30d2cfb010d8d3471d0b0c477f01
d12c1d9544194f9285724915351f4b1743b7a48affea3705f7f024e4c26726f8
GET /css2?family=Open+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 08 Nov 2022 04:15:54 GMT
date: Tue, 08 Nov 2022 04:15:54 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner17.jpg
200 OK 318 kB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner17.jpg
IP
ASN #60068 Datacamp Limited
File type PNG image data, 730 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size 318 kB (318033 bytes)
Hash 89392edfbd6ed185a2249f02e87ab310
6dc9ba501c4c92c50f5d9bf496a9f0518c9af977
b0ce98fde48c66a59100c1a6766c182ac775121a02cae803ca82435a0f8d405b
GET /assets/products/60080db43a5305412b311b22/advbanner17.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 318033
last-modified: Wed, 26 May 2021 11:35:43 GMT
etag: "60ae328f-4da51"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ2hkcOh
x-77-nzt-ray: fffffffff06082e9fad769638622e838
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
images.dmca.com/Badges/dmca-badge-w200-5x1-11.png?ID=4101905d-7905-4245-a2bd-441eab099281
200 OK 5.4 kB URL HTTP/2 images.dmca.com/Badges/dmca-badge-w200-5x1-11.png?ID=4101905d-7905-4245-a2bd-441eab099281
IP
File type PNG image data, 200 x 40, 8-bit/color RGBA, interlaced\012- data
Hash 41a7bb1c6ea3df49204a0a17f224c27a
5f29043d3feb00ecde67c4e3dc0100a2aad57d35
08f0be3149fb34d24c91045b25de9d1e40844b9d69ad195e4b2b586c5c8e173a
GET /Badges/dmca-badge-w200-5x1-11.png?ID=4101905d-7905-4245-a2bd-441eab099281 HTTP/1.1
Host: images.dmca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/png
content-length: 5392
cache-control: max-age=2592000
etag: "9ff923aace6d11:0"
last-modified: Mon, 25 Jul 2016 19:39:16 GMT
x-powered-by: ASP.NET
expires: Thu, 08 Dec 2022 04:15:55 GMT
access-control-allow-origin: *
link: <http://dmca-images.azurewebsites.net/Badges/dmca-badge-w200-5x1-11.png>; rel="canonical"
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 78196
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "60510736-13174"
last-modified: Tue, 16 Mar 2021 19:29:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5697191
expires: Sun, 29 Oct 2023 04:15:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nZq1PVmgyQlEEDlBGfBWeadH3E5%2Bhc3XXNp6WO7noIZdbezkVPLqHCtxJO2jF%2B2XT3EvCTMt%2BeXLjFhEo73UwEMtVp1fFrCRduf3KqKMQmCtkrOuTqKE1uxcnWKylZc79%2FZVHX19"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 766b7d81ed170b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d6dbaa7f1a697305cfaabdc859cdb9d3
680fa363852fb33b9b76b83d3ba5c0a4c51499cb
2ccc20d4d484d91da7e9fb07056d62a620af07b21f495be49f54e7e83c988dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Nov 2022 18:59:14 GMT
expires: Tue, 07 Nov 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 33401
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Nov 2022 05:42:51 GMT
expires: Fri, 03 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 426784
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner12.jpg
200 OK 181 kB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner12.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2015:10:26 18:13:42], baseline, precision 8, 800x600, components 3\012- data
Size 181 kB (181108 bytes)
Hash 6f96682a7464d7c0198170d4e13cfa38
508a6051e67ef984795cf02005e859a9ab19b649
49363f8135ca40bdc30b57761ab834c6627ba74a6959e8a3993484d476857661
GET /assets/products/60080db43a5305412b311b22/advbanner12.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 181108
last-modified: Wed, 26 May 2021 11:35:19 GMT
etag: "60ae3277-2c374"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ3JtrOh
x-77-nzt-ray: fffffffff06082e9fad76963516ee638
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner10.jpg
200 OK 269 kB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner10.jpg
IP
ASN #60068 Datacamp Limited
File type PNG image data, 730 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size 269 kB (269144 bytes)
Hash 5558d101b8ecba2ad1a44e909f7b0f01
126ab5452ae3d82992940bb1e030bfadb341876f
cd682b7ff5d3ccca695c025271def07bdf1355d694eb9359777a3981be37dbab
GET /assets/products/60080db43a5305412b311b22/advbanner10.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 269144
last-modified: Wed, 26 May 2021 11:35:09 GMT
etag: "60ae326d-41b58"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ0iNIrB
x-77-nzt-ray: fffffffff06082e9fad769632d85db38
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d9e23a9bac6355d898d29c56c76a7b00
7cb358d9beb843c88c86b5c642a06ea5f5130229
e65a19ba171586388a4c1260cd602e4938f4a0de1fbe4cb622976d11a0615954
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1935
Cache-Control: max-age=96097
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Etag: "6368a4cd-1d7"
Expires: Wed, 09 Nov 2022 06:57:32 GMT
Last-Modified: Mon, 07 Nov 2022 06:25:17 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a9374206851834987bb6f42fdbde6965
1e7632ba7b83a2258cb88662d2fb2783d400dec3
854af7f8daaf516b72c709bf1c9e6ba2637431efac48d977c520440cb3b99dca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 08 Nov 2022 02:41:09 GMT
expires: Tue, 08 Nov 2022 04:41:09 GMT
cache-control: public, max-age=7200
age: 5686
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a9374206851834987bb6f42fdbde6965
1e7632ba7b83a2258cb88662d2fb2783d400dec3
854af7f8daaf516b72c709bf1c9e6ba2637431efac48d977c520440cb3b99dca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a9374206851834987bb6f42fdbde6965
1e7632ba7b83a2258cb88662d2fb2783d400dec3
854af7f8daaf516b72c709bf1c9e6ba2637431efac48d977c520440cb3b99dca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.pinimg.com/ct/core.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1146), with no line terminators
Hash f9c79b23daa8ae207e3bc134a0eae5da
d76970cf0e9f4d0719cecd7b73b1239cf54369ae
4b379cdc7c6862ed1a6dbd90416cf073517c8fdd936691b90ceb077c57605eaf
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "f9c79b23daa8ae207e3bc134a0eae5da"
content-type: application/javascript
fastly-restarts: 1
