gunmaxx.com/campaigns/or113ae0xvda0/track-url/gl092rbmolbac/6f0fb958a4f9f57baa08d89f3ff02af86013ef4e
301 Moved Permanently 178 B URL HTTP/1.1 gunmaxx.com/campaigns/or113ae0xvda0/track-url/gl092rbmolbac/6f0fb958a4f9f57baa08d89f3ff02af86013ef4e
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
Analyzer Verdict Alert fortinet Malware
GET /campaigns/or113ae0xvda0/track-url/gl092rbmolbac/6f0fb958a4f9f57baa08d89f3ff02af86013ef4e HTTP/1.1
Host: gunmaxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 29 Nov 2022 00:58:57 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://gunmaxx.com/campaigns/or113ae0xvda0/track-url/gl092rbmolbac/6f0fb958a4f9f57baa08d89f3ff02af86013ef4e
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12963
Expires: Tue, 29 Nov 2022 04:35:00 GMT
Date: Tue, 29 Nov 2022 00:58:57 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4605
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:58:57 GMT
Last-Modified: Mon, 28 Nov 2022 23:42:12 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15253
Expires: Tue, 29 Nov 2022 05:13:10 GMT
Date: Tue, 29 Nov 2022 00:58:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 00:17:50 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2467
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DzoroHa9kbDXyB7EpF7jFREHTLtAsvZCbpE8BwyTQUpS7SyA2EiFkTj4yu2fyt+aDWgUmovVQdI=
x-amz-request-id: SEBMYFWCDJ4G5SJM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 00:42:18 GMT
age: 999
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:58:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 42b757cbf9ef2ea07fc1fd2808284418
44dfe7fb53a062ecad9fa55ab4cb1f0670abecc9
5478943071424e2c87a224337a29303d83ca993ae4ebb0fb40cad274fd0575d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5478943071424E2C87A224337A29303D83CA993AE4EBB0FB40CAD274FD0575D0"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14898
Expires: Tue, 29 Nov 2022 05:07:16 GMT
Date: Tue, 29 Nov 2022 00:58:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 00:08:55 GMT
cache-control: public,max-age=3600
age: 3003
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1918
Cache-Control: max-age=117595
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:58:58 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 09:38:53 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
gunmaxx.com/campaigns/or113ae0xvda0/track-url/gl092rbmolbac/6f0fb958a4f9f57baa08d89f3ff02af86013ef4e
301 Moved Permanently 0 B URL HTTP/1.1 gunmaxx.com/campaigns/or113ae0xvda0/track-url/gl092rbmolbac/6f0fb958a4f9f57baa08d89f3ff02af86013ef4e
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /campaigns/or113ae0xvda0/track-url/gl092rbmolbac/6f0fb958a4f9f57baa08d89f3ff02af86013ef4e HTTP/1.1
Host: gunmaxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 29 Nov 2022 00:58:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: mwsid=nf8de5eu9e824vfmlr4t71uv9k; path=/; HttpOnly
X-XSS-Protection: 1; mode=block
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Tue, 29 Nov 2022 00:58:58 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: https://concernedpatriot.com/explosive-letter-from-arizona-ag-to-maricopa-county-is-held-up-by-kari-lake-as-evidence-she-will-become-governor/?utm_source=cpnl&utm_medium=EMAIL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9bWKnDnVHrO+h4vVpTUEeg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wGZ/KlBAwiLxoUYdJrEW5s++82k=
ocsp.digicert.com/
200 OK 279 B IP
Hash 712ddc1c1660dcb7e6b8213dcbe552ff
e836b10b715cdc790fca5962a6e3d63d5fc8e100
ec72afe624bc2a321bbda50c0b37f3b0c762b98f6d30928ad7954df1a386f759
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=171834
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:58:58 GMT
Etag: "6385558c-117"
Expires: Thu, 01 Dec 2022 00:42:52 GMT
Last-Modified: Tue, 29 Nov 2022 00:42:52 GMT
Server: nginx
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11597
Expires: Tue, 29 Nov 2022 04:12:16 GMT
Date: Tue, 29 Nov 2022 00:58:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11597
Expires: Tue, 29 Nov 2022 04:12:16 GMT
Date: Tue, 29 Nov 2022 00:58:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11597
Expires: Tue, 29 Nov 2022 04:12:16 GMT
