www.flippingheck.com/tag/toxic-people
301 Moved Permanently 253 B URL HTTP/1.1 www.flippingheck.com/tag/toxic-people
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d428fcecd82182036762f52311b95b8f
7152a6af129fbdd59a4b6fa303613fbcb308578a
0bb1cdfc1450abc6354f7eff2881821498aa798a888f01101bdc39ad1eced075
GET /tag/toxic-people HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 23:08:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 253
Connection: keep-alive
X-Content-Type-Options: nosniff
Location: https://www.flippingheck.com/tag/toxic-people
Host-Header: 6b7412fb82ca5edfd0917e3957f05d89
X-Proxy-Cache: MISS
X-Proxy-Cache-Info: 0301 NC:000000 UP:
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7519
Expires: Sat, 14 Jan 2023 01:14:17 GMT
Date: Fri, 13 Jan 2023 23:08:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cab5b63e128895128726181aff42e42e
d39c36237554fcd41addec0664d7fe7f7d157c06
18e82a5b82eb8f2d8b49df824c336015f19367c5a05467ad139a56db59f88852
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E82A5B82EB8F2D8B49DF824C336015F19367C5A05467AD139A56DB59F88852"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11719
Expires: Sat, 14 Jan 2023 02:24:17 GMT
Date: Fri, 13 Jan 2023 23:08:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 13 Jan 2023 22:48:52 GMT
content-type: application/json
age: 1206
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 64765d3d978fd74d7bc47d55d4f097cf
92eb3f0d55ba99be28105c0b28ef7dd456817f1f
761aab02513e7a0ec55ea59109e88b39cbd4e17df0cd2035aa37a4693f22d1f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "761AAB02513E7A0EC55EA59109E88B39CBD4E17DF0CD2035AA37A4693F22D1F3"
Last-Modified: Thu, 12 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2319
Expires: Fri, 13 Jan 2023 23:47:37 GMT
Date: Fri, 13 Jan 2023 23:08:58 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 5xiLw37tFQuhBWGsMO9z1c7fgQ0Y0/kOcFB9FrexJHxSvNfL2rE8NiUoZE00smrxwK2zO49A3IA=
x-amz-request-id: TTPA1KM7K1ZXD625
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 13 Jan 2023 22:43:29 GMT
age: 1529
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:08:58 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 13 Jan 2023 22:33:45 GMT
age: 2114
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.flippingheck.com/tag/toxic-people
301 Moved Permanently 0 B URL HTTP/2 www.flippingheck.com/tag/toxic-people
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag/toxic-people HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 13 Jan 2023 23:08:59 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://www.flippingheck.com/tag/toxic-people/
set-cookie: shield-notbot-nonce=09436d9582; expires=Fri, 13-Jan-2023 23:09:14 GMT; Max-Age=15; path=/; secure
PHPSESSID=73d2761e11c241e30080844224848db2; path=/
expires: Sat, 14 Jan 2023 00:08:59 GMT
cache-control: max-age=3600
pragma: no-cache
dlm-no-waypoints: true
referrer-policy: no-referrer-when-downgrade
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
expect-ct: max-age=5184000, enforce
x-redirect-by: WordPress
x-httpd-modphp: 1
host-header: 6b7412fb82ca5edfd0917e3957f05d89
x-proxy-cache: MISS
x-proxy-cache-info: 0301 NC:000000 UP:SKIP_CACHE_SET_COOKIE
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1470
Cache-Control: max-age=123737
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:08:59 GMT
Etag: "63c11f26-1d7"
Expires: Sun, 15 Jan 2023 09:31:16 GMT
Last-Modified: Fri, 13 Jan 2023 09:06:46 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Xb77G46sevveJYhAF5ivgQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cuhgwsP3EP+UU6npUL3MK8omRs4=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c16b1530bbcd3d9226362c0a6100f014
a49685aa2869a3674bc4c8fc58acd47f655c2111
ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5628887325331ad3d660f7208e1995c
9e4bf04468a7aed126488ccb5552a8e02610f6dd
5cd181d6728fc5f0f4d88407b97af61db39c5a38feebdeb2c21335cf4402fca4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-185917-3
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-185917-3
IP
File type ASCII text, with very long lines (1921)
Hash b41a5ed7a545856401d46bd137a7afa6
6c4de40f1e55727bdf9ab4daf5cdbd40a08f438c
910cb70e6d451e25c9e851359a49daccf86ebd7b91530732021e4b94f8062a24
GET /gtag/js?id=UA-185917-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 13 Jan 2023 23:09:00 GMT
expires: Fri, 13 Jan 2023 23:09:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45167
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 7808e0e4b7a714230373852158500533
4a79d18722a68a2f38d52e2d3a11b550bdd30b3c
8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 08 Jan 2023 18:28:40 GMT
expires: Mon, 08 Jan 2024 18:28:40 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 448820
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c16b1530bbcd3d9226362c0a6100f014
a49685aa2869a3674bc4c8fc58acd47f655c2111
ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5628887325331ad3d660f7208e1995c
9e4bf04468a7aed126488ccb5552a8e02610f6dd
5cd181d6728fc5f0f4d88407b97af61db39c5a38feebdeb2c21335cf4402fca4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5628887325331ad3d660f7208e1995c
9e4bf04468a7aed126488ccb5552a8e02610f6dd
5cd181d6728fc5f0f4d88407b97af61db39c5a38feebdeb2c21335cf4402fca4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.flippingheck.com/wp-content/themes/FH2017/images/headers/flipheck-logo.png
200 OK 14 kB URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/images/headers/flipheck-logo.png
IP
File type PNG image data, 635 x 141, 8-bit colormap, non-interlaced\012- data
Hash 6d77bae99be7c93deeccc1baca42cea3
892552e8ca3f2cddde4814bf943789949f8ac959
2c2b91c578a9c2b282569b01447b6b5619bdf34941397e64f9e87617c765f792
GET /wp-content/themes/FH2017/images/headers/flipheck-logo.png HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/png
content-length: 13541
last-modified: Wed, 09 Feb 2022 16:01:54 GMT
etag: "6203e572-34e5"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/assets/responsivemenu.png
200 OK 639 B URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/assets/responsivemenu.png
IP
File type PNG image data, 80 x 74, 8-bit colormap, non-interlaced\012- data
Hash 38071bd1ff27bf44c8967d2a2e180802
3b5e853bf4d233012d74acc585e165564e96f1f9
d6bd2344f7cc5449ec3849460985b22fb6b92f8e9ecc35f0c327128bcdec49ff
GET /wp-content/themes/FH2017/assets/responsivemenu.png HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/png
content-length: 639
last-modified: Wed, 09 Feb 2022 16:01:35 GMT
etag: "6203e55f-27f"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/images/headers/mobile-header.jpg
200 OK 8.0 kB URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/images/headers/mobile-header.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x150, components 3\012- data
Hash 78985bf880c8bf8b3160ce19ce426428
6b74a97300b5b94485e9bee6e334278e863e1bbb
43c3a4d2d1d0dd15a72c383a62e1115d4ca67ee16c62606be4646bd1b8656221
GET /wp-content/themes/FH2017/images/headers/mobile-header.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 7967
last-modified: Wed, 09 Feb 2022 16:01:57 GMT
etag: "6203e575-1f1f"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2021/05/court-hammer-books-judgment-law-concept.jpg
200 OK 28 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2021/05/court-hammer-books-judgment-law-concept.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Yeko Photo Studio], baseline, precision 8, 770x513, components 3\012- data
Hash 5ea12f72c4116818ac63cb304dbac5b7
9771ac8b358583c0c9c843568113bfec0fd29282
319105463197d988112093c6eb0c4e76cb49782b676b4947b0b47a7c87fb316e
GET /wp-content/uploads/2021/05/court-hammer-books-judgment-law-concept.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 28143
last-modified: Sun, 30 Jan 2022 10:51:49 GMT
etag: "61f66dc5-6def"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-includes/js/jquery/jquery.min.js
200 OK 30 kB URL HTTP/2 www.flippingheck.com/wp-includes/js/jquery/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash a490116996de6fe161493fe9e746cd0a
fb2e2ca3ab1c802b5ae3cc66db08d52e7b2ca4b2
21acca117311152ee9becf4a52d64ff632de8fc7ddde983e2de0dd3f425903d7
GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Fri, 04 Nov 2022 04:09:28 GMT
vary: Accept-Encoding
etag: W/"63649078-15e54"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2018/12/feat-deal-with-difficult-coworker.jpeg
200 OK 20 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2018/12/feat-deal-with-difficult-coworker.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 770x515, components 3\012- data
Hash 95a957e2c66a1a067cef79b14ee1ba5c
b24741c0e6eafba46ea4200fc33d1b9f0859d707
72816d6e49021e2d65a5efc5e88e661cefd7b9b192af7e8a1fca9cddcc9fb59a
GET /wp-content/uploads/2018/12/feat-deal-with-difficult-coworker.jpeg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 19803
last-modified: Sun, 30 Jan 2022 09:18:29 GMT
etag: "61f657e5-4d5b"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df489559868985b8815baa1cfaaff191
cb804ae84a7d8c2b6580c97caa484cfb515c1435
ecfca9383aa4ff0bc88dc975918610d1406ac9198e68d26a731a589b073b3ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.flippingheck.com/wp-includes/js/jquery/jquery-migrate.min.js
200 OK 20 kB URL HTTP/2 www.flippingheck.com/wp-includes/js/jquery/jquery-migrate.min.js
IP
File type ASCII text, with very long lines (11126)
Hash bb38dfe128b689c06322b19468484544
2c97b51b1cbac455d5307d8c95005561b99cfad4