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=7200
date: Tue, 08 Nov 2022 04:15:55 GMT
content-length: 1146
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 0ac10debd3a9ea8147a26d045bb93e6e
ff45f3442508e8695f2303701682ebdb6e016464
5dee7b453b2c72c07ff1d62432493a044507835a8031ea62edf2fa7cc26219b9
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: dSFgXALKa3cNiYHcF6aW9y6DbKC13VgFgHH3rohb5ax1b9r4UVAedTvIAZxNn9nOTZohx6AOmZmk94/fk05U6g==
priority: u=3,i
content-length: 27337
x-fb-trip-id: 1904183273
date: Tue, 08 Nov 2022 04:15:55 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash babb0d09b27851a7c080c2843211eb91
cf41327a7f5a83c8343e85741bc34cb53050449a
adc4ea8ee48fd9337d951234bd345899ddb116cad409265ee2cf01733ac82e84
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11376
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=1CBD47D7E7D864B00D225581E68F658B; domain=.bing.com; expires=Sun, 03-Dec-2023 04:15:55 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 952EBDE169B74B97B5F2CACBB05B7822 Ref B: OSL30EDGE0406 Ref C: 2022-11-08T04:15:55Z
date: Tue, 08 Nov 2022 04:15:55 GMT
X-Firefox-Spdy: h2
fungustherapypro.com/iframe-gtm2/
200 OK 2.0 kB URL HTTP/2 fungustherapypro.com/iframe-gtm2/
IP
ASN #15699 OGIC Informatica S.L.
Hash 030893f40c1f627c213b7e9958664875
4a2d95fb1b8964b4f65f3a21f8519b57a0b09620
929b526cbdd5450efb0c328f0a4f8f027d7b525fc14751d8de73c9e973ffc347
GET /iframe-gtm2/ HTTP/1.1
Host: fungustherapypro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/?widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518
Cookie: PHPSESSID=da1d3d5b62f6e01f527691fa5694a6cb; wtrd_pp=5fbcde29073d32f495e563ca; wtrd_click=6369d7fa19ece756fb66061b
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Tue, 08 Nov 2022 04:15:55 GMT
content-security-policy: frame-ancestors *
strict-transport-security: max-age=15768000
content-encoding: gzip
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/652536324/?random=1667880952638&cv=11&fst=1667880952638&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&auid=707405398.1667880953&rfmt=3&fmt=4
200 OK 999 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/652536324/?random=1667880952638&cv=11&fst=1667880952638&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&auid=707405398.1667880953&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2291), with no line terminators
Hash a13f5ed7d67eb7919a5ae169bd8ed721
85668c4f42031d5ddfccff4dc6b719d42992c3f3
9d75639cba22addd68d167d28dd820023a49a12f5c7781a81b6f4dfdb2ec4517
GET /pagead/viewthroughconversion/652536324/?random=1667880952638&cv=11&fst=1667880952638&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&auid=707405398.1667880953&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 04:15:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 999
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 08-Nov-2022 04:30:55 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d9e23a9bac6355d898d29c56c76a7b00
7cb358d9beb843c88c86b5c642a06ea5f5130229
e65a19ba171586388a4c1260cd602e4938f4a0de1fbe4cb622976d11a0615954
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1935
Cache-Control: max-age=96097
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Etag: "6368a4cd-1d7"
Expires: Wed, 09 Nov 2022 06:57:32 GMT
Last-Modified: Mon, 07 Nov 2022 06:25:17 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 2abf9cdbe96c4901134fe131d611c122
bcaeca829c12e00f4265771bdd42f12ceb7d5fe4
3c35bde576d69c2ad6f7d100df130d2152b973a45c2c2eccf0216ea1ed85dc0a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4608
Cache-Control: max-age=169309
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:55 GMT
Etag: "6369b858-1d7"
Expires: Thu, 10 Nov 2022 03:17:44 GMT
Last-Modified: Tue, 08 Nov 2022 02:00:56 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a9374206851834987bb6f42fdbde6965
1e7632ba7b83a2258cb88662d2fb2783d400dec3
854af7f8daaf516b72c709bf1c9e6ba2637431efac48d977c520440cb3b99dca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner11.jpg
200 OK 4.8 MB URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner11.jpg
IP
ASN #60068 Datacamp Limited
File type GIF image data, version 89a, 730 x 400\012- data
Size 4.8 MB (4750395 bytes)
Hash f317a37e17ec8c966883b7e66b967d13
4e50603585a29cb3aad64736b3e94c1f6c164965
c8735b02244fdb6ed3095896eb8c8e71172f46730dcfaba84723d02b7bc3801d
GET /assets/products/60080db43a5305412b311b22/advbanner11.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 4750395
last-modified: Wed, 26 May 2021 11:35:14 GMT
etag: "60ae3272-487c3b"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ3dvm6h
x-77-nzt-ray: fffffffff06082e9fad7696345aee038
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
buttons-config.sharethis.com/js/5c62beeb7056550011c49dca.js
200 OK 997 B URL HTTP/2 buttons-config.sharethis.com/js/5c62beeb7056550011c49dca.js
IP
File type ASCII text, with very long lines (997), with no line terminators
Hash 65f8f6b647f1fbcf9cd8eef88a7e692d
3576b910c99be7e568836da0c80e69399d8a488e
f4277f9e50a728c3d8fbd418f825fd974400d65658b6d7069cc0f6456198989b
GET /js/5c62beeb7056550011c49dca.js HTTP/1.1
Host: buttons-config.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 997
last-modified: Wed, 22 Sep 2021 12:41:52 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 08 Nov 2022 04:15:56 GMT
cache-control: public, max-age=60
etag: "65f8f6b647f1fbcf9cd8eef88a7e692d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3vxbnoM1EPRthy5APQjT7Nbl8udzQsRI3xUwZo894xJrPW80S72eQQ==
age: 52
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=142003544&tm=gtm002&Ver=2&mid=4043003b-59a9-4b97-a7a9-380e0805a297&sid=0917a1305f1c11edbb230feb2cd5047f&vid=091787b05f1c11ed9ab1054a1595a829&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Fungus%20Therapy%20Pro&p=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&r=<=3206&evt=pageLoad&sv=1&rn=299647