Date: Tue, 29 Nov 2022 00:58:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11597
Expires: Tue, 29 Nov 2022 04:12:16 GMT
Date: Tue, 29 Nov 2022 00:58:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69f1b665-d8ee-457c-8f1d-e696be0cdbf6.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69f1b665-d8ee-457c-8f1d-e696be0cdbf6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c808183085a429c53515508678fc7ab2
6567069d9f5199205ba1ca7a937fcb0a52f95d06
c7ca95730cbc97d7c243e05b23520166faefcd2dfe90f36f70fad1f7e4537e4c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69f1b665-d8ee-457c-8f1d-e696be0cdbf6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9162
x-amzn-requestid: f7fb3b99-6f1c-4ab3-9547-a337d54e8c9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVjI8E9poAMFaQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63854bd2-0679b83d1aa3b7c71aa6bf1c;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 00:01:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DVS-FTO93p2gjrvMYzKgNjZmrPxmUuiJHWLuZqOMZzJFwEcWJbW35Q==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 00:36:14 GMT
etag: "6567069d9f5199205ba1ca7a937fcb0a52f95d06"
content-type: image/jpeg
age: 1365
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e44c46db2ac9917110dc47aa38fdc85
b5b245c90705ad80c31d457c0d7c96709ca31e96
5024225a583b188860eaf21f7196c06cef8b2e89389ae4b1df6e314399f3b2ae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8796
x-amzn-requestid: 2eed036c-fcda-425b-8c5d-0b0ff31214a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEEWMIAMFwKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-5cb071a2098d43d909eb8d5c;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uWzs8gOBoczTeYXB7-FfJemWbh-hYHwNcR3b9BM5VtJ55NRUzCZeTQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 14:56:22 GMT
age: 36157
etag: "b5b245c90705ad80c31d457c0d7c96709ca31e96"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d574c4db20a68295dbd06cb08f5990b
433061bbb226048765a711deca3026ee3e52372f
8cc1a4d18e242f8bfc8ab94637f635b73554b903462c29b06d0ec67872542afb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9203
x-amzn-requestid: 8cba52d6-3c1c-495c-bb9d-3ba6f0adc7e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cHcHmGmQoAMF6dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fa6fd-73abfa592ff223061401af9a;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 17:16:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lzXj01ht9kpuwONgKM0xM0QRu8G9M9oX6rwYzv_Q_sI09Y3-RIVF-A==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 03:47:05 GMT
age: 76314
etag: "433061bbb226048765a711deca3026ee3e52372f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb99c22d6-3187-4d40-8281-7980c7988464.webp
200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb99c22d6-3187-4d40-8281-7980c7988464.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06723cdab42df9b5334f540a8c7ebc60
3bbc44cb84a37ce6a067db4301dd81647a77c29f
9f6f064b16044c510650635690c61003fb2f6439021a2e681431136f5e7a08b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb99c22d6-3187-4d40-8281-7980c7988464.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3905
x-amzn-requestid: bf50db76-dd95-44fc-abbe-1a26a5559ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMFcYHE6IAMFmpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638182b5-50b6d010058c6cb75c05c6de;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 03:06:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qJi8Y13bwnYMJDH5WYNxMShIEZef1SYGdHsDY8_vJoPzwT0PhPr0hQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:10:04 GMT
age: 64135
etag: "3bbc44cb84a37ce6a067db4301dd81647a77c29f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa7a7fb1-8e53-47cc-bd1c-80ab0e8ecd59.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa7a7fb1-8e53-47cc-bd1c-80ab0e8ecd59.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b421b66a29c15df61049ef5d5f34bc2
f3c1297885fa2fd37557222d5490dfb0afed19ef
3c88aecb898378f0d070fe9e9733ac42b89b57349e8e9f51ffb0508b88821980
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa7a7fb1-8e53-47cc-bd1c-80ab0e8ecd59.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3711