6b1122ef278d4f7d1e7dc9cd4e9c361ff1b6353e556801b3a887852cd3207dc8
GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Wed, 09 Feb 2022 16:04:43 GMT
vary: Accept-Encoding
etag: W/"6203e61b-2bd8"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2018/10/feat-toxic-job.jpg
200 OK 47 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2018/10/feat-toxic-job.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 770x515, components 3\012- data
Hash 462393cc23c177e54e66b1b6e7a1634a
7b4f9f842fee72f9d88bc812d9252e15bb256b6f
7201a25d9cb58533bc7dc7f8bf09a83ddcaa01567e3bc6aa09de033d141abaf8
GET /wp-content/uploads/2018/10/feat-toxic-job.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 46811
last-modified: Sun, 30 Jan 2022 09:14:16 GMT
etag: "61f656e8-b6db"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2018/05/feat-Have-a-Slacker-Coworker.jpg
200 OK 50 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2018/05/feat-Have-a-Slacker-Coworker.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 770x515, components 3\012- data
Hash e7caec6ac2606783aa128c5fe58423e7
f1635c03f2579075edd9c08f420dd9557334eb94
e923c670e661baceb1b5603b0455e379c953c7bbf98ff896701be9415af83552
GET /wp-content/uploads/2018/05/feat-Have-a-Slacker-Coworker.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 50258
last-modified: Sun, 30 Jan 2022 08:58:56 GMT
etag: "61f65350-c452"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2018/07/feat-disruptive-behaviours.jpg
200 OK 20 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2018/07/feat-disruptive-behaviours.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 770x515, components 3\012- data
Hash b84c41aee2e761952c8895639501e296
4dc2ae70d4b8598fedee738831fbd4b5c5edb391
5ec6d7a55db3e925be0c7c7fb2f33fa0fcb389eb294b92cc0629a0be7b7efbea
GET /wp-content/uploads/2018/07/feat-disruptive-behaviours.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 20412
last-modified: Sun, 30 Jan 2022 09:06:07 GMT
etag: "61f654ff-4fbc"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e9e221b2172878d6b279e5beac1a0497
6cacf299a666b0ed6cbdaa47345734fd396c9cd5
28ec5550aa91667d6033a0efadf60c9cedfa19eec3e7bce7fbf5a443a65c0dbb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 13 Jan 2023 23:09:00 GMT
Etag: "63c18e62-1d7"
Server: ECS (dcb/7F3B)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dqPIKKhWFrAB5Gvxp9LopxmyHyOHLchsjSprr2Q819w1vH4ODH6SOQ==
www.flippingheck.com/wp-content/uploads/2018/06/feat-combat-unacceptable-behaviour-workplace.png
200 OK 62 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2018/06/feat-combat-unacceptable-behaviour-workplace.png
IP
File type PNG image data, 770 x 515, 8-bit colormap, non-interlaced\012- data
Hash 49af95a843da6ff7d7473939a7505c2a
87a441b9f4ac21834fa8fdb2f94b6736db673f14
9e36fa4b59eb0d8f707e3b028990a02048ed537b5f544b3e6d5de6160ad189ba
GET /wp-content/uploads/2018/06/feat-combat-unacceptable-behaviour-workplace.png HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/png
content-length: 61666
last-modified: Sun, 30 Jan 2022 09:02:59 GMT
etag: "61f65443-f0e2"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/images/headers/backgroundlines.png
200 OK 932 B URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/images/headers/backgroundlines.png
IP
File type PNG image data, 1024 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash d7194243fe7805c5933c2d7a3aad91b9
69191abcb125b51a941c79010d1a1c4f288a23a5
fc2aa1527304dda64a436061c9b2ae567423cf79745ac1025e3b4ac18c1f6df0
GET /wp-content/themes/FH2017/images/headers/backgroundlines.png HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/wp-content/themes/FH2017/style.css
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/png
content-length: 932
last-modified: Wed, 09 Feb 2022 16:01:47 GMT
etag: "6203e56b-3a4"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/images/headers/social-sprite.png
200 OK 6.4 kB URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/images/headers/social-sprite.png
IP
File type PNG image data, 75 x 35, 8-bit/color RGB, non-interlaced\012- data
Hash f8d27506b87437c7e11b29fbd8b81715
e7bb546aaffae0c602774231cdda53dbbee6acad
f57e6c47d743e7f47bba9fba02fc88cce875ed23ed754ba0e4b29f98cf48a1de
GET /wp-content/themes/FH2017/images/headers/social-sprite.png HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/wp-content/themes/FH2017/style.css
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/png
content-length: 6449
last-modified: Wed, 09 Feb 2022 16:02:02 GMT
etag: "6203e57a-1931"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/js/theme.min.js
200 OK 1.9 kB URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/js/theme.min.js
IP
Hash 169112dd33d38dd2817f3a017c026f5a
ab0513ff5f8810a921045542b2e47585c44f9f8f
c56d731b6d4befa4c268bc65055f5c6c695599a4e1192c0728750f7fb0e24409
GET /wp-content/themes/FH2017/js/theme.min.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Wed, 09 Feb 2022 16:01:38 GMT
vary: Accept-Encoding
etag: W/"6203e562-90"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/assets/smclock.png
200 OK 263 B URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/assets/smclock.png
IP
File type PNG image data, 13 x 13, 8-bit colormap, non-interlaced\012- data
Hash 76c128bde3773f12f2c3f72625ba3a02
0c00a83d63088a3d57c023f30b63e0ff23aa1276
644fceffdca85016b7fd7733c5c2340a11afe497ab4943089b53255525111b95
GET /wp-content/themes/FH2017/assets/smclock.png HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/wp-content/themes/FH2017/style.css
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/png
content-length: 263
last-modified: Wed, 09 Feb 2022 16:01:35 GMT
etag: "6203e55f-107"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/images/sad-flippingheck.gif
200 OK 17 kB URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/images/sad-flippingheck.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Hash b2d681a049f785b3f6170bbef6f9e4a9
67061817f4592119b0f26fa35d9ae8fa57f7210d
80529d915020255c81f8c4cce3d2635b4b30de0b908263cf8a4dd541b355e8ee
GET /wp-content/themes/FH2017/images/sad-flippingheck.gif HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/wp-content/themes/FH2017/style.css
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/gif
content-length: 17430
last-modified: Tue, 26 Jul 2022 13:20:16 GMT
etag: "62dfea10-4416"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2018/06/feat-overcome-negative-emotions.jpg
200 OK 64 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2018/06/feat-overcome-negative-emotions.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 770x515, components 3\012- data
Hash 2e7027f89478bc4a17f840d06a680378
6db70917c63f0d6d95b570be7b47c8911edb240f
fddcc89b92fb85eeb72e5ebf8f5e2d0a3edcfed60f01112213975e5428870fc7
GET /wp-content/uploads/2018/06/feat-overcome-negative-emotions.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 63758
last-modified: Sun, 30 Jan 2022 09:03:06 GMT
etag: "61f6544a-f90e"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2020/10/buy_katy_a_coffee.jpg
200 OK 8.2 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2020/10/buy_katy_a_coffee.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 285x285, components 3\012- data
Hash 566e233a30e2bbd43337e4fd95b682c6
9c9f35b94b90b20c84954ca084bb668c6ed84715
a2331fdf5d4f457713369016682d658eb77c39cc3a72519d54f5805418eca756
GET /wp-content/uploads/2020/10/buy_katy_a_coffee.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 8181
last-modified: Sun, 30 Jan 2022 10:22:51 GMT
etag: "61f666fb-1ff5"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2023/01/72113776-8dbf-4a68-bf96-cbcf07662bb8-75x75.jpeg
200 OK 2.3 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2023/01/72113776-8dbf-4a68-bf96-cbcf07662bb8-75x75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 75x75, components 3\012- data
Hash 1beebba2485477cd8b8a9760df09030c
da320f236fdd084eeee253a1389f23a751f4b309
22833af4444575c21ddec17e83e4b209a86e2580226970ab06c637af803c0d15
GET /wp-content/uploads/2023/01/72113776-8dbf-4a68-bf96-cbcf07662bb8-75x75.jpeg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 2272
last-modified: Fri, 06 Jan 2023 16:15:14 GMT
etag: "63b84912-8e0"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df489559868985b8815baa1cfaaff191
cb804ae84a7d8c2b6580c97caa484cfb515c1435
ecfca9383aa4ff0bc88dc975918610d1406ac9198e68d26a731a589b073b3ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
skillshare.eqcm.net/i/1265897/974608/4650
302 Found 220 B URL HTTP/2 skillshare.eqcm.net/i/1265897/974608/4650
IP
File type HTML document, ASCII text
Hash 2fb798be2f3c7fcd8c633c27e96d1185
e5f187b2655ff301299a833a5be8dd4c7258bb91
f5d5dfe37021b026c6f0c92ee46d6cb1433a1be3ba2178de96b57562e8fe3b26
GET /i/1265897/974608/4650 HTTP/1.1
Host: skillshare.eqcm.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/html; charset=utf-8
content-length: 220
location: https://www.ojrq.net/p/?return=https%3A%2F%2Fskillshare.eqcm.net%2Fi%2F1265897%2F974608%2F4650%3Flevel%3D1%26srcref%3Dhttps%253A%252F%252Fwww.flippingheck.com%252F&cid=4650&tpsync=no
set-cookie: AWSALB=bjR58NNR6o0iff7iuWsrZ5b1/Z7NyhTKb0sKdfTZs3xB0q+pSlxfwOfPEQ/KGm6wtHP2Pw4b1TVXCRGz7BmnMj8hCzQhYsUxG0kImeaW8MW8e4S/2MNzpmbQt5N5; Expires=Fri, 20 Jan 2023 23:09:00 GMT; Path=/
AWSALBCORS=bjR58NNR6o0iff7iuWsrZ5b1/Z7NyhTKb0sKdfTZs3xB0q+pSlxfwOfPEQ/KGm6wtHP2Pw4b1TVXCRGz7BmnMj8hCzQhYsUxG0kImeaW8MW8e4S/2MNzpmbQt5N5; Expires=Fri, 20 Jan 2023 23:09:00 GMT; Path=/; SameSite=None; Secure