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=142003544&tm=gtm002&Ver=2&mid=4043003b-59a9-4b97-a7a9-380e0805a297&sid=0917a1305f1c11edbb230feb2cd5047f&vid=091787b05f1c11ed9ab1054a1595a829&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Fungus%20Therapy%20Pro&p=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&r=<=3206&evt=pageLoad&sv=1&rn=299647
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=142003544&tm=gtm002&Ver=2&mid=4043003b-59a9-4b97-a7a9-380e0805a297&sid=0917a1305f1c11edbb230feb2cd5047f&vid=091787b05f1c11ed9ab1054a1595a829&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Fungus%20Therapy%20Pro&p=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&r=<=3206&evt=pageLoad&sv=1&rn=299647 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=231481B7AAD8623526BB93E1AB8F63C8; domain=.bing.com; expires=Sun, 03-Dec-2023 04:15:56 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A47171C9EB8B46EF9633DEF892E2D385 Ref B: OSL30EDGE0406 Ref C: 2022-11-08T04:15:56Z
date: Tue, 08 Nov 2022 04:15:56 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/142003544.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/142003544.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/142003544.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=14ABB3311E8E661B2C60A1671FD9678F; domain=.bing.com; expires=Sun, 03-Dec-2023 04:15:56 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B36B3B28BF6447DEBF0E0F9F441FED5A Ref B: OSL30EDGE0406 Ref C: 2022-11-08T04:15:56Z
date: Tue, 08 Nov 2022 04:15:56 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 01c1a1367e530a799bcaee7de89eefee
19d2450df87f1f3bb1c94e6e0bafbd60c7aead00
79cce6506b30bd3c699a700851db3254c2b909e559c54408b7d254b8e50003e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3549d49ec9ef3b66f2f3da1f6172ef93
54fa67ac88099ed2d4cdf7e24c8b301c7a098d0b
0af6a29f343dcbc612e18ab821ae8555975e27c363d72205366a3c5bb85b7211
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 01c1a1367e530a799bcaee7de89eefee
19d2450df87f1f3bb1c94e6e0bafbd60c7aead00
79cce6506b30bd3c699a700851db3254c2b909e559c54408b7d254b8e50003e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 87 kB IP
File type gzip compressed data, from Unix\012- data
Hash 7dbcf22e78716d58b0d446d31be56b38
ed992015d2593d385c72a3b51cf53a902f17fdad
b050c83d2ae7b353f6e36212c46349bdfb8de78a882f3597ca1f57c41b837e1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 01c1a1367e530a799bcaee7de89eefee
19d2450df87f1f3bb1c94e6e0bafbd60c7aead00
79cce6506b30bd3c699a700851db3254c2b909e559c54408b7d254b8e50003e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.widitrade.com/favicon.ico
200 OK 990 B URL HTTP/2 cdn.widitrade.com/favicon.ico
IP
ASN #60068 Datacamp Limited
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 97a1768c1d083f5b879dcb11b4649cdd
6d538defe5d0793c5f8173d9f98fe7117cc20453
91840915cfe92c757b4e228b027e69cbd86747611642da1e3e194ce0b4886ef7
GET /favicon.ico HTTP/1.1
Host: cdn.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/x-icon
last-modified: Tue, 24 May 2022 09:09:37 GMT
etag: W/"628ca0d1-47e"
strict-transport-security: max-age=15768000
x-accel-expires: @1668862223
server: CDN77-Turbo
x-77-nzt: AblMCRT+Da3/7NgAAA
x-77-nzt-ray: ffffffff602e388ffbd7696301b2c332
x-cache: HIT
x-age: 55532
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/787909066/?random=1667880952618&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=3115724628&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/787909066/?random=1667880952618&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=3115724628&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/787909066/?random=1667880952618&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=3115724628&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/787909066/?random=1667880952618&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=3115724628&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/787909066/?random=1667880952618&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=3115724628&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/787909066/?random=1667880952618&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=3115724628&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10992351212/?random=1667880952652&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=1024939617&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10992351212/?random=1667880952652&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=1024939617&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10992351212/?random=1667880952652&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=1024939617&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c4ddce8764184aefbb99dc1a0442216e
46b9eec43152cc75cdec5533b524dc9d0a3d50d2
e552a070812e2e2cd67f001a51dea2c79f71f8ce4c1ea26477d0e4b21f739455
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-1WLPSRY6F2>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&_s=1&sid=1667880953&sct=1&seg=0&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-1WLPSRY6F2>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&_s=1&sid=1667880953&sct=1&seg=0&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-1WLPSRY6F2>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&_s=1&sid=1667880953&sct=1&seg=0&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://fungustherapypro.com
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-123669295-1&cid=1355308834.1667880953&jid=716196499&gjid=1970966989&_gid=882826291.1667880953&_u=YCDAgEALAAAAAEAAIC~&z=574213655
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-123669295-1&cid=1355308834.1667880953&jid=716196499&gjid=1970966989&_gid=882826291.1667880953&_u=YCDAgEALAAAAAEAAIC~&z=574213655