x-amzn-requestid: e9825e7e-0fa7-4165-9b59-f554a4bf1d6b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b_dkuFKToAMF1OA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c761e-7ebc3c3b480cdd94059616b7;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 07:11:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TQQiAdJwsSxsS2C-3y_SNOHPtiuPMKcfu-4Db4zlOjbHsTfRnHWl8Q==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 18:16:01 GMT
age: 24178
etag: "f3c1297885fa2fd37557222d5490dfb0afed19ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1ee10f9-36dd-4ca4-986e-a80758149640.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1ee10f9-36dd-4ca4-986e-a80758149640.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 516776052e5e906ea9f42d25bae5cc85
be4c4d01fc67218e26a3e9d27a2f708e639c9d4b
28e70e38cfad65ad8a7a68ab1dc78747c7013a87b854fc35b163cc5765cd0570
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1ee10f9-36dd-4ca4-986e-a80758149640.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8460
x-amzn-requestid: 51416479-3854-4f1a-9d86-35e104c57f6a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnkHuZIAMF-_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852963-180b323d4a45fa2f29f9b1fc;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ieDA8l_Up51cFaB9IExlSs8A5m-H77va1rCVF_WRMg_FN53Xakipuw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:55 GMT
age: 11524
etag: "be4c4d01fc67218e26a3e9d27a2f708e639c9d4b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 712ddc1c1660dcb7e6b8213dcbe552ff
e836b10b715cdc790fca5962a6e3d63d5fc8e100
ec72afe624bc2a321bbda50c0b37f3b0c762b98f6d30928ad7954df1a386f759
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2
Cache-Control: max-age=171834
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:00 GMT
Etag: "6385558c-117"
Expires: Thu, 01 Dec 2022 00:42:54 GMT
Last-Modified: Tue, 29 Nov 2022 00:42:52 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 03ad9fc0b00b5df3165dc2fb1e3b0a3e
f8243335a8bc24d989bddd346048a055e1d0bdeb
366b28d491f7fd632e31c1ce97f939555f7dcee14bb6875737ed2d3e96fa32ec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0fe20d41a043db700a84924cd9793f3
c0da481fef6cd00558f6e68b074acb34bef8292f
03caeb65ab9e22f6d6fe0d344d327950d20ee9ed144e2da0e5e062943a03fc56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?hl=en&ver=6.1.1
200 OK 553 B URL HTTP/2 www.google.com/recaptcha/api.js?hl=en&ver=6.1.1
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 1309ff133720d219cc98090d66a051ed
b96fc5a893e42be16d687d7abdecdb13d348a019
358683c66634ea5ee3021c93111d8621d583880bcbbfadf3ec2ff87a15ea1038
GET /recaptcha/api.js?hl=en&ver=6.1.1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 29 Nov 2022 00:59:00 GMT
date: Tue, 29 Nov 2022 00:59:00 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=explicit&ver=1.68
200 OK 554 B URL HTTP/2 www.google.com/recaptcha/api.js?render=explicit&ver=1.68
IP
File type ASCII text, with very long lines (852), with no line terminators
Hash 0a628b8a14a877262721824930709597
31bbb380c04a4229a099a1fb6dea09cf717bcb5f
6c63432c24b1f8eed67f792c68214710fd6444ede5c28f56202e966770d20121
GET /recaptcha/api.js?render=explicit&ver=1.68 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 29 Nov 2022 00:59:00 GMT
date: Tue, 29 Nov 2022 00:59:00 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 554
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Poppins
200 OK 139 kB URL HTTP/2 fonts.googleapis.com/css?family=Poppins
IP
Size 139 kB (139378 bytes)
Hash ce2b15cb5038c054e00e5b2436bfc9c5
f1ab8d0f4967877c0483c44a0f5ebd375190fbf4
a80a12a55af2bf2343cbc77ce4cfe663173327ca47f9b0e277672e9d5cfdabf3
GET /css?family=Poppins HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://concernedpatriot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 00:59:00 GMT
date: Tue, 29 Nov 2022 00:59:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-K3328BR
200 OK 48 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-K3328BR
IP
File type ASCII text, with very long lines (3957)
Hash 5c19d06c69d149e55df44bb226546f9f
a9995e7257e72af850becc941796542e7633554f
6507f55f4b834496802f108b32aebc0a43663bf68bce38a94fab660070373d06
GET /gtm.js?id=GTM-K3328BR HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 00:59:01 GMT
expires: Tue, 29 Nov 2022 00:59:01 GMT