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Fri, 13 Jan 2023 23:09:00 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2019/04/feat-reasons-why-employees-not-productive.jpg
200 OK 117 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2019/04/feat-reasons-why-employees-not-productive.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 770x515, components 3\012- data
Size 117 kB (117435 bytes)
Hash 9f76a3cd3d2ea6184fb47bd0832833fb
5b72f9677bdc828864e4e09839f05e4eac01e950
4cf79ee8bd409a348b6f898e85101eb6d01353213b3048a07d5e9e6c358e3540
GET /wp-content/uploads/2019/04/feat-reasons-why-employees-not-productive.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 117435
last-modified: Sun, 30 Jan 2022 09:28:44 GMT
etag: "61f65a4c-1cabb"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2018/06/feat-fix-disagreements-at-work.jpg
200 OK 127 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2018/06/feat-fix-disagreements-at-work.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 770x515, components 3\012- data
Size 127 kB (126978 bytes)
Hash a795a765032abcbcd586079e6f0fea2c
102b8dbb9efaee7d03060e36ad55570529ffbf61
955869bfff35a0ac1f3c68d61fc85396e5f46213703dbc6c0326f45796b4dbf7
GET /wp-content/uploads/2018/06/feat-fix-disagreements-at-work.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 126978
last-modified: Sun, 30 Jan 2022 09:03:02 GMT
etag: "61f65446-1f002"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2019/08/cherry-food-fresh-890507.jpg
200 OK 136 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2019/08/cherry-food-fresh-890507.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 770x578, components 3\012- data
Size 136 kB (136410 bytes)
Hash d9f02efa1be296f50eb66c477e33440d
e894819f698236e89c3319b0ffd55b3ef3bf70fa
69d6f4e05aa49650e47bf7954ead9fd0c48d940edc4534a7ef8687799844d575
GET /wp-content/uploads/2019/08/cherry-food-fresh-890507.jpg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: image/jpeg
content-length: 136410
last-modified: Sun, 30 Jan 2022 09:38:15 GMT
etag: "61f65c87-214da"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
a.impactradius-go.com/display-ad/4650-974608
200 OK 29 kB URL HTTP/2 a.impactradius-go.com/display-ad/4650-974608
IP
File type JPEG image data, baseline, precision 8, 180x150, components 3\012- data
Hash 9991af4945410da2600d70424a231cba
dd4c3c62d1af0a579e77c2a728ad1788625a2445
1df343f174a3d9c41fd4572d086719b80c8e0f26e20e9ead08d7314c6ab7db62
GET /display-ad/4650-974608 HTTP/1.1
Host: a.impactradius-go.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 29022
last-modified: Tue, 12 Jan 2021 20:29:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 13 Jan 2023 23:09:01 GMT
cache-control: public,max-age=900,s-maxage=600
etag: "9991af4945410da2600d70424a231cba"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JoWt3uLVJU0_U63VEoswZH3albTvn-ZQ7VS0Tmcv0kGrovPd_5rxTQ==
X-Firefox-Spdy: h2
www.flippingheck.com/wp-includes/css/classic-themes.min.css
200 OK 616 B URL HTTP/2 www.flippingheck.com/wp-includes/css/classic-themes.min.css
IP
Hash 383acfc8b7da768cb94fdcbe629a3cdb
ce394cf58a838313690b7e59f34d9044d4b925d2
bf9d56ef305d7d9e7ce1a3b3269468016afa0d7795c1c3302420f7afbaab72a3
GET /wp-includes/css/classic-themes.min.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Fri, 04 Nov 2022 04:09:28 GMT
vary: Accept-Encoding
etag: W/"63649078-d9"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.ojrq.net/p/?return=https%3A%2F%2Fskillshare.eqcm.net%2Fi%2F1265897%2F974608%2F4650%3Flevel%3D1%26srcref%3Dhttps%253A%252F%252Fwww.flippingheck.com%252F&cid=4650&tpsync=no
302 Found 0 B URL HTTP/2 www.ojrq.net/p/?return=https%3A%2F%2Fskillshare.eqcm.net%2Fi%2F1265897%2F974608%2F4650%3Flevel%3D1%26srcref%3Dhttps%253A%252F%252Fwww.flippingheck.com%252F&cid=4650&tpsync=no
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/?return=https%3A%2F%2Fskillshare.eqcm.net%2Fi%2F1265897%2F974608%2F4650%3Flevel%3D1%26srcref%3Dhttps%253A%252F%252Fwww.flippingheck.com%252F&cid=4650&tpsync=no HTTP/1.1
Host: www.ojrq.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Fri, 13 Jan 2023 23:09:01 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
set-cookie: brwsr=44219729-9397-11ed-b3f5-1fb4dbc425b7; Domain=.ojrq.net; Path=/; Secure; Max-Age=62208000; Expires=Thu, 2 Jan 2025 23:09:01 GMT; HttpOnly; SameSite=None
location: https://skillshare.eqcm.net/i/1265897/974608/4650?level=1&srcref=https%3A%2F%2Fwww.flippingheck.com%2F&brwsr=44219729-9397-11ed-b3f5-1fb4dbc425b7&brwsrsig=xrt0s9UhnQhvRIa1NfQSrQy0XIoW9M
content-length: 0
date: Fri, 13 Jan 2023 23:09:01 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
skillshare.eqcm.net/i/1265897/974608/4650?level=1&srcref=https%3A%2F%2Fwww.flippingheck.com%2F&brwsr=44219729-9397-11ed-b3f5-1fb4dbc425b7&brwsrsig=xrt0s9UhnQhvRIa1NfQSrQy0XIoW9M
200 OK 50 B URL HTTP/2 skillshare.eqcm.net/i/1265897/974608/4650?level=1&srcref=https%3A%2F%2Fwww.flippingheck.com%2F&brwsr=44219729-9397-11ed-b3f5-1fb4dbc425b7&brwsrsig=xrt0s9UhnQhvRIa1NfQSrQy0XIoW9M
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 7db7a843f18dadb40f7947564560596c
4b966c390f5784fad88c2c8359a4715d14b8e815
ec34cd386427fe6deacf99f4fdbeea4b1d1ed25f505411650d7ceaa843a7fc63
GET /i/1265897/974608/4650?level=1&srcref=https%3A%2F%2Fwww.flippingheck.com%2F&brwsr=44219729-9397-11ed-b3f5-1fb4dbc425b7&brwsrsig=xrt0s9UhnQhvRIa1NfQSrQy0XIoW9M HTTP/1.1
Host: skillshare.eqcm.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/
Connection: keep-alive
Cookie: AWSALBCORS=bjR58NNR6o0iff7iuWsrZ5b1/Z7NyhTKb0sKdfTZs3xB0q+pSlxfwOfPEQ/KGm6wtHP2Pw4b1TVXCRGz7BmnMj8hCzQhYsUxG0kImeaW8MW8e4S/2MNzpmbQt5N5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:01 GMT
content-type: image/gif
content-length: 50
set-cookie: AWSALB=Q98eNTNPaW6qO1ltxHF1+dv7k6FkvnMHo1lC2FtXJWeBPw2iTz53lVrbv8R2DmZTh4JKCK9JZhdfS1MDTWftCVrtLNUN+erCu3L+cM6pPWqOzmDj5usHVsRXEtAf; Expires=Fri, 20 Jan 2023 23:09:01 GMT; Path=/
AWSALBCORS=Q98eNTNPaW6qO1ltxHF1+dv7k6FkvnMHo1lC2FtXJWeBPw2iTz53lVrbv8R2DmZTh4JKCK9JZhdfS1MDTWftCVrtLNUN+erCu3L+cM6pPWqOzmDj5usHVsRXEtAf; Expires=Fri, 20 Jan 2023 23:09:01 GMT; Path=/; SameSite=None; Secure
brwsr=44219729-9397-11ed-b3f5-1fb4dbc425b7; Domain=.eqcm.net; Path=/; Secure; Max-Age=62208000; Expires=Thu, 2 Jan 2025 23:09:01 GMT; HttpOnly; SameSite=None
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Fri, 13 Jan 2023 23:09:01 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
X-Firefox-Spdy: h2
www.flippingheck.com/wp-admin/admin-ajax.php
200 OK 550 B URL HTTP/2 www.flippingheck.com/wp-admin/admin-ajax.php
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e5c227347f10d939450eefa142f438aa
18ce593c11c29b41e22aabaa8c7019f65c0cca50
f699b01799cfe8d544e195291ab6fb8a8f4310d62ac2f1da52bbe3e00aa09743
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Origin: https://www.flippingheck.com
Content-Length: 74
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:01 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
pragma: no-cache
access-control-allow-origin: https://www.flippingheck.com
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff, nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
set-cookie: shield-notbot-nonce=09436d9582; expires=Fri, 13-Jan-2023 23:09:15 GMT; Max-Age=15; path=/; secure
icwp-wpsf-notbot=1673651640z8945914b710b2f6ce2b6fac75ab84c7f67a96c13; expires=Fri, 13-Jan-2023 23:14:00 GMT; Max-Age=299; path=/; secure
x-httpd-modphp: 1
x-xss-protection: 1; mode=block
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4667
Expires: Sat, 14 Jan 2023 00:26:48 GMT
Date: Fri, 13 Jan 2023 23:09:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4667
Expires: Sat, 14 Jan 2023 00:26:48 GMT
Date: Fri, 13 Jan 2023 23:09:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4667
Expires: Sat, 14 Jan 2023 00:26:48 GMT
Date: Fri, 13 Jan 2023 23:09:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4667
Expires: Sat, 14 Jan 2023 00:26:48 GMT
Date: Fri, 13 Jan 2023 23:09:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F39503f4d-fcf8-45b4-ae61-51c447039195.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F39503f4d-fcf8-45b4-ae61-51c447039195.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27b277cb6a1a8bb75c4478c92536262e
f832aa86e17caedb066063c1b0dee457ecbc227b
ce7b781081903eb676c9b7f43572b8d45cebb01475b05e693f4a8e8674da2852
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F39503f4d-fcf8-45b4-ae61-51c447039195.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6722
x-amzn-requestid: d6d57a8b-a053-444d-84c7-b6337902d62e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eq0-QF_6oAMFTyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c101f4-08602bdd546582c72659cd4e;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 07:02:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cVrJeRRbgzxCSLm2P0VTTRr-0GW1nclrZWyBrMBZ4jck8up3MNkn7Q==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 07:12:20 GMT
age: 57401
etag: "f832aa86e17caedb066063c1b0dee457ecbc227b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: 9f388939-cfb7-432e-a921-e9188736bb45
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eTw5QGZ6oAMFxQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b7c83b-4f9d5bfc30e5ee126333d54e;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 07:05:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KYm3Isapf3670wIeWAet4FHx_jth_lxT3hNJONRFP-fyEUdrxL4-8w==