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-123669295-1&cid=1355308834.1667880953&jid=716196499&gjid=1970966989&_gid=882826291.1667880953&_u=YCDAgEALAAAAAEAAIC~&z=574213655 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://fungustherapypro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/652536324/?random=1667880952638&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=709632829&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/652536324/?random=1667880952638&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=709632829&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/652536324/?random=1667880952638&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=709632829&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/652536324/?random=1667880952638&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=709632829&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/652536324/?random=1667880952638&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=709632829&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/652536324/?random=1667880952638&cv=11&fst=1667880000000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&tiba=Fungus%20Therapy%20Pro&fmt=3&is_vtc=1&random=709632829&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-TP7YK51HJS>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&cu=EUR&sid=1667880952&sct=1&seg=0&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&_s=2
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-TP7YK51HJS>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&cu=EUR&sid=1667880952&sct=1&seg=0&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&_s=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-TP7YK51HJS>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&cu=EUR&sid=1667880952&sct=1&seg=0&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&_s=2 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 342
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: https://fungustherapypro.com
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-TP7YK51HJS>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&_s=1&sid=1667880952&sct=1&seg=0&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-TP7YK51HJS>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&_s=1&sid=1667880952&sct=1&seg=0&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-TP7YK51HJS>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&_s=1&sid=1667880952&sct=1&seg=0&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://fungustherapypro.com
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-243070178-1&cid=1355308834.1667880953&jid=1293602968&gjid=1269333741&_gid=882826291.1667880953&_u=YCDAAEALAAAAAGAAIC~&z=1231556992
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-243070178-1&cid=1355308834.1667880953&jid=1293602968&gjid=1269333741&_gid=882826291.1667880953&_u=YCDAAEALAAAAAGAAIC~&z=1231556992
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-243070178-1&cid=1355308834.1667880953&jid=1293602968&gjid=1269333741&_gid=882826291.1667880953&_u=YCDAAEALAAAAAGAAIC~&z=1231556992 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://fungustherapypro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 08 Nov 2022 04:15:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/facebook.svg
200 OK 301 B URL HTTP/2 platform-cdn.sharethis.com/img/facebook.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash c6e9be45643e197ce1db1d7e24a99adc
d7338e398bb0f7a9082d24f121140d2cf9e88859
768d97ec0916217ae82c70aeda3a61b9b0dab344edc4a3240a4f7cd94af00307
GET /img/facebook.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 301
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 03 Nov 2022 15:33:17 GMT
cache-control: public, max-age=2592000
etag: "c6e9be45643e197ce1db1d7e24a99adc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hLWesuQTlM2kth-3qv-iEdYzjobDisd1g9901Fq_ntJc7fHZOAHcWA==
age: 391360
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/email.svg
200 OK 343 B URL HTTP/2 platform-cdn.sharethis.com/img/email.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5977437466e857c7ddcadda6f6d88c2a
19c6378daa1f946ca225fb8d9e039e1f7762fb0d
5f5012132c752db2433e17712d91ef8689f1bc95167b2720e23224c2ae62e009
GET /img/email.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 343
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 24 Oct 2022 02:44:38 GMT
cache-control: public, max-age=2592000
etag: "5977437466e857c7ddcadda6f6d88c2a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GZW-CEpYDts1QsP4wLlpHETzhAU0z2eBRsoht6pnUDkbfQWupCSrWA==
age: 1301480
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/messenger.svg
200 OK 372 B URL HTTP/2 platform-cdn.sharethis.com/img/messenger.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash a5aa43fa302867d3e888ac2f69b7b288
952b104251965ac706baca3a022c103104e8fabe
2986551fd9e82929eabb8cba7c44f74a28d8496c744893432f067b320dff55da
GET /img/messenger.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 372
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 05 Nov 2022 02:09:52 GMT
cache-control: public, max-age=2592000
etag: "a5aa43fa302867d3e888ac2f69b7b288"
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ptMm7CRMvdshawNoCKz98NPT1DYq-fpbs1eTclM5S7H8VuuYEiBRiA==
age: 266768
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/whatsapp.svg
200 OK 832 B URL HTTP/2 platform-cdn.sharethis.com/img/whatsapp.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (676)
Hash afe7fc60ed757db39a88d2950fce69c9
e120b53e856848419275723e24a539359cf41b4a
847eb36b4dc4b05f94052dcd98077319e74d882334a106bb9ca451ba211c9c2c
GET /img/whatsapp.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 832
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 27 Oct 2022 01:43:40 GMT
cache-control: public, max-age=2592000
etag: "afe7fc60ed757db39a88d2950fce69c9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pE4y2fNWXEm5Oj5Jwbbhh8n9M0H-GAqopinbwxweq6Va76p01mxJug==
age: 1045938
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 01c1a1367e530a799bcaee7de89eefee
19d2450df87f1f3bb1c94e6e0bafbd60c7aead00
79cce6506b30bd3c699a700851db3254c2b909e559c54408b7d254b8e50003e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
platform-cdn.sharethis.com/img/arrow_right.svg
200 OK 565 B URL HTTP/2 platform-cdn.sharethis.com/img/arrow_right.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (409)
Hash 9928d025bd5792b718ee0a185f62e67c