cache-control: private, max-age=900
last-modified: Tue, 29 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48256
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 703 B IP
Hash 514cf59afe564f99b5a194e899d4c7b9
5e65807f5ebef164332030b24089a21fe99cb092
7d56d57193ad9d7d2d1e467486b71c8457ec7b368e7592786d351224ea23d4d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 1.4 kB IP
Hash bc3c34ea98e0df68c24403b531a55a45
f79f6bc98b795033436c20488125c6473b72cea2
ef2befb04e81c9ceb785b52c62c5f2fce7fc6355b958498eeb0fd41f2ce0241c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:32 GMT
expires: Thu, 23 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 471089
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/bitter/v28/rax8HiqOu8IVPmn7f4xp.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/bitter/v28/rax8HiqOu8IVPmn7f4xp.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30896, version 1.0\012- data
Hash a7332c352b59e1d882b5770b68ed9db5
6a4b2b9a2b35ae86769e0c6a0a6decbf67300db6
c470360f2548fb327562d8ce35185a96f59ab6daeb56c0d45ab712b63de848da
GET /s/bitter/v28/rax8HiqOu8IVPmn7f4xp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30896
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:25:05 GMT
expires: Fri, 24 Nov 2023 21:25:05 GMT
cache-control: public, max-age=31536000
age: 358436
last-modified: Fri, 24 Jun 2022 18:46:28 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2
200 OK 50 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2
IP
Hash 40517b25d9b2c390c85d1fbbd495bc89
802a3429d54ecbdbdb7ca2567154a6ac5e85955b
8694a0b69a3888d93e3a7e5dc26fe4d4ec32ab7d646dde8920ea88d7bb58dd6e
GET /s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17032
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:51:10 GMT
expires: Thu, 23 Nov 2023 19:51:10 GMT
cache-control: public, max-age=31536000
age: 450471
last-modified: Wed, 11 May 2022 19:24:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
200 OK 34 kB URL HTTP/2 fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 33580, version 1.0\012- data
Hash 848cd2ecd011428969dc6b90431bc482
6b1a7b562a56bd54510e0f6f95e26babca331a1b
981307dcbbd348f6fb4e3eab184077392f9ee15097ea868f630debefad9044e9
GET /s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:38:57 GMT
expires: Fri, 24 Nov 2023 21:38:57 GMT
cache-control: public, max-age=31536000
age: 357604
last-modified: Mon, 18 Jul 2022 19:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15764, version 1.0\012- data
Hash 603b8950590bf833546eee7cbc79944a
ebbde06eb829868c5f689afe2d48377608be1e7b
0f303f31706d39866cced9dcc17b61fb8423674278d7f6051d66b3a79ffbca18
GET /s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:40:25 GMT
expires: Thu, 23 Nov 2023 19:40:25 GMT
cache-control: public, max-age=31536000
age: 451116
last-modified: Wed, 11 May 2022 19:24:35 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 453912
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:56:18 GMT
expires: Thu, 23 Nov 2023 18:56:18 GMT
cache-control: public, max-age=31536000
age: 453763
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:30:59 GMT
expires: Thu, 23 Nov 2023 19:30:59 GMT
cache-control: public, max-age=31536000
age: 451682
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 05:42:51 GMT
expires: Fri, 24 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 414970
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 451493
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/mI1qB1VFcqE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/mI1qB1VFcqE
IP
Hash 6b78a3161802e7b0ffb6cfc9d49b3097
7cac6b54ed381919112ca157a1fefe2e3973884b
e64c71f5ed70d820fd8ce9cb6b0db737484b65bc0c2fe1bd7b65c5775e28d02e
POST /s/gts1p5/mI1qB1VFcqE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:01 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pm1.dolomitethistle.store/image5.png
200 OK 89 kB URL HTTP/2 pm1.dolomitethistle.store/image5.png
IP
File type PNG image data, 299 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash da45d871358ead7e2e251f3067786c59
7d587953fbae7dd1324c5018f0764df488d6a665
3ff920097223ce4e88c451367e6f11b2e940c05a04ecd614c790c2a87c93b634
GET /image5.png HTTP/1.1
Host: pm1.dolomitethistle.store