via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 12:37:32 GMT
age: 37889
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64ba27a2f0a3bc61bd325f1fb317b755
c65c58476b66cbb6269ba1d8412d270a0a003ae3
5f7f03752f8a7c8c08d92512ae93b193ea37f59354503c3129d33fd2910f87e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9135
x-amzn-requestid: 2c5e9de0-9244-43ac-b7c4-712cbcf7038c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAnoG6roAMFzgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7afd-7fb640b30bab63bc1979a173;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:14:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RnAGo4OuBl5UjyOlUOJqu2nlFLHTOe0ETxokWtbI4frbpkNVnIBSew==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:33:06 GMT
age: 70555
etag: "c65c58476b66cbb6269ba1d8412d270a0a003ae3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9c918c3f0569cbf09fdcd8998e2fc00
ad06e348d49e8ae0550d922b50bc2a1d4905457a
8f96e49cf0dbbad59d260d0f991d79eb72ea25dcc0caa5ba4480056bd918d07d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5371
x-amzn-requestid: fcbafc8b-5b89-49e6-8ebd-157cb3b24a55
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qnERXoAMFsZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce43-3eb3b4d84dbf415a3dec1308;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AbaES_6874zaabJY_z0_FOZfJx86Zsv-osNxWqzef8DDNyelo0HRtQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:01 GMT
age: 4800
etag: "ad06e348d49e8ae0550d922b50bc2a1d4905457a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69cd0f59-3b24-4742-958c-e856dc02789f.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69cd0f59-3b24-4742-958c-e856dc02789f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7055d5db8f2f9c89dfab16c4fe3f11a5
29566fe8eb5c9d12b0584642dac170c93ba80b90
6510cf0eda1d062df3b81b2b797e9bfca73040cac874e80ae9b8ff70b0407302
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69cd0f59-3b24-4742-958c-e856dc02789f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 28db68a0-ab23-4bef-b415-54120d187f80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZ0gWEF6IAMFT7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba3468-23b24e4a2c863aed25e0c81e;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 03:11:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lkGbybdV4gBs1HNNzdVIBzyA5Akcx2T4YZX9Q1kR847Q33pG8sJ67w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:18 GMT
age: 4783
etag: "29566fe8eb5c9d12b0584642dac170c93ba80b90"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2ecf6b3-8443-4b47-96b6-2695fa885f0d.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2ecf6b3-8443-4b47-96b6-2695fa885f0d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3c35722c1c8a0b7a17b5a48a352aa64
4a939794eb33d9fb1b2cc56ca92f683a7d28e407
073d355bfc201c7feb4af2d1fac623fe7803f081c28467fa72b363074b0446a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2ecf6b3-8443-4b47-96b6-2695fa885f0d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7437
x-amzn-requestid: 0efc1457-5919-4244-9837-6e75d03ef1d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAd0F0poAMF6PA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7abe-24df70ad7e1811a744a7c9de;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezdnQ-2RPpSESm42QCywHIZf4AmanMmy2f19NcUhzQ-PRjsFQfLNkg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:43:23 GMT
age: 69938
etag: "4a939794eb33d9fb1b2cc56ca92f683a7d28e407"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-G86TMY7CXL>m=2oe1a1&_p=1668879743&cid=103389009.1673651325&ul=en-us&sr=1280x1024&_s=1&sid=1673651324&sct=1&seg=0&dl=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&dt=Toxic%20People%20%7C%20Flipping%20Heck!&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-G86TMY7CXL>m=2oe1a1&_p=1668879743&cid=103389009.1673651325&ul=en-us&sr=1280x1024&_s=1&sid=1673651324&sct=1&seg=0&dl=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&dt=Toxic%20People%20%7C%20Flipping%20Heck!&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-G86TMY7CXL>m=2oe1a1&_p=1668879743&cid=103389009.1673651325&ul=en-us&sr=1280x1024&_s=1&sid=1673651324&sct=1&seg=0&dl=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&dt=Toxic%20People%20%7C%20Flipping%20Heck!&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.flippingheck.com
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.flippingheck.com
date: Fri, 13 Jan 2023 23:09:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a774e22bef003237a44ad3d983ae3ed2
765f806100daeb841c8cfb5f0a751c01e42e5158
2908bc0773dcf0b0a92761d19c965b6c3b59085965ecc7b652807bd7239e4d76
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2908BC0773DCF0B0A92761D19C965B6C3B59085965ECC7B652807BD7239E4D76"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17886
Expires: Sat, 14 Jan 2023 04:07:07 GMT
Date: Fri, 13 Jan 2023 23:09:01 GMT
Connection: keep-alive
www.effectivecreativeformats.com/c5e3d33043265fd3e443031e1ac2145a/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.effectivecreativeformats.com/c5e3d33043265fd3e443031e1ac2145a/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26963), with no line terminators
Hash c9ff44b62ac449c0db1361bb67835d72
7a81d180fb9f4150612c870167a1ec721a1af268
5ce39f890222a58a66795a10b7ed2ccdbfef20720c2172ee4a93fd81c45931f7
Analyzer Verdict Alert quad9 Sinkholed
GET /c5e3d33043265fd3e443031e1ac2145a/invoke.js HTTP/1.1
Host: www.effectivecreativeformats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 13 Jan 2023 23:09:01 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9e4a68ff0872941baea0a72145796556
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.flippingheck.com/wp-content/themes/FH2017/images/cant-show-content.gif
200 OK 18 kB URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/images/cant-show-content.gif
IP
File type GIF image data, version 89a, 340 x 340\012- data
Hash 000e66a2d40ca6a118f72a576b303d0e
6a9ceb918ce3bfdc1a9055b38286e2fb7e994851
53140899b259b8ac352ddd331e17fe8f397118ce6eaecd5559247eee80cc6624
GET /wp-content/themes/FH2017/images/cant-show-content.gif HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/wp-content/themes/FH2017/style.css
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2; _ga_G86TMY7CXL=GS1.1.1673651324.1.0.1673651324.0.0.0; _ga=GA1.1.103389009.1673651325; icwp-wpsf-notbot=1673651640z8945914b710b2f6ce2b6fac75ab84c7f67a96c13; visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:01 GMT
content-type: image/gif
content-length: 18400
last-modified: Wed, 09 Feb 2022 16:01:36 GMT
etag: "6203e560-47e0"
expires: Sat, 13 Jan 2024 23:09:01 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/assets/footer-sprite.png
200 OK 2.7 kB URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/assets/footer-sprite.png
IP
File type PNG image data, 100 x 47, 8-bit colormap, non-interlaced\012- data
Hash 629e36e03de71850938adbcacd3864a2
fdf53959facbecfce18e71704764bdff9258b416
69df2a7229b9c3272d468b4bbabcee069678b4785b506f6a8777ce9ec823d0d9
GET /wp-content/themes/FH2017/assets/footer-sprite.png HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/wp-content/themes/FH2017/style.css
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2; _ga_G86TMY7CXL=GS1.1.1673651324.1.0.1673651324.0.0.0; _ga=GA1.1.103389009.1673651325; icwp-wpsf-notbot=1673651640z8945914b710b2f6ce2b6fac75ab84c7f67a96c13; visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:01 GMT
content-type: image/png
content-length: 2692
last-modified: Wed, 09 Feb 2022 16:01:35 GMT
etag: "6203e55f-a84"
expires: Sat, 13 Jan 2024 23:09:01 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6f108bb019d645355c548707ea94a447
787d17351c045a2ff02fe75fbf561a91bf621571
d57367c04f687edb12684c52226bbff1786f501f3d4b67ee16a2364517c825ca
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=140986
Date: Fri, 13 Jan 2023 23:09:02 GMT
Etag: "63c15d18-1d7"
Expires: Sun, 15 Jan 2023 14:18:48 GMT
Last-Modified: Fri, 13 Jan 2023 13:31:04 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ahuk7ojrMsavueZicmkRocNBmfxV4SXi9IFlXVa9yi6elef92BWoMQ==
Age: 2864
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 012a0a0840437720eaffbd25e82a1782
c1278c3385d26849365095a77ecb264393b37df6
4f14cc0c1789318b8501e7ab9cb663beb7eb235fd386a77bb6b881e1ddad7221
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.flippingheck.com
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.flippingheck.com
access-control-allow-credentials: true
set-cookie: uid_id2=92e17fca-8e9f-4b79-a3fc-4b396611282a:2:1; expires=Mon, 10 Jan 2033 23:09:02 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
assets.mailerlite.com/jsonp/53918/forms?callback=ml.fn.renderPopupsAndPromotions
200 OK 2.4 kB URL HTTP/2 assets.mailerlite.com/jsonp/53918/forms?callback=ml.fn.renderPopupsAndPromotions
IP
Hash cd18649b24c427e1033407e7587f512e
0ed6f9c8fdb3156bdab53e98e49cb368f6f4b788
5549b63580851ae76b5311a40c9d2b74f997d4847d653d3d49ee1eb2eebefec4
GET /jsonp/53918/forms?callback=ml.fn.renderPopupsAndPromotions HTTP/1.1
Host: assets.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:01 GMT
content-type: text/javascript; charset=UTF-8
cache-control: immutable, max-age=60, public, s-maxage=60
x-cacheable: 1
access-control-allow-origin: *
x-cache: HIT
x-cache-hits: 1
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: EXPIRED
last-modified: Fri, 13 Jan 2023 15:37:11 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7891cc16bae90b51-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2023/01/person-looking-at-a-world-map-on-a-laptop-screen-e1673403950486-75x75.jpeg