16406d7b5b6d383b12859b853cf6cb7e3733e33d
1bae747c7fd090f56608956a97c870391e1c43f89d24d5766129b75628985c1e
GET /img/arrow_right.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 565
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 18 Oct 2022 01:53:53 GMT
cache-control: public, max-age=2592000
etag: "9928d025bd5792b718ee0a185f62e67c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lBeAjzWqniJILw-65h4JIVrZ0GKMk8SWDc0idbhJei1i0FbMl0HGrw==
age: 1822925
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6e8ee97ec58f7d2991905f88bd3a463f
b87a69e7b938d01a4ac7d74ec69bffb4051695f0
1fe031e258c6a541e040de89c4ebcdfd9ddf78d391f77e858b44aef18469373d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=441305948034561&ev=PageView&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&rl=&if=false&ts=1667880954296&sw=1280&sh=1024&ud[fn]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[ln]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[ph]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[ct]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[st]=68bca10eea2ba33f6f15a6ab0c7df2a49051a6541f9118d468b0585d5d60398b&ud[zp]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[country]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&v=2.9.89&r=stable&ec=0&o=62&fbp=fb.1.1667880954293.472069103&it=1667880953283&coo=false&eid=68c090f5-77e8-4577-bca2-12c240d97415_1667880952245.17&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=441305948034561&ev=PageView&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&rl=&if=false&ts=1667880954296&sw=1280&sh=1024&ud[fn]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[ln]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[ph]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[ct]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[st]=68bca10eea2ba33f6f15a6ab0c7df2a49051a6541f9118d468b0585d5d60398b&ud[zp]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[country]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&v=2.9.89&r=stable&ec=0&o=62&fbp=fb.1.1667880954293.472069103&it=1667880953283&coo=false&eid=68c090f5-77e8-4577-bca2-12c240d97415_1667880952245.17&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=441305948034561&ev=PageView&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&rl=&if=false&ts=1667880954296&sw=1280&sh=1024&ud[fn]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[ln]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[ph]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[ct]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[st]=68bca10eea2ba33f6f15a6ab0c7df2a49051a6541f9118d468b0585d5d60398b&ud[zp]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&ud[country]=eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c&v=2.9.89&r=stable&ec=0&o=62&fbp=fb.1.1667880954293.472069103&it=1667880953283&coo=false&eid=68c090f5-77e8-4577-bca2-12c240d97415_1667880952245.17&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 04:15:57 GMT
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/arrow_left.svg
200 OK 565 B URL HTTP/2 platform-cdn.sharethis.com/img/arrow_left.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (409)
Hash b55d8d2b9321e381a3c38a4bddb74037
000c29635758e608bbe15d191e953adb27627c2e
5c833b1818762f1e134fbb158447fb0b92f2b018b15aa36f2e2405213f830d38
GET /img/arrow_left.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 565
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 25 Oct 2022 10:31:58 GMT
cache-control: public, max-age=2592000
etag: "b55d8d2b9321e381a3c38a4bddb74037"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WrmWVbEkTXlUTFH2wkK6JXiIXkb5Q_aGJdjaUUsEuMkm-WGBf874Rg==
age: 1187040
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e60d0f756c02f4058dc70cb995ad6760
54f90a7746f4fc7f69bb81a82096e00cc8f15d55
dfa9db0ba7f7ac40c90d54b455ee57980b75226130d9c77fc2946d7d4e218acf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=138008
Date: Tue, 08 Nov 2022 04:15:57 GMT
Etag: "63694aae-1d7"
Expires: Wed, 09 Nov 2022 18:36:05 GMT
Last-Modified: Mon, 07 Nov 2022 18:13:02 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SvG4Np8_UgboAlzc-zYPF4336w4PN2rGWBoDV4DG3-4pklLNcm_fcw==
Age: 1383
ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_id%22%3A%22null%22%2C%22product_category%22%3A%22null%22%7D%5D%7D&tid=2612850229027&cb=1667880954157&dep=5%2CEVENT_TAGS_ABSENT
200 OK 381 B URL HTTP/2 ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_id%22%3A%22null%22%2C%22product_category%22%3A%22null%22%7D%5D%7D&tid=2612850229027&cb=1667880954157&dep=5%2CEVENT_TAGS_ABSENT
IP
File type JSON data\012- , ASCII text, with very long lines (538), with no line terminators
Hash e1bee89eff7a40b07cdecf34867bbb2d
22ff8dc4102ec9e1096b1044ac4a42120d505cfd
ddcde22b896fc7d2691810c1463ab90c033f295c5322a1dc607e7b700207c1dd
GET /user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_id%22%3A%22null%22%2C%22product_category%22%3A%22null%22%7D%5D%7D&tid=2612850229027&cb=1667880954157&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVkyVTVNRFl5TnpZdE0yRTBPUzAwWkRZd0xXRmpabVF0TXpCaFltUTRZVFl4TXpJeg
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://fungustherapypro.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 381
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1007829556231017
date: Tue, 08 Nov 2022 04:15:57 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1667880957.12209cb4
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2612850229027&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1667880954151&dep=2%2CPAGE_LOAD
200 OK 381 B URL HTTP/2 ct.pinterest.com/user/?tid=2612850229027&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1667880954151&dep=2%2CPAGE_LOAD
IP
File type JSON data\012- , ASCII text, with very long lines (538), with no line terminators
Hash e1bee89eff7a40b07cdecf34867bbb2d
22ff8dc4102ec9e1096b1044ac4a42120d505cfd
ddcde22b896fc7d2691810c1463ab90c033f295c5322a1dc607e7b700207c1dd