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pm1.dolomitethistle.store/index.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: image/png
content-length: 89174
etag: "15c56-6373c9c3-628060;;;"
last-modified: Tue, 15 Nov 2022 17:17:55 GMT
x-turbo-charged-by: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0XHSq8F3U%2FOIqHOzkVElwZL%2FNmOzVRSnWzk0tvP1wF2f%2FlLyErQ3QEN0HM5s8n1LuqftGcfmvLkN5lC8K5mk1B0HYqO97S1v9omajsH3d9qFqQF8rcA5jCQAp6tznsIsyv53qZfYL2HFC3fj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771765f66edbb4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/mI1qB1VFcqE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/mI1qB1VFcqE
IP
Hash 6b78a3161802e7b0ffb6cfc9d49b3097
7cac6b54ed381919112ca157a1fefe2e3973884b
e64c71f5ed70d820fd8ce9cb6b0db737484b65bc0c2fe1bd7b65c5775e28d02e
POST /s/gts1p5/mI1qB1VFcqE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:01 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c012b8c28bc8001d16ef3a768b084b37
17bfaf3f558347363c799cf7f3b9e24340967e8d
2b97f1864b15b13a0d6aa3e716d1b7b7eb7d6e256f2cf0ef2cbee7f9e8efe6b6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2B97F1864B15B13A0D6AA3E716D1B7B7EB7D6E256F2CF0EF2CBEE7F9E8EFE6B6"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12004
Expires: Tue, 29 Nov 2022 04:19:05 GMT
Date: Tue, 29 Nov 2022 00:59:01 GMT
Connection: keep-alive
news.weatherplllatform.com/counter.js
200 OK 1.5 kB URL HTTP/1.1 news.weatherplllatform.com/counter.js
IP
File type ASCII text, with very long lines (4140), with no line terminators
Hash 8ecb46e68d7ee2b249a6f0bd4ecabc88
e0d5a9f07ca629f4c4ac7154095bd419826ed245
16f62d801d81aa35dcebf8da2b88904663904c38d6ae8830be4f5db1d66bd22f
Analyzer Verdict Alert fortinet Malware
GET /counter.js HTTP/1.1
Host: news.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 00:59:01 GMT
Content-Type: application/javascript
Last-Modified: Fri, 25 Nov 2022 04:49:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"63804953-102c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
trendingpolitics.com/wp-content/uploads/2020/12/logo.png
200 OK 199 kB URL HTTP/2 trendingpolitics.com/wp-content/uploads/2020/12/logo.png
IP
File type PNG image data, 1846 x 287, 8-bit/color RGBA, non-interlaced\012- data
Size 199 kB (198716 bytes)
Hash 7bf919abb86596ff9061fd62504e37ae
fdae393dfe94209ba27edf2cf819f44504661257
250a1ed85967c446631e247a6f88ed786e9f754f691185914985321710b50772
GET /wp-content/uploads/2020/12/logo.png HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: image/png
content-length: 198716
last-modified: Mon, 21 Dec 2020 05:18:09 GMT
etag: "5fe03011-3083c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1047915
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0O4wO6wX8GKKoXBNuA6SJMe4XL2vhRRYob3Za0VLwUn%2FSK%2FEpnK1CBdU%2FC9SwA1Z78IOmXm3iCUN5CK3pxla7Y56oxaJjaNqa5nUjduaQ80Yzl63D7w72Yfo8727CEguV0v9kQak"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771765f8af1eb505-OSL
X-Firefox-Spdy: h2
new.trendingpolitics.com/wp-content/uploads/2020/12/logo.png
200 OK 199 kB URL HTTP/2 new.trendingpolitics.com/wp-content/uploads/2020/12/logo.png
IP
File type PNG image data, 1846 x 287, 8-bit/color RGBA, non-interlaced\012- data
Size 199 kB (198716 bytes)
Hash 7bf919abb86596ff9061fd62504e37ae
fdae393dfe94209ba27edf2cf819f44504661257
250a1ed85967c446631e247a6f88ed786e9f754f691185914985321710b50772
GET /wp-content/uploads/2020/12/logo.png HTTP/1.1
Host: new.trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: image/png
content-length: 198716
last-modified: Mon, 21 Dec 2020 05:18:09 GMT
etag: "5fe03011-3083c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 15118707
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S8NTGF1A2gzvdPk3AUu3HKaaV9QjiswQUxWH9phgWQGMqzWh6avNT7EUEyejXBXvjo3jmnF4iS9O2%2FlaEhS01ilcKBSF20I%2BkKLlOGi15g89ojtiZHCaQXZDhNYDAPPavjmhbReprUbJHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771765f8af25b505-OSL
X-Firefox-Spdy: h2
trendingpolitics.com/explosive-letter-from-arizona-ag-to-maricopa-county-is-held-up-by-kari-lake-as-evidence-she-will-become-governor-knab/about:blank
301 Moved Permanently 789 B URL HTTP/2 trendingpolitics.com/explosive-letter-from-arizona-ag-to-maricopa-county-is-held-up-by-kari-lake-as-evidence-she-will-become-governor-knab/about:blank