200 OK 2.3 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2023/01/person-looking-at-a-world-map-on-a-laptop-screen-e1673403950486-75x75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 75x75, components 3\012- data
Hash 46e5b3ca8594aa56f689cad6c088d316
2d658c52055cab7701bae93b89802df4d7151211
2518962fbb54b059b37d08e95fc62750681e6e7f966495e604daa36b9b482ff8
GET /wp-content/uploads/2023/01/person-looking-at-a-world-map-on-a-laptop-screen-e1673403950486-75x75.jpeg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2; _ga_G86TMY7CXL=GS1.1.1673651324.1.0.1673651324.0.0.0; _ga=GA1.1.103389009.1673651325; icwp-wpsf-notbot=1673651640z8945914b710b2f6ce2b6fac75ab84c7f67a96c13; visited=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: image/jpeg
content-length: 2290
last-modified: Wed, 11 Jan 2023 02:25:50 GMT
etag: "63be1e2e-8f2"
expires: Sat, 13 Jan 2024 23:09:02 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2023/01/woman-lying-down-on-sauna-bench-with-her-head-on-a-75x75.jpeg
200 OK 2.9 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2023/01/woman-lying-down-on-sauna-bench-with-her-head-on-a-75x75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 75x75, components 3\012- data
Hash d4b2a5745cbba35c71ee682c1efbfb40
d3d3026db31fac530a7407dae1c454b7b2754a8a
010b3fbfb9ff1dc8df5b07927167635e93fc7cee7a86177909b5960a1d7a7955
GET /wp-content/uploads/2023/01/woman-lying-down-on-sauna-bench-with-her-head-on-a-75x75.jpeg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2; _ga_G86TMY7CXL=GS1.1.1673651324.1.0.1673651324.0.0.0; _ga=GA1.1.103389009.1673651325; icwp-wpsf-notbot=1673651640z8945914b710b2f6ce2b6fac75ab84c7f67a96c13; visited=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: image/jpeg
content-length: 2854
last-modified: Mon, 02 Jan 2023 07:33:53 GMT
etag: "63b288e1-b26"
expires: Sat, 13 Jan 2024 23:09:02 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2023/01/person-filling-out-a-retirement-plan-form-75x75.jpeg
200 OK 3.2 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2023/01/person-filling-out-a-retirement-plan-form-75x75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 75x75, components 3\012- data
Hash 32f92142a1ca672abb82bdee1d65544e
3fd1ad1e17b96e651b774f11d4a6214d1983d99f
51b943b42941d0f615536d6431c729e5b130be1db4aff2584d7cbcbf9e386815
GET /wp-content/uploads/2023/01/person-filling-out-a-retirement-plan-form-75x75.jpeg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2; _ga_G86TMY7CXL=GS1.1.1673651324.1.0.1673651324.0.0.0; _ga=GA1.1.103389009.1673651325; icwp-wpsf-notbot=1673651640z8945914b710b2f6ce2b6fac75ab84c7f67a96c13; visited=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: image/jpeg
content-length: 3224
last-modified: Mon, 02 Jan 2023 07:02:18 GMT
etag: "63b2817a-c98"
expires: Sat, 13 Jan 2024 23:09:02 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 56b73fcf384fe9531ecae102d3581985
49d236d12bb3a9fd393fd269fcc35acf05b07963
1602d90a3023dc7789136958d1bb92916fda31b8386234e9bc53c41e66ed14f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2164
Cache-Control: max-age=160429
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:02 GMT
Etag: "63c1abc7-1d7"
Expires: Sun, 15 Jan 2023 19:42:51 GMT
Last-Modified: Fri, 13 Jan 2023 19:06:47 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
www.flippingheck.com/wp-content/plugins/recent-posts-widget-with-thumbnails/public.css
200 OK 3.3 kB URL HTTP/2 www.flippingheck.com/wp-content/plugins/recent-posts-widget-with-thumbnails/public.css
IP
File type ASCII text, with very long lines (404)
Hash 5e45d9e0f1cb4f01aeb4fc18dd4f3ba0
6f93d8d9b7714cd664bb9b5f5cc9f325e0901e94
6d4e856fc8791b1ecd4bc1d5c4ee87803aacd3d709c2ba29d2f2b46c7ad3d98c
GET /wp-content/plugins/recent-posts-widget-with-thumbnails/public.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Thu, 10 Feb 2022 23:33:48 GMT
vary: Accept-Encoding
etag: W/"6205a0dc-43a"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/uploads/2023/01/person-wearing-a-black-vr-headset-in-front-of-a-co-e1672640467723-75x75.jpeg
200 OK 2.1 kB URL HTTP/2 www.flippingheck.com/wp-content/uploads/2023/01/person-wearing-a-black-vr-headset-in-front-of-a-co-e1672640467723-75x75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 75x75, components 3\012- data
Hash 7560fd51d0da9bf4ca22c8ee9ebbc0cb
9f30411af1561feadb55976b10f5361d802bb4d9
1370779dba825ffb87811c2f1572b425aa62923e04e6187b31a80c957b0fef64
GET /wp-content/uploads/2023/01/person-wearing-a-black-vr-headset-in-front-of-a-co-e1672640467723-75x75.jpeg HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2; _ga_G86TMY7CXL=GS1.1.1673651324.1.0.1673651324.0.0.0; _ga=GA1.1.103389009.1673651325; icwp-wpsf-notbot=1673651640z8945914b710b2f6ce2b6fac75ab84c7f67a96c13; visited=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: image/jpeg
content-length: 2069
last-modified: Mon, 02 Jan 2023 06:21:07 GMT
etag: "63b277d3-815"
expires: Sat, 13 Jan 2024 23:09:02 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
assets.mailerlite.com/css/universal.css
200 OK 391 B URL HTTP/2 assets.mailerlite.com/css/universal.css
IP
Hash e591c282a2e54069df59ec2665ce40f4
d20d2c3d1d1b53f96071da8f0a2052eaaa107d9f
9df8ddbedea0a14a80fd35bc9d0e282fbf369f6c881e649506ca6c4452cd7ae4
GET /css/universal.css HTTP/1.1
Host: assets.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:01 GMT
content-type: text/css
last-modified: Fri, 13 Jan 2023 13:35:48 GMT
etag: W/"63c15e34-3a3"
cache-control: public, max-age=432000
age: 162
x-cache: HIT
x-cache-hits: 21
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Wed, 18 Jan 2023 23:09:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7891cc16aae10b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
assets.mailerlite.com/jsonp/53918/forms/9syUBL?callback=ml.fn.renderEmbeddedForm
200 OK 5.1 kB URL HTTP/2 assets.mailerlite.com/jsonp/53918/forms/9syUBL?callback=ml.fn.renderEmbeddedForm
IP
File type HTML document, ASCII text, with very long lines (45069), with no line terminators
Hash 72609166f04fd45f4519040c1f09d708
0a2552eb6b79b2184366c99a8f6e685e0638691c
b345f1c4b587284f024920e6cd1e76c7db7c95eaf011ac2e5deef1e63cf2a77e
GET /jsonp/53918/forms/9syUBL?callback=ml.fn.renderEmbeddedForm HTTP/1.1
Host: assets.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: text/javascript; charset=UTF-8
cache-control: immutable, max-age=60, public, s-maxage=60
x-cacheable: 1
access-control-allow-origin: *
x-cache: HIT
x-cache-hits: 2
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: MISS
last-modified: Fri, 13 Jan 2023 23:09:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7891cc16bae80b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.mailerlite.com/fonts/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.mailerlite.com/fonts/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /fonts/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.flippingheck.com
Connection: keep-alive
Referer: https://fonts.mailerlite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: font/woff2
content-length: 44856
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000
expires: Sat, 13 Jan 2024 23:09:02 GMT
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
cf-ray: 7891cc19ad130b51-OSL
X-Firefox-Spdy: h2
fonts.mailerlite.com/css?family=Roboto:400,400i,700,700i|Merriweather:400,900i,900,700i,700,300,300i,400i|Lato:400,400i,700,700i|Montserrat:400,400i,700,700i|Montserrat+Alternates:400,400i,700,700i|Open+Sans:400,400i,700,700i|PT+Sans:400,400i,700,700i|Source+Sans+Pro:400,400i,700,700i|Roboto+Slab:400,700|Ubuntu:400,400i,700,700i|Titillium+Web:400,400i,700,700i|Nunito:400,400i,700,700i|Cabin:400,400i,700,700i|Oswald:400,700|Work+Sans:400,700|Exo:400,400i,700,700i|Comfortaa:400,700|Raleway:400,400i,700,700i|Oxygen:400,700|Poppins:400,400i,700,700i|Playfair+Display:400,400i,700,700i|Shadows+Into+Light+Two|PT+Serif:400,400italic,700,700italic|Josefin+Slab:400,400italic,700,700italic|Arvo:400,700,700italic,400italic|Vollkorn:400,400italic,700,700italic|Karla:400,400italic,700,700italic|Noto+Sans:400,400italic,700,700italic|Barlow+Condensed:400,400italic,700,700italic|Anton|Inter:400,700|Abril+Fatface|Yeseva+One|Poiret+One|Marck+Script|Pacifico|Fira+Sans|Rubik&subset=cyrillic,cyrillic-ext,latin-ext
200 OK 7.1 kB URL HTTP/2 fonts.mailerlite.com/css?family=Roboto:400,400i,700,700i|Merriweather:400,900i,900,700i,700,300,300i,400i|Lato:400,400i,700,700i|Montserrat:400,400i,700,700i|Montserrat+Alternates:400,400i,700,700i|Open+Sans:400,400i,700,700i|PT+Sans:400,400i,700,700i|Source+Sans+Pro:400,400i,700,700i|Roboto+Slab:400,700|Ubuntu:400,400i,700,700i|Titillium+Web:400,400i,700,700i|Nunito:400,400i,700,700i|Cabin:400,400i,700,700i|Oswald:400,700|Work+Sans:400,700|Exo:400,400i,700,700i|Comfortaa:400,700|Raleway:400,400i,700,700i|Oxygen:400,700|Poppins:400,400i,700,700i|Playfair+Display:400,400i,700,700i|Shadows+Into+Light+Two|PT+Serif:400,400italic,700,700italic|Josefin+Slab:400,400italic,700,700italic|Arvo:400,700,700italic,400italic|Vollkorn:400,400italic,700,700italic|Karla:400,400italic,700,700italic|Noto+Sans:400,400italic,700,700italic|Barlow+Condensed:400,400italic,700,700italic|Anton|Inter:400,700|Abril+Fatface|Yeseva+One|Poiret+One|Marck+Script|Pacifico|Fira+Sans|Rubik&subset=cyrillic,cyrillic-ext,latin-ext
IP
Hash e88234546a1c1ac94997d428bbca0d7f
716524e66286ec3a486be7e48311c5456133513b