GET /user/?tid=2612850229027&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1667880954151&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU1HSTNaV1E1TURNdE5EUmpaQzAwWWpCbExXRm1Zamd0WlRWaVpXUTFNV1F5T0RVNQ
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://fungustherapypro.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 381
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1821541483274409
date: Tue, 08 Nov 2022 04:15:57 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1667880957.12209cb5
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2612850229027&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22a25a5f34%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1667880954158
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2612850229027&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22a25a5f34%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1667880954158
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2612850229027&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22a25a5f34%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1667880954158 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 1449188843410190
date: Tue, 08 Nov 2022 04:15:57 GMT
akamai-grn: 0.274f2417.1667880957.12209cb6
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
l.sharethis.com/pview?event=pview&hostname=fungustherapypro.com&location=%2F&product=inline-share-buttons&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Fungus%20Therapy%20Pro&cms=unknown&publisher=5c62beeb7056550011c49dca&sop=true&version=st_sop.js&lang=en&description=The%20professional%20laser%20against%20fungal%20infections%20to%20get%20the%20nails%20you%27ve%20always%20wanted%20to%20show%20off
204 No Content 0 B URL HTTP/1.1 l.sharethis.com/pview?event=pview&hostname=fungustherapypro.com&location=%2F&product=inline-share-buttons&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Fungus%20Therapy%20Pro&cms=unknown&publisher=5c62beeb7056550011c49dca&sop=true&version=st_sop.js&lang=en&description=The%20professional%20laser%20against%20fungal%20infections%20to%20get%20the%20nails%20you%27ve%20always%20wanted%20to%20show%20off
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pview?event=pview&hostname=fungustherapypro.com&location=%2F&product=inline-share-buttons&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Fungus%20Therapy%20Pro&cms=unknown&publisher=5c62beeb7056550011c49dca&sop=true&version=st_sop.js&lang=en&description=The%20professional%20laser%20against%20fungal%20infections%20to%20get%20the%20nails%20you%27ve%20always%20wanted%20to%20show%20off HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: https://fungustherapypro.com
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Tue, 08 Nov 2022 04:15:57 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
count-server.sharethis.com/v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518%26wtrd_sectionId%3Dsharethis%26wtrd_sectName%3Dsharethis
200 OK 680 B URL HTTP/2 count-server.sharethis.com/v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518%26wtrd_sectionId%3Dsharethis%26wtrd_sectName%3Dsharethis
IP
File type ASCII text, with very long lines (680), with no line terminators
Hash e7322b460a761da5a827255440e342cb
64c963a526b13f20bf5fb39e1a8011ee93644903
c96da7e108e7d23790007ea862b909d86089cbeae99405b2de833f680af20a9c
GET /v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518%26wtrd_sectionId%3Dsharethis%26wtrd_sectName%3Dsharethis HTTP/1.1
Host: count-server.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 680
date: Tue, 08 Nov 2022 04:15:57 GMT
cache-control: public, max-age=86400
etag: e7322b460a761da5a827255440e342cb
apigw-requestid: bQ6vngk5IAMESQw=
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o9KhtrTv_z9NhO7HApEg-YXBvlhRODDjvkSvAcZ5Q4GDoigzr4U3JQ==
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_id%22%3A%22null%22%2C%22product_category%22%3A%22null%22%7D%5D%7D&tid=2612850229027&cb=1667880954577&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22a25a5f34%22%2C%22ecm_enabled%22%3Afalse%7D
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_id%22%3A%22null%22%2C%22product_category%22%3A%22null%22%7D%5D%7D&tid=2612850229027&cb=1667880954577&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22a25a5f34%22%2C%22ecm_enabled%22%3Afalse%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%2C%22line_items%22%3A%5B%7B%22product_id%22%3A%22null%22%2C%22product_category%22%3A%22null%22%7D%5D%7D&tid=2612850229027&cb=1667880954577&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22a25a5f34%22%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 4218234056673953
date: Tue, 08 Nov 2022 04:15:57 GMT
set-cookie: _pinterest_ct_ua="TWc9PSZXWi9WcXlBQjg2bXBTRWJ5L1cvQTFwSzVlMXZWTGYzamdIK0VhUjdzQkZZWXBpbythWHIzVy82MU5tdEtRRTNMVmJ3U1d3WHZlU25GMzBXNGxESS9Jdys3clhzQW9xWFE1dGUvZ3Z4OG1PYz0mM3BNWmw5Z2JjelRhUlNVQmJkZHNVUXJaeFY4PQ=="; Expires=Wed, 08 Nov 2023 04:15:57 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
akamai-grn: 0.274f2417.1667880957.12209f1e
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
gtm-wxbzjqd-n2y1z.uc.r.appspot.com/g/collect?v=2&tid=G-TP7YK51HJS>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_s=3&sid=1667880952&sct=1&seg=1&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&en=page_view&ep.event_id=68c090f5-77e8-4577-bca2-12c240d97415_1667880952245.17&_et=1&richsstsse
200 OK 90 B URL HTTP/2 gtm-wxbzjqd-n2y1z.uc.r.appspot.com/g/collect?v=2&tid=G-TP7YK51HJS>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_s=3&sid=1667880952&sct=1&seg=1&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&en=page_view&ep.event_id=68c090f5-77e8-4577-bca2-12c240d97415_1667880952245.17&_et=1&richsstsse
IP
Hash 169015d9a1c4742ef1b19ab13dfac200
5a31df9e8f8d370f893c6f087c5974cb3e4ddd7f
8dfbc19663da6a43557027f2e6d3e94066517ce50334a83f410e0a4853935d40