IP
Hash c2d1f48070ff756164324d9a15cda993
c3c6c98b6d17cc63e1f66b615fdda44dc43fe065
35f97f4f54a61222f6a9ce55d571966d68d9d70e7a758e0efdc57b1fb3a5fffd
GET /explosive-letter-from-arizona-ag-to-maricopa-county-is-held-up-by-kari-lake-as-evidence-she-will-become-governor-knab/about:blank HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/html; charset=UTF-8
location: https://trendingpolitics.com
x-powered-by: PHP/8.0.24
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
rt-fastcgi-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NvUFgLmBrSUgNoEHiovO%2BUpRm%2B4w3yyxEgDhBv6zWYlwTcenbzeIUq%2FdxRC7uMoNVux6EzJWTZSwGL0bPOfDbQAtxjqE0avaDvohh1KhbNdXXL%2Fv6JXTECoW3BRcTP7ZSLnBVvFE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f3fd13b505-OSL
X-Firefox-Spdy: h2
s7.addthis.com/js/300/addthis_widget.js?ver=6.1.1
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js?ver=6.1.1
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116388 bytes)
Hash fef08c9f8bacc1b0eed3950dbe7d0f87
e9a3b98cad1e2d58eab1e2cbaa51cb979dc45075
55b3d5b3acd46444cc1844a676c75ba25209ce371065791cd4fbdc9da60aea34
GET /js/300/addthis_widget.js?ver=6.1.1 HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116388
date: Tue, 29 Nov 2022 00:59:01 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
cdn1.lockerdomecdn.com/embeds/ilovemyfreedom_trendingpolitics_sticky.js
200 OK 450 B URL HTTP/2 cdn1.lockerdomecdn.com/embeds/ilovemyfreedom_trendingpolitics_sticky.js
IP
Hash 01bb0d4f59a4e96d6fc8959a012500a1
8a6953531b77340b641af3e4f0df759adb112a6d
4767e5f4416c0149c64a2b89967a789ed15f1aea83d7938269148e7aaaed3fae
GET /embeds/ilovemyfreedom_trendingpolitics_sticky.js HTTP/1.1
Host: cdn1.lockerdomecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
cache-control: max-age=2489
content-encoding: gzip
content-length: 450
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 22:02:31 GMT
accept-ranges: bytes
x-amz-id-2: VACYlClX1uu4VcuAmADfA6tVs647artBZaHGC2WskOXrDnyf1m7jg/BrosFs9bu2gePjuCn8b6c=
x-amz-request-id: BNK49N65ANAY798Y
etag: "304928535bf846affa7e58a1c7c4519c"
x-amz-version-id: Yq9GtD3VWgFsONYcuaa1cEnLWtNaARfq
server: AmazonS3
x-hw: 1669683541.cds213.sk1.hn,1669683541.cds206.sk1.c
timing-allow-origin: https://lockerdome.com
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ab111d84cd3ea973540af40187d88177
2df74aa20c76483c6b3a4c634eada12811095068
c895bc6d1f86e9f8699db318a89c824d21c8e56962abda44d861d6d363695c4b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5031
Cache-Control: max-age=116420
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:01 GMT
Etag: "63846972-117"
Expires: Wed, 30 Nov 2022 09:19:21 GMT
Last-Modified: Mon, 28 Nov 2022 07:55:30 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://concernedpatriot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 21:48:50 GMT
expires: Thu, 23 Nov 2023 21:48:50 GMT
cache-control: public, max-age=31536000
age: 443411
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
files.findtrustclicks.com/scripts/stock.js?v=5.5.5
200 OK 2.0 kB URL HTTP/1.1 files.findtrustclicks.com/scripts/stock.js?v=5.5.5
IP
File type ASCII text, with very long lines (5931), with no line terminators
Hash 3fffd72b609d5dd79e722619ff70a54a
7e9240c7aa941841ec2cd943fc76afb84d906cfd
4f3f7466127e6b7a55f6e107ed33786045ff49f068298e2ebda0656bc90ad119
GET /scripts/stock.js?v=5.5.5 HTTP/1.1
Host: files.findtrustclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 00:59:01 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Mon, 28 Nov 2022 18:03:08 GMT
ETag: W/"172b-5ee8baf0c78f5"
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash ab111d84cd3ea973540af40187d88177
2df74aa20c76483c6b3a4c634eada12811095068
c895bc6d1f86e9f8699db318a89c824d21c8e56962abda44d861d6d363695c4b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5032
Cache-Control: max-age=116420
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:02 GMT
Etag: "63846972-117"
Expires: Wed, 30 Nov 2022 09:19:22 GMT
Last-Modified: Mon, 28 Nov 2022 07:55:30 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Tue, 29 Nov 2022 00:59:02 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/enquire/enquire.min.js?ver=2.1.2