638eae26e25baf506e5c154085d1cd484fa36b0291f6cbe24eb336ac131ddc4e
GET /css?family=Roboto:400,400i,700,700i|Merriweather:400,900i,900,700i,700,300,300i,400i|Lato:400,400i,700,700i|Montserrat:400,400i,700,700i|Montserrat+Alternates:400,400i,700,700i|Open+Sans:400,400i,700,700i|PT+Sans:400,400i,700,700i|Source+Sans+Pro:400,400i,700,700i|Roboto+Slab:400,700|Ubuntu:400,400i,700,700i|Titillium+Web:400,400i,700,700i|Nunito:400,400i,700,700i|Cabin:400,400i,700,700i|Oswald:400,700|Work+Sans:400,700|Exo:400,400i,700,700i|Comfortaa:400,700|Raleway:400,400i,700,700i|Oxygen:400,700|Poppins:400,400i,700,700i|Playfair+Display:400,400i,700,700i|Shadows+Into+Light+Two|PT+Serif:400,400italic,700,700italic|Josefin+Slab:400,400italic,700,700italic|Arvo:400,700,700italic,400italic|Vollkorn:400,400italic,700,700italic|Karla:400,400italic,700,700italic|Noto+Sans:400,400italic,700,700italic|Barlow+Condensed:400,400italic,700,700italic|Anton|Inter:400,700|Abril+Fatface|Yeseva+One|Poiret+One|Marck+Script|Pacifico|Fira+Sans|Rubik&subset=cyrillic,cyrillic-ext,latin-ext HTTP/1.1
Host: fonts.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groot.mailerlite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: private, max-age=86400, stale-while-revalidate=604800
vary: Accept-Encoding
server: cloudflare
cf-ray: 7891cc18dc6f0b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
bmc-cdn.nyc3.digitaloceanspaces.com/Fonts/65d75eb0-2601-4da5-a9a4-9ee67a470a59.woff
200 OK 22 kB URL HTTP/2 bmc-cdn.nyc3.digitaloceanspaces.com/Fonts/65d75eb0-2601-4da5-a9a4-9ee67a470a59.woff
IP
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format, TrueType, length 22051, version 1.0\012- data
Hash edc05a13a301b3a6e023292eb0762d1c
df8a2b7200cb4b9eb5f73c7fd2ff67d92ff5d833
ab4883df74435cbd0eb4d9ddfa492e7cc2a4be7ceff47fcefe82199aed9c4ed0
GET /Fonts/65d75eb0-2601-4da5-a9a4-9ee67a470a59.woff HTTP/1.1
Host: bmc-cdn.nyc3.digitaloceanspaces.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.flippingheck.com
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 22051
last-modified: Wed, 02 May 2018 07:26:09 GMT
x-rgw-object-type: Normal
etag: "edc05a13a301b3a6e023292eb0762d1c"
cache-control: max-age=60000
x-amz-request-id: tx000000000000002e2024c-0063c1e48e-2c6c95a7-nyc3a
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 0
content-type: application/font-woff
date: Fri, 13 Jan 2023 23:09:02 GMT
age: 0
accept-ranges: bytes
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
strict-transport-security: max-age=15552000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 13 Jan 2023 22:41:08 GMT
expires: Sat, 14 Jan 2023 00:41:08 GMT
cache-control: public, max-age=7200
age: 1674
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 16fdc7481eb2bf489762b6b6ad440216
8ba97c0fac5d5edf8ae49bccb0ec2ba8e251f646
465edacc998277376411200c9d9e30fdc1290717d1c5857ff226e73a33bfd516
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 16fdc7481eb2bf489762b6b6ad440216
8ba97c0fac5d5edf8ae49bccb0ec2ba8e251f646
465edacc998277376411200c9d9e30fdc1290717d1c5857ff226e73a33bfd516
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 16fdc7481eb2bf489762b6b6ad440216
8ba97c0fac5d5edf8ae49bccb0ec2ba8e251f646
465edacc998277376411200c9d9e30fdc1290717d1c5857ff226e73a33bfd516
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
preventionconsciousflea.com/watch.70903478555.js?key=c5e3d33043265fd3e443031e1ac2145a&kw=%5B%22toxic%22%2C%22people%22%2C%22flipping%22%2C%22heck%22%5D&refer=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&tz=0&dev=e&res=12.1055&uuid=92e17fca-8e9f-4b79-a3fc-4b396611282a%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 preventionconsciousflea.com/watch.70903478555.js?key=c5e3d33043265fd3e443031e1ac2145a&kw=%5B%22toxic%22%2C%22people%22%2C%22flipping%22%2C%22heck%22%5D&refer=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&tz=0&dev=e&res=12.1055&uuid=92e17fca-8e9f-4b79-a3fc-4b396611282a%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.70903478555.js?key=c5e3d33043265fd3e443031e1ac2145a&kw=%5B%22toxic%22%2C%22people%22%2C%22flipping%22%2C%22heck%22%5D&refer=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&tz=0&dev=e&res=12.1055&uuid=92e17fca-8e9f-4b79-a3fc-4b396611282a%3A2%3A1 HTTP/1.1
Host: preventionconsciousflea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.flippingheck.com
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Fri, 13 Jan 2023 23:09:02 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.flippingheck.com
Access-Control-Allow-Origin: https://www.flippingheck.com
Access-Control-Allow-Credentials: true
Location: https://preventionconsciousflea.com/watch.70903478555.js?key=c5e3d33043265fd3e443031e1ac2145a&kw=%5B%22toxic%22%2C%22people%22%2C%22flipping%22%2C%22heck%22%5D&refer=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&tz=0&dev=e&res=12.1055&uuid=92e17fca-8e9f-4b79-a3fc-4b396611282a%3A2%3A1&shu=1694450d9e17812f6fdbf72a24bf8b9d200ed77c0012762d4187f688cc46b7b42766c5129632ef23fc6f5cb41164bf90fee1644daca456b9c434f6c082089759ab57d2d73fa587909fa8f69a29b50f06a8f38d4ecf545da2053a8f96b1&pst=1673651402&rmtc=t
Set-Cookie: u_pl=17411512; expires=Sat, 14 Jan 2023 23:09:02 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzQxMTUxMiwiayI6ImM1ZTNkMzMwNDMyNjVmZDNlNDQzMDMxZTFhYzIxNDVhIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTA0NzU1LCJwaWQiOjQ4OTY2NSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjUsInB0Ijo0LCJwayI6ImVxbXc1ZDhyIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3LmZsaXBwaW5naGVjay5jb20vdGFnL3RveGljLXBlb3BsZS8ifX0.I6zC3iVfnG17ufwOffFj1QB-dZpdGePJ-YPosYbxUVE; expires=Fri, 13 Jan 2023 23:10:02 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ec14295a2a200fa8fa8bd67e07f17f87
Strict-Transport-Security: max-age=0; includeSubdomains
www.flippingheck.com/wp-content/themes/FH2017/favicon.ico
200 OK 1.2 kB URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 0d92edc2500e978f58095cc3101b350e
adf5c1be4064ac4a03f9ea1c498332eadb4c8ca7
22e72e36dba1bef76bc1e85163c6cd088cfa97ef73f8907b645747fc44e8d08b
GET /wp-content/themes/FH2017/favicon.ico HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2; _ga_G86TMY7CXL=GS1.1.1673651324.1.0.1673651324.0.0.0; _ga=GA1.1.103389009.1673651325; icwp-wpsf-notbot=1673651640z8945914b710b2f6ce2b6fac75ab84c7f67a96c13; visited=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no; dom3ic8zudi28v8lr6fgphwffqoz0j6c=92e17fca-8e9f-4b79-a3fc-4b396611282a%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Wed, 09 Feb 2022 16:01:31 GMT
etag: "6203e55b-47e"
expires: Sat, 13 Jan 2024 23:09:02 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (4885)
Hash 475983d8a30ff291a6895894376f4110
20e9c08c20a6faa43e2054a9e6083bf44a9ffd20
827825e72888de5088e41664dcd4cace78b88df7fef91559d110c9fae8c425a9
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 13 Jan 2023 23:09:02 GMT
expires: Fri, 13 Jan 2023 23:09:02 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 8812050574545900006
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49374
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 16fdc7481eb2bf489762b6b6ad440216
8ba97c0fac5d5edf8ae49bccb0ec2ba8e251f646
465edacc998277376411200c9d9e30fdc1290717d1c5857ff226e73a33bfd516
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
preventionconsciousflea.com/watch.70903478555.js?key=c5e3d33043265fd3e443031e1ac2145a&kw=%5B%22toxic%22%2C%22people%22%2C%22flipping%22%2C%22heck%22%5D&refer=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&tz=0&dev=e&res=12.1055&uuid=92e17fca-8e9f-4b79-a3fc-4b396611282a%3A2%3A1&shu=1694450d9e17812f6fdbf72a24bf8b9d200ed77c0012762d4187f688cc46b7b42766c5129632ef23fc6f5cb41164bf90fee1644daca456b9c434f6c082089759ab57d2d73fa587909fa8f69a29b50f06a8f38d4ecf545da2053a8f96b1&pst=1673651402&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 preventionconsciousflea.com/watch.70903478555.js?key=c5e3d33043265fd3e443031e1ac2145a&kw=%5B%22toxic%22%2C%22people%22%2C%22flipping%22%2C%22heck%22%5D&refer=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&tz=0&dev=e&res=12.1055&uuid=92e17fca-8e9f-4b79-a3fc-4b396611282a%3A2%3A1&shu=1694450d9e17812f6fdbf72a24bf8b9d200ed77c0012762d4187f688cc46b7b42766c5129632ef23fc6f5cb41164bf90fee1644daca456b9c434f6c082089759ab57d2d73fa587909fa8f69a29b50f06a8f38d4ecf545da2053a8f96b1&pst=1673651402&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2539)
Hash d7a467a17dabc9d503554c6068ce8e90
a941110fdad753f86ed6fdeaab1b922bf7968119
0d1390b19926347a078f6278064a6ad951b3a3ecbeeba7bd65c25370cd680d82
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.70903478555.js?key=c5e3d33043265fd3e443031e1ac2145a&kw=%5B%22toxic%22%2C%22people%22%2C%22flipping%22%2C%22heck%22%5D&refer=https%3A%2F%2Fwww.flippingheck.com%2Ftag%2Ftoxic-people%2F&tz=0&dev=e&res=12.1055&uuid=92e17fca-8e9f-4b79-a3fc-4b396611282a%3A2%3A1&shu=1694450d9e17812f6fdbf72a24bf8b9d200ed77c0012762d4187f688cc46b7b42766c5129632ef23fc6f5cb41164bf90fee1644daca456b9c434f6c082089759ab57d2d73fa587909fa8f69a29b50f06a8f38d4ecf545da2053a8f96b1&pst=1673651402&rmtc=t HTTP/1.1
Host: preventionconsciousflea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.flippingheck.com
Referer: https://www.flippingheck.com/
Connection: keep-alive
Cookie: u_pl=17411512; ain=eyJhbGciOiJIUzI1NiJ9.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.I6zC3iVfnG17ufwOffFj1QB-dZpdGePJ-YPosYbxUVE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Fri, 13 Jan 2023 23:09:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.flippingheck.com