GET /g/collect?v=2&tid=G-TP7YK51HJS>m=2oeb20&_p=1603232170&cid=1355308834.1667880953&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_s=3&sid=1667880952&sct=1&seg=1&dl=https%3A%2F%2Ffungustherapypro.com%2F%3Fwidipub_id%3D5e7a66adef28642bc90fec33%26wtrd_offer_id%3D6008200b79da720286346842%26wtrd_offer_pids%3D60ae35c3bcfa4d50f22ded62%26wtrd_offer_lids%3D601c2d4fa8f0ae3f945b4e83%26widipub_custom1%3Dccb1bf7bab4f481da69b3bcbc53d8f05%26widipub_custom2%3D3518&dt=Fungus%20Therapy%20Pro&en=page_view&ep.event_id=68c090f5-77e8-4577-bca2-12c240d97415_1667880952245.17&_et=1&richsstsse HTTP/1.1
Host: gtm-wxbzjqd-n2y1z.uc.r.appspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fungustherapypro.com
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
vary: Accept-Encoding
set-cookie: FPLC=13AhOQYMLJ7wxZZMkwBLJz2dIk%2Bcc9qZ6XZiTlWGodaqhQWtqbB4XwNlltGkqteR4iKzf9RktM3ufqbTHaLS%2BWFNiHQh%2Fv5EziCOm986zdZxBBjHTog1GjF%2FDAdZQg%3D%3D; Max-Age=72000; Domain=fungustherapypro.com; Path=/; Secure
FPID=FPID2.2.3ZupSe1zxHl3cp7TNqALsHlaMU7QfTmQRTL%2BqR39KWM%3D.1667880953; Max-Age=63072000; Domain=fungustherapypro.com; Path=/; Secure; HttpOnly
cache-control: no-cache
x-content-type-options: nosniff
access-control-allow-origin: https://fungustherapypro.com
access-control-allow-credentials: true
content-encoding: gzip
x-cloud-trace-context: 0835c6550cfe76f69690dc0bd4e48dc8
date: Tue, 08 Nov 2022 04:15:57 GMT
server: Google Frontend
content-length: 90
expires: Tue, 08 Nov 2022 04:15:57 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c4ddce8764184aefbb99dc1a0442216e
46b9eec43152cc75cdec5533b524dc9d0a3d50d2
e552a070812e2e2cd67f001a51dea2c79f71f8ce4c1ea26477d0e4b21f739455
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 04:15:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
content-length: 323
x-envoy-upstream-service-time: 0
referrer-policy: origin
x-pinterest-rid: 1565386948811109
date: Tue, 08 Nov 2022 04:15:57 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1667880957.1220a0f1
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
cdn.widitrade.com/assets/js/routes/routes-2633e6ed.js
200 OK 0 B URL HTTP/2 cdn.widitrade.com/assets/js/routes/routes-2633e6ed.js
IP
ASN #60068 Datacamp Limited
GET /assets/js/routes/routes-2633e6ed.js HTTP/1.1
Host: cdn.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:54 GMT
content-type: application/javascript
last-modified: Mon, 31 Oct 2022 13:26:01 GMT
etag: W/"635fcce9-2554"
strict-transport-security: max-age=15768000
x-accel-expires: @1668259626
server: CDN77-Turbo
x-77-nzt: AblMCRQzyEL/0AoKAA
x-77-nzt-ray: ffffffff602e388ffad7696368606c38
x-cache: HIT
x-age: 658128
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.widitrade.com/assets/templates/60897302b4d5282d8234dc22/prefooter.css
200 OK 0 B URL HTTP/2 assets.widitrade.com/assets/templates/60897302b4d5282d8234dc22/prefooter.css
IP
ASN #60068 Datacamp Limited
GET /assets/templates/60897302b4d5282d8234dc22/prefooter.css HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:54 GMT
content-type: text/css
last-modified: Wed, 28 Apr 2021 15:29:30 GMT
etag: W/"60897f5a-245"
access-control-allow-origin: *
x-accel-expires: @1667926188
server: CDN77-Turbo
x-77-nzt: AblMCQ1me0v/zqAAAA
x-77-nzt-ray: fffffffff06082e9fad769639838b538
x-cache: HIT
x-age: 41166
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.widitrade.com/assets/templates/60897302b4d5282d8234dc22/app.css
200 OK 0 B URL HTTP/2 assets.widitrade.com/assets/templates/60897302b4d5282d8234dc22/app.css
IP
ASN #60068 Datacamp Limited
GET /assets/templates/60897302b4d5282d8234dc22/app.css HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:54 GMT
content-type: text/css
last-modified: Wed, 28 Apr 2021 16:13:06 GMT
etag: W/"60898992-130e"
access-control-allow-origin: *
x-accel-expires: @1667896310
server: CDN77-Turbo
x-77-nzt: AblMCQ2A11P/hBUBAA
x-77-nzt-ray: fffffffff06082e9fad76963f3402b39
x-cache: HIT
x-age: 71044
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner14.jpg
200 OK 0 B URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner14.jpg
IP
ASN #60068 Datacamp Limited
GET /assets/products/60080db43a5305412b311b22/advbanner14.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 583249
last-modified: Wed, 26 May 2021 11:35:29 GMT
etag: "60ae3281-8e651"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ26inSh
x-77-nzt-ray: fffffffff06082e9fad76963c6cde238
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
fungustherapypro.com/?widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518
200 OK 0 B URL HTTP/2 fungustherapypro.com/?widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518
IP
ASN #15699 OGIC Informatica S.L.
GET /?widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518 HTTP/1.1
Host: fungustherapypro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=UTF-8
cache-control: max-age=0, must-revalidate, private
date: Tue, 08 Nov 2022 04:15:54 GMT
content-security-policy: frame-ancestors *
expires: Tue, 08 Nov 2022 04:15:54 GMT
set-cookie: PHPSESSID=da1d3d5b62f6e01f527691fa5694a6cb; path=/; HttpOnly
wtrd_pp=5fbcde29073d32f495e563ca; expires=Wed, 09-Nov-2022 04:15:54 GMT; Max-Age=86400; path=/; httponly
wtrd_click=6369d7fa19ece756fb66061b; expires=Mon, 08-Nov-2032 04:15:54 GMT; Max-Age=315619200; path=/; httponly
strict-transport-security: max-age=15768000
content-encoding: gzip
X-Firefox-Spdy: h2
assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner19.jpg
200 OK 0 B URL HTTP/2 assets.widitrade.com/assets/products/60080db43a5305412b311b22/advbanner19.jpg
IP
ASN #60068 Datacamp Limited
GET /assets/products/60080db43a5305412b311b22/advbanner19.jpg HTTP/1.1
Host: assets.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:55 GMT
content-type: image/jpeg
content-length: 196851
last-modified: Wed, 26 May 2021 11:35:24 GMT
etag: "60ae327c-300f3"
access-control-allow-origin: *
x-accel-expires: @1667967355
server: CDN77-Turbo
x-77-nzt: AblMCQ3shTCh
x-77-nzt-ray: fffffffff06082e9fad769636b5a2839
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
fungustherapypro.com/manifest.json
200 OK 0 B URL HTTP/2 fungustherapypro.com/manifest.json
IP
ASN #15699 OGIC Informatica S.L.