200 OK 1.5 kB URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/enquire/enquire.min.js?ver=2.1.2
IP
File type ASCII text, with very long lines (2045)
Hash a675817c6817fa20c8e5128c86815ea6
24717d676ec1900ef656359a3836caeaa88e294e
da5afd99d550b71d993e58f5a29ce4bd07913b63d180aa6ecd07b9613242b42b
GET /wp-content/themes/bimber/js/enquire/enquire.min.js?ver=2.1.2 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-8ce"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 50115095
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D51%2BaW2qN47XBbW0BrX6x1OgDY51qlw8x1wotRDbw4K7HP1fmFF5GZJXGcWypIG0em%2FhPvYgdiuffkFLQLcr36ruIOPdURAEusBV%2FlQu46LLQrtu61gLhQpDjxHlofLCDkiBXKqp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8df37b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/jquery.waypoints/jquery.waypoints.min.js?ver=4.0.0
200 OK 3.2 kB URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/jquery.waypoints/jquery.waypoints.min.js?ver=4.0.0
IP
File type Unicode text, UTF-8 text, with very long lines (8668)
Hash 219849a20e466248d42aab91ae35a3a8
d6d43adc589d22b8210bff47b85a4e8e56d9156d
d8335bffcb279e04ac9baaf9cc2b8c4b47961cbd10388f4759abab9bb20daf4f
GET /wp-content/themes/bimber/js/jquery.waypoints/jquery.waypoints.min.js?ver=4.0.0 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-2281"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 12721214
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=erNxF4lMlWMZ%2Fc%2FaGxK0R8jFTnV05%2BuJ1PWdZj6ra3oFbWNULFDGSCYXwYvlqo4ej4Luuarn8nisTS37IC9D%2BqIFQ657y%2FdhESaWFMGA1gOu813x3mmC6F%2FWQeKqFeZR6P4BNdkU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8cf34b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css426ed32e32d9171fa591fda6baf18843ea662c33ef626dcc96c3923d1eb8d.css
200 OK 41 kB URL HTTP/2 trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css426ed32e32d9171fa591fda6baf18843ea662c33ef626dcc96c3923d1eb8d.css
IP
File type Unicode text, UTF-8 text, with very long lines (65415)
Hash 847ed8e744cfa2b6fc95d4e1fd55a249
46e7a47586d5c9f945ad445b0fadf8168d0e7d28
a3d10bf9e463fa7f5282ea5f2de4c0dcd3e4af52672fb9d07586c4f02870b4a2
GET /wp-content/cache/fvm/min/1668116812-css426ed32e32d9171fa591fda6baf18843ea662c33ef626dcc96c3923d1eb8d.css HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/css
last-modified: Thu, 10 Nov 2022 21:46:54 GMT
vary: Accept-Encoding
etag: W/"636d714e-3280a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1565475
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0pOaKzd4i%2FoNBafGqDRKTmVcvSakl%2FP6gNxc0WzMLhyD%2BjGua86RjjrSfa7HUef%2FJhsj20jLSToHzphah0e0A2PkQ3a7N88Q%2BfFE1jCc5SGyJ2Np39ZPaLUoBx9CnHIX3LF0bR6%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f85ef3b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash af25abbc1f9776cf78b07837dbea38a0
1883049bac2e92f8b3107f6435f00b83d8f4c117
663a6d77de7e3c835bcbb4b567eb28053755bf50ddab14b3f668367a85efdf17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6337
Cache-Control: max-age=129942
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:02 GMT
Etag: "6384992b-1d7"
Expires: Wed, 30 Nov 2022 13:04:44 GMT
Last-Modified: Mon, 28 Nov 2022 11:19:07 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
a.omappapi.com/app/js/0.81ef4a11.min.js
200 OK 22 kB URL HTTP/2 a.omappapi.com/app/js/0.81ef4a11.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (6766)
Hash 6859507e85f49514ea3026fc4f9fece3
0bcd8374f971f9d8370d2993a369a3d94f8781dd
2f74e06b0d2e6b713f26e776a2215bec133ce8737c0aa24277ebfd9f3549b8d9
GET /app/js/0.81ef4a11.min.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-1aa8"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-169
cdn-requestpullsuccess: True
cdn-fileserver: 488
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e19ce59a54e0014b1bbf1b5b058a4f6a
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/picturefill/picturefill.min.js?ver=2.3.1
200 OK 32 kB URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/picturefill/picturefill.min.js?ver=2.3.1
IP
File type ASCII text, with very long lines (7525)
Hash 28a40ece1e1a9c7324dbb12b43786250
fa6ad75d206d010c58d9ef81a1ca959e7a7a3920
da207cb46abff83d54555a7b08bf2e14cbb3388e8c9d0d2a1da46ac000241f9d