Access-Control-Allow-Origin: https://www.flippingheck.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=92e17fca-8e9f-4b79-a3fc-4b396611282a:2:1; expires=Fri, 20 Jan 2023 23:09:02 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 14 Jan 2023 23:09:02 GMT; secure; SameSite=None
uncs=1; expires=Sat, 14 Jan 2023 23:09:02 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sat, 14 Jan 2023 23:09:02 GMT; secure; SameSite=None
uncs5=1; expires=Sat, 14 Jan 2023 23:09:02 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ffa47adf15c0b018ce7baa6527f7bab4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-185917-3&cid=103389009.1673651325&jid=85698942&gjid=1846268335&_gid=194180968.1673651327&_u=YADAAUAAAAAAACAAI~&z=691849176
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-185917-3&cid=103389009.1673651325&jid=85698942&gjid=1846268335&_gid=194180968.1673651327&_u=YADAAUAAAAAAACAAI~&z=691849176
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-185917-3&cid=103389009.1673651325&jid=85698942&gjid=1846268335&_gid=194180968.1673651327&_u=YADAAUAAAAAAACAAI~&z=691849176 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.flippingheck.com
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.flippingheck.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 13 Jan 2023 23:09:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7f3323bd5432744acab34999d6d1c347
7bfc8354b8767d0938fbb1ad00ce1f66c4c0b7a7
9d2d4cdfdd9030587ddf9ccba0745a91a43840c7efc262960fa67597cdc25ec2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9D2D4CDFDD9030587DDF9CCBA0745A91A43840C7EFC262960FA67597CDC25EC2"
Last-Modified: Wed, 11 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15332
Expires: Sat, 14 Jan 2023 03:24:35 GMT
Date: Fri, 13 Jan 2023 23:09:03 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aa60c680c7a1735cdaea7e7b08e7fa92
fdf5e35c5ccb7f1c8bc43bcbe9fa5d3a9284c613
d0f0833a46c376208ad78cafb1077c56f0c5465386b676fc075b77b13e9aa31f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f96f3b88eebd362c0208a60d27e28068
f244f8dfbc2677fbddcf0024ff7cf343e24205bb
9b3586a498232da2b246b2bd158d7fd75eb9b4ac00ed750bbe670f1b54fe0f2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
groot.mailerlite.com/js/w/webforms.min.js?v982545f425161d5f5c95b96ab6c34e1b
200 OK 4.0 kB URL HTTP/2 groot.mailerlite.com/js/w/webforms.min.js?v982545f425161d5f5c95b96ab6c34e1b
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash a5b7ef390fd14735142e4e1054a81129
732cd75b7f5b73ce35270caaeec8f74613e3ada9
a7b66b180d38cb6a32ff72de791745e696613a7de46affe7758fd372dd05e8eb
GET /js/w/webforms.min.js?v982545f425161d5f5c95b96ab6c34e1b HTTP/1.1
Host: groot.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 10 Jan 2023 08:42:37 GMT
etag: W/"63bd24fd-2a7b"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-MailerLite-Account,X-MailerLite-Token
strict-transport-security: max-age=15724800; includeSubDomains
access-control-max-age: 1728000
cf-cache-status: HIT
age: 3616
expires: Wed, 18 Jan 2023 23:09:02 GMT
cache-control: public, max-age=432000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7891cc182c020b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=www.flippingheck.com&callback=_gfp_s_&client=ca-pub-7394504793528332&gpid_exp=1
200 OK 256 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www.flippingheck.com&callback=_gfp_s_&client=ca-pub-7394504793528332&gpid_exp=1
IP
File type ASCII text, with very long lines (399), with no line terminators
Hash 05220f5baed409e2ff17fb9c99d6ba87
51387b111ed52ea5e987249d9376d53693ad6910
1996047d36d7ac7656bf8ca38d36f17b84d0bd7df5cb400af5dcb24aa7bd161a
GET /gampad/cookie.js?domain=www.flippingheck.com&callback=_gfp_s_&client=ca-pub-7394504793528332&gpid_exp=1 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 13 Jan 2023 23:09:03 GMT
server: cafe
cache-control: private
content-length: 256
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=www.flippingheck.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.flippingheck.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.flippingheck.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 13 Jan 2023 23:09:03 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.flippingheck.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.flippingheck.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.flippingheck.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 13 Jan 2023 23:09:03 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aa60c680c7a1735cdaea7e7b08e7fa92
fdf5e35c5ccb7f1c8bc43bcbe9fa5d3a9284c613
d0f0833a46c376208ad78cafb1077c56f0c5465386b676fc075b77b13e9aa31f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f96f3b88eebd362c0208a60d27e28068
f244f8dfbc2677fbddcf0024ff7cf343e24205bb
9b3586a498232da2b246b2bd158d7fd75eb9b4ac00ed750bbe670f1b54fe0f2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cloudimagesb.com/bi/f2/89/27/f28927d07b6373b93ae5b1653e846c86/1631285382.jpg
200 OK 112 kB URL HTTP/2 cdn.cloudimagesb.com/bi/f2/89/27/f28927d07b6373b93ae5b1653e846c86/1631285382.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2021:07:26 12:52:17], baseline, precision 8, 300x250, components 3\012- data
Size 112 kB (112312 bytes)
Hash dd0a4cbb6df8b96545ec7e29ad7d11c2
17e87af834f16860a8d7f29cecae5f8f8d43a43c
e398a1cf616297b2245accfe84afb007c1e99468a534863e695a1a359105da53
GET /bi/f2/89/27/f28927d07b6373b93ae5b1653e846c86/1631285382.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:03 GMT
content-type: image/jpeg
content-length: 112312
server: nginx/1.17.6
last-modified: Fri, 10 Sep 2021 14:49:52 GMT
etag: "613b7090-1b6b8"
expires: Sun, 15 Jan 2023 23:09:03 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 815f1a1e0adac55b38019d2af17b9bbe
6e04467e75f83b4a692cf6716b5b564274a487c7
6d8326d418f56d57221790353c7b220088d63c133901e0b500accb5e420811db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ada63762075e5651538a7488c1892793
d443662e6a558c67937b5582c7a53606477d9f57
6d66c972497029fe99022d6ff9b567e67b6b4d4dce33951a34ba7bcd2f79efdf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Fri, 13 Jan 2023 23:09:03 GMT
expires: Fri, 13 Jan 2023 23:09:03 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 08 Jan 2023 05:59:29 GMT
expires: Mon, 08 Jan 2024 05:59:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 493774
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 69c011429c0b1f8a0c091474b207c240
fe2c5e1854a65d8a2b669fc54aa0c827f07e428b
409f967eeebf5472cb0d2a917b9285e52b21950f672c6c37a19285d3375edc7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:09:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 512 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 810240de88ba2ee23f5fc75c861fbb99
5c45d302480f92b4cfe8a66473da8319e4d246c1
1f31f8b05cde6625a191a4183608f9aa5149d83b48095db924be69f62d8aea20
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 13 Jan 2023 23:09:03 GMT
date: Fri, 13 Jan 2023 23:09:03 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-rm5WN46C1Ca5vSb-JdbYxw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 512
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
groot.mailerlite.com/js/w/webforms.min.js?vaa2c3c2aced59c19bcfc4be08835b7b3
200 OK 0 B URL HTTP/2 groot.mailerlite.com/js/w/webforms.min.js?vaa2c3c2aced59c19bcfc4be08835b7b3
IP
GET /js/w/webforms.min.js?vaa2c3c2aced59c19bcfc4be08835b7b3 HTTP/1.1
Host: groot.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 10 Jan 2023 08:42:37 GMT
etag: W/"63bd24fd-2a7b"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-MailerLite-Account,X-MailerLite-Token
strict-transport-security: max-age=15724800; includeSubDomains
access-control-max-age: 1728000
cf-cache-status: HIT
age: 2710
expires: Wed, 18 Jan 2023 23:09:02 GMT
cache-control: public, max-age=432000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7891cc183c050b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js
IP
GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Mon, 02 Jan 2023 20:23:48 GMT
vary: Accept-Encoding
etag: W/"63b33d54-8583"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/wp-contact-form-7-spam-blocker/frontend/js/spam-protect-for-contact-form7.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/wp-contact-form-7-spam-blocker/frontend/js/spam-protect-for-contact-form7.js
IP
GET /wp-content/plugins/wp-contact-form-7-spam-blocker/frontend/js/spam-protect-for-contact-form7.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Thu, 04 Aug 2022 20:08:20 GMT
vary: Accept-Encoding
etag: W/"62ec2734-346"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css
IP
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Mon, 02 Jan 2023 20:23:48 GMT
vary: Accept-Encoding
etag: W/"63b33d54-17e1"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css
IP
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Mon, 02 Jan 2023 20:23:48 GMT
vary: Accept-Encoding
etag: W/"63b33d54-6a71"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/buymeacoffee/public/js/buy-me-a-coffee-public.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/buymeacoffee/public/js/buy-me-a-coffee-public.js
IP
GET /wp-content/plugins/buymeacoffee/public/js/buy-me-a-coffee-public.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Thu, 15 Dec 2022 08:23:40 GMT
vary: Accept-Encoding
etag: W/"639ad98c-35f"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
assets.mailerlite.com/jsonp/53918/forms/QiByHJ?callback=ml.fn.renderEmbeddedForm