GET /manifest.json HTTP/1.1
Host: fungustherapypro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fungustherapypro.com/?widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518
Connection: keep-alive
Cookie: PHPSESSID=da1d3d5b62f6e01f527691fa5694a6cb; wtrd_pp=5fbcde29073d32f495e563ca; wtrd_click=6369d7fa19ece756fb66061b; _gcl_au=1.1.707405398.1667880953; wtrd_customer=%7B%225af593e1eeb3a7076b536e32%22%3A%226369d7fb76605c48bf50e002%22%7D; wtrd_networkClick=1; wtrd_publisher=5e7a66adef28642bc90fec33; _ga_TP7YK51HJS=GS1.1.1667880952.1.1.1667880953.0.0.0; _ga=GA1.1.1355308834.1667880953; _ga_1WLPSRY6F2=GS1.1.1667880953.1.0.1667880953.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
server: nginx
date: Tue, 08 Nov 2022 04:15:56 GMT
content-type: application/json
last-modified: Mon, 31 Oct 2022 13:23:20 GMT
etag: W/"635fcc48-d0f"
strict-transport-security: max-age=15768000
content-encoding: gzip
X-Firefox-Spdy: h2
fungustherapypro.com/pixel-click.gif?avd=5af593e1eeb3a7076b536e32&offer=6008200b79da720286346842&offerLanding=601c2d4fa8f0ae3f945b4e83&offerPrelanding=60ae35c3bcfa4d50f22ded62&publisher=5e7a66adef28642bc90fec33&attributionDays=30&renderType=prelanding&clickId=6369d7fa19ece756fb66061b&chargeCost=0&widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518
200 OK 0 B URL HTTP/2 fungustherapypro.com/pixel-click.gif?avd=5af593e1eeb3a7076b536e32&offer=6008200b79da720286346842&offerLanding=601c2d4fa8f0ae3f945b4e83&offerPrelanding=60ae35c3bcfa4d50f22ded62&publisher=5e7a66adef28642bc90fec33&attributionDays=30&renderType=prelanding&clickId=6369d7fa19ece756fb66061b&chargeCost=0&widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518
IP
ASN #15699 OGIC Informatica S.L.
GET /pixel-click.gif?avd=5af593e1eeb3a7076b536e32&offer=6008200b79da720286346842&offerLanding=601c2d4fa8f0ae3f945b4e83&offerPrelanding=60ae35c3bcfa4d50f22ded62&publisher=5e7a66adef28642bc90fec33&attributionDays=30&renderType=prelanding&clickId=6369d7fa19ece756fb66061b&chargeCost=0&widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518 HTTP/1.1
Host: fungustherapypro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/?widipub_id=5e7a66adef28642bc90fec33&wtrd_offer_id=6008200b79da720286346842&wtrd_offer_pids=60ae35c3bcfa4d50f22ded62&wtrd_offer_lids=601c2d4fa8f0ae3f945b4e83&widipub_custom1=ccb1bf7bab4f481da69b3bcbc53d8f05&widipub_custom2=3518
Cookie: PHPSESSID=da1d3d5b62f6e01f527691fa5694a6cb; wtrd_pp=5fbcde29073d32f495e563ca; wtrd_click=6369d7fa19ece756fb66061b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
server: nginx
content-type: image/gif
cache-control: must-revalidate, no-cache, private
date: Tue, 08 Nov 2022 04:15:55 GMT
content-security-policy: frame-ancestors *
set-cookie: wtrd_customer=%7B%225af593e1eeb3a7076b536e32%22%3A%226369d7fb76605c48bf50e002%22%7D; expires=Mon, 08-Nov-2032 04:15:55 GMT; Max-Age=315619200; path=/; secure; httponly; samesite=none
wtrd_click=6369d7fa19ece756fb66061b; expires=Mon, 08-Nov-2032 04:15:55 GMT; Max-Age=315619200; path=/; secure; httponly; samesite=none
wtrd_networkClick=1; expires=Tue, 08-Nov-2022 04:20:55 GMT; Max-Age=300; path=/; secure; httponly; samesite=none
wtrd_publisher=5e7a66adef28642bc90fec33; expires=Thu, 08-Dec-2022 04:15:55 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cdn.widitrade.com/bundles/fosjsrouting/js/router.js
200 OK 0 B URL HTTP/2 cdn.widitrade.com/bundles/fosjsrouting/js/router.js
IP
ASN #60068 Datacamp Limited
GET /bundles/fosjsrouting/js/router.js HTTP/1.1
Host: cdn.widitrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fungustherapypro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 04:15:54 GMT
content-type: application/javascript
last-modified: Mon, 31 Oct 2022 13:22:14 GMT
etag: W/"635fcc06-3c74"
strict-transport-security: max-age=15768000
x-accel-expires: @1668859533
server: CDN77-Turbo
x-77-nzt: AblMCRQqq8X/beMAAA
x-77-nzt-ray: ffffffff602e388ffad76963ab6c4738
x-cache: HIT
x-age: 58221
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
5.2.89.183
151.101.130.217
104.18.20.226
93.184.220.29
185.142.27.41
31.13.72.12
23.38.200.197