200 OK 0 B URL HTTP/2 assets.mailerlite.com/jsonp/53918/forms/QiByHJ?callback=ml.fn.renderEmbeddedForm
IP
GET /jsonp/53918/forms/QiByHJ?callback=ml.fn.renderEmbeddedForm HTTP/1.1
Host: assets.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: text/javascript; charset=UTF-8
cache-control: immutable, max-age=60, public, s-maxage=60
x-cacheable: 1
access-control-allow-origin: *
x-cache: HIT
x-cache-hits: 2
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: MISS
last-modified: Fri, 13 Jan 2023 23:09:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7891cc16aae50b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/tag/toxic-people/
200 OK 0 B URL HTTP/2 www.flippingheck.com/tag/toxic-people/
IP
GET /tag/toxic-people/ HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: shield-notbot-nonce=09436d9582; expires=Fri, 13-Jan-2023 23:09:14 GMT; Max-Age=15; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
dlm-no-waypoints: true
referrer-policy: no-referrer-when-downgrade
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
expect-ct: max-age=5184000, enforce
link: <https://www.flippingheck.com/wp-json/>; rel="https://api.w.org/", <https://www.flippingheck.com/wp-json/wp/v2/tags/621>; rel="alternate"; type="application/json"
x-httpd-modphp: 1
host-header: 6b7412fb82ca5edfd0917e3957f05d89
x-proxy-cache: MISS
x-proxy-cache-info: 0 NC:000000 UP:SKIP_CACHE_NO_CACHE
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/buymeacoffee/public/css/buy-me-a-coffee-public.css
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/buymeacoffee/public/css/buy-me-a-coffee-public.css
IP
GET /wp-content/plugins/buymeacoffee/public/css/buy-me-a-coffee-public.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Thu, 15 Dec 2022 08:23:40 GMT
vary: Accept-Encoding
etag: W/"639ad98c-63"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/admin/modules/ccpa/assets/js/cookie-law-info-ccpa.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/admin/modules/ccpa/assets/js/cookie-law-info-ccpa.js
IP
GET /wp-content/plugins/cookie-law-info/legacy/admin/modules/ccpa/assets/js/cookie-law-info-ccpa.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Mon, 02 Jan 2023 20:23:48 GMT
vary: Accept-Encoding
etag: W/"63b33d54-1ca0"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/js/flip-heck-core.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/js/flip-heck-core.js
IP
GET /wp-content/themes/FH2017/js/flip-heck-core.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Wed, 09 Feb 2022 16:01:37 GMT
vary: Accept-Encoding
etag: W/"6203e561-5a4"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
assets.mlcdn.com/gr/js/w/ml_jQuery.inputmask.bundle.min.js?v3.3.1
200 OK 0 B URL HTTP/2 assets.mlcdn.com/gr/js/w/ml_jQuery.inputmask.bundle.min.js?v3.3.1
IP
GET /gr/js/w/ml_jQuery.inputmask.bundle.min.js?v3.3.1 HTTP/1.1
Host: assets.mlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: application/javascript
cf-ray: 7891cc1908370b55-OSL
access-control-allow-origin: *
age: 2767
cache-control: public, max-age=691200
last-modified: Fri, 13 Jan 2023 22:22:55 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
access-control-allow-methods: HEAD,GET,OPTIONS
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/js/kwwd_comment_reply.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/js/kwwd_comment_reply.js
IP
GET /wp-content/themes/FH2017/js/kwwd_comment_reply.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Wed, 09 Feb 2022 16:01:38 GMT
vary: Accept-Encoding
etag: W/"6203e562-f9c"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
groot.mailerlite.com/assets/plugins/groot/modules/includes/groot_fonts/import.css?version=1658933
200 OK 0 B URL HTTP/2 groot.mailerlite.com/assets/plugins/groot/modules/includes/groot_fonts/import.css?version=1658933
IP
GET /assets/plugins/groot/modules/includes/groot_fonts/import.css?version=1658933 HTTP/1.1
Host: groot.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:02 GMT
content-type: text/css
last-modified: Tue, 10 Jan 2023 08:40:34 GMT
etag: W/"63bd2482-406"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-MailerLite-Account,X-MailerLite-Token
strict-transport-security: max-age=15724800; includeSubDomains
access-control-max-age: 1728000
cf-cache-status: REVALIDATED
expires: Wed, 18 Jan 2023 23:09:02 GMT
cache-control: public, max-age=432000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7891cc183c040b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdnjs.buymeacoffee.com/1.0.0/widget.prod.min.js
200 OK 0 B URL HTTP/2 cdnjs.buymeacoffee.com/1.0.0/widget.prod.min.js
IP
GET /1.0.0/widget.prod.min.js HTTP/1.1
Host: cdnjs.buymeacoffee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript; charset=UTF-8
age: 46468
cache-control: public, max-age=2678400, must-revalidate
etag: W/"04fdc5869e458463191b1590830f47bc-ssl-df"
vary: Accept-Encoding
x-nf-request-id: 01GPN9ZEMJPZYXVZBF3T99BYWV
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hcro1eO2RuwVaCUF%2F7qZbzICU21m0J6wzfqxL9267xwxPPBJsLlEpV2nzFhBSLJEqca%2FBxdfcXjf3ztuaQt5JodnHVe9j1VRqQa3wmBpMgHsPIlt0A91kwpVVHH6aEKaW8lWcLC4ae4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7891cc0dc8d31c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/contact-form-7/includes/css/styles.css
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/contact-form-7/includes/css/styles.css
IP
GET /wp-content/plugins/contact-form-7/includes/css/styles.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Wed, 28 Dec 2022 08:24:17 GMT
vary: Accept-Encoding
etag: W/"63abfd31-af3"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/contact-form-7/includes/js/index.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/contact-form-7/includes/js/index.js
IP
GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Wed, 28 Dec 2022 08:24:17 GMT
vary: Accept-Encoding
etag: W/"63abfd31-316c"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/wp-auto-affiliate-links/css/style.css
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/wp-auto-affiliate-links/css/style.css
IP
GET /wp-content/plugins/wp-auto-affiliate-links/css/style.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Sat, 31 Dec 2022 20:23:52 GMT
vary: Accept-Encoding
etag: W/"63b09a58-c78"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/download-monitor/assets/js/dlm-xhr.min.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/download-monitor/assets/js/dlm-xhr.min.js
IP
GET /wp-content/plugins/download-monitor/assets/js/dlm-xhr.min.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Mon, 09 Jan 2023 20:23:47 GMT
vary: Accept-Encoding
etag: W/"63bc77d3-1ff0"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/wp-contact-form-7-spam-blocker/frontend/css/spam-protect-for-contact-form7.css
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/wp-contact-form-7-spam-blocker/frontend/css/spam-protect-for-contact-form7.css
IP
GET /wp-content/plugins/wp-contact-form-7-spam-blocker/frontend/css/spam-protect-for-contact-form7.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Thu, 04 Aug 2022 20:08:20 GMT
vary: Accept-Encoding
etag: W/"62ec2734-62"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto+Condensed:wght@300&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto+Condensed:wght@300&display=swap
IP
GET /css2?family=Roboto+Condensed:wght@300&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.flippingheck.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 13 Jan 2023 23:09:00 GMT
date: Fri, 13 Jan 2023 23:09:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/js/jquery.fitvids.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/js/jquery.fitvids.js
IP
GET /wp-content/themes/FH2017/js/jquery.fitvids.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Wed, 09 Feb 2022 16:01:38 GMT
vary: Accept-Encoding
etag: W/"6203e562-b63"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js
IP
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Wed, 28 Dec 2022 08:24:17 GMT
vary: Accept-Encoding
etag: W/"63abfd31-2945"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css
IP
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Mon, 02 Jan 2023 20:23:48 GMT
vary: Accept-Encoding
etag: W/"63b33d54-c22"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/plugins/wp-simple-firewall/resources/js/shield/notbot.js
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/plugins/wp-simple-firewall/resources/js/shield/notbot.js
IP
GET /wp-content/plugins/wp-simple-firewall/resources/js/shield/notbot.js HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 20:23:56 GMT
vary: Accept-Encoding
etag: W/"637e815c-ebf"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
www.flippingheck.com/wp-content/themes/FH2017/style.css
200 OK 0 B URL HTTP/2 www.flippingheck.com/wp-content/themes/FH2017/style.css
IP
GET /wp-content/themes/FH2017/style.css HTTP/1.1
Host: www.flippingheck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flippingheck.com/tag/toxic-people/
Connection: keep-alive
Cookie: shield-notbot-nonce=09436d9582; PHPSESSID=73d2761e11c241e30080844224848db2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:09:00 GMT
content-type: text/css
last-modified: Wed, 28 Sep 2022 20:16:42 GMT
vary: Accept-Encoding
etag: W/"6334abaa-1a23f"
expires: Sat, 13 Jan 2024 23:09:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2
35.214.80.158
173.194.222.156
104.18.13.69
52.58.124.101
23.36.77.32
52.18.195.183