GET /wp-content/themes/bimber/js/picturefill/picturefill.min.js?ver=2.3.1 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-1e1b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 50115095
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LcnR1XJh3kxKLdgbW5kgsAWI4pp8xZGxcQvn6dZDahPhQadIjbC%2FWPL6YlPYKHizQRlaO7t3MjckdUe3OjfqPuq3Tiwb5hT%2B2cihWNp%2B6U9b4olvCbdLhvPcxq7kQ7d3NEGiqm%2Bg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8bf2db505-OSL
content-encoding: br
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.8 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
Hash 0d79188265c54a9af20e2c839388c53d
00f180cd922aec829575e4b60c63fe18537072b6
78b684e8d581064d66db03fecee57161cb7cf4d5851fc9c793bce495f2060481
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 0cb9d108d90236ece784b0dcaff64dd3
etag: "cdc2d2244bc36585cfa45fbb6cf097e1"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 29 Nov 2022 01:04:39 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: TyNNfw4nL5CrnAaJc/dUvw==
x-fb-debug: OTw3iO3NJhPDb23wfQ6RkQ+3FOUrSVKAshE8mXAf8ogzeJBu+R67CbL1BI3jnJC/aqNdNwxn4Rvb1w34VQQHaQ==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1904183273
date: Tue, 29 Nov 2022 00:59:02 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 7899fffaf0046efb7f9be2495d9dc928
d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 258
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Tue, 29 Nov 2022 00:59:02 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F6FC)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221
ocsp.digicert.com/
200 OK 471 B IP
Hash af25abbc1f9776cf78b07837dbea38a0
1883049bac2e92f8b3107f6435f00b83d8f4c117
663a6d77de7e3c835bcbb4b567eb28053755bf50ddab14b3f668367a85efdf17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6337
Cache-Control: max-age=129942
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:02 GMT
Etag: "6384992b-1d7"
Expires: Wed, 30 Nov 2022 13:04:44 GMT
Last-Modified: Mon, 28 Nov 2022 11:19:07 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
secure.gravatar.com/avatar/478114ebb2c7f203a8eed19469cc55a2?s=96&d=mm&r=g
200 OK 1.5 kB URL HTTP/2 secure.gravatar.com/avatar/478114ebb2c7f203a8eed19469cc55a2?s=96&d=mm&r=g
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 96x96, components 3\012- data
Hash c7d444a35d350f37cf996778686f9fce
41d80eb83a0e887107ab47d84002a24aef786447
67f565f25c1bb8ae629cfca60c71766232073a0c905e0387e45895657b4ae3e7
GET /avatar/478114ebb2c7f203a8eed19469cc55a2?s=96&d=mm&r=g HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: image/jpeg
content-length: 1528
last-modified: Wed, 11 Jan 1984 08:00:00 GMT
link: <https://www.gravatar.com/avatar/478114ebb2c7f203a8eed19469cc55a2?s=96&d=mm&r=g>; rel="canonical"
access-control-allow-origin: *
content-disposition: inline; filename="478114ebb2c7f203a8eed19469cc55a2.png"
expires: Tue, 29 Nov 2022 01:04:02 GMT
cache-control: max-age=300
x-nc: HIT arn 2
accept-ranges: bytes
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css8769092764931e581a70cdb0a2ec50bdd68a91b9db3bdf5658c356607848f.css
200 OK 171 kB URL HTTP/2 trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css8769092764931e581a70cdb0a2ec50bdd68a91b9db3bdf5658c356607848f.css
IP
File type ASCII text, with very long lines (1851)
Size 171 kB (170562 bytes)
Hash 3d624e829c2faff3ce0e6e14f7133240
b4b6c7a2f5246c5c3b7e4a0bd69210d358a09859
3ee1355f854e64be83f0d9561d502f1e8d901709b731b136a0d96c5b105aee45
GET /wp-content/cache/fvm/min/1668116812-css8769092764931e581a70cdb0a2ec50bdd68a91b9db3bdf5658c356607848f.css HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/css
last-modified: Thu, 10 Nov 2022 21:46:55 GMT
vary: Accept-Encoding
etag: W/"636d714f-7ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1565475
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z2kqGJMO0S61ZWatP70r1r1JJKpQUMX7VC1gQf0ofAS%2Fy00mqfBCJEHZn9727nT36Y1HtPM1mrKTcaDge8S0ABRK6YfSecfnJtjAUI0sbngLhac1O8po9uW3HLHTe%2B2fcgnzC%2BhS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f85ef4b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
a.omappapi.com/app/js/10.0f634e82.min.js
200 OK 7.6 kB URL HTTP/2 a.omappapi.com/app/js/10.0f634e82.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (25079)
Hash afc55a4bc1011da512853482a17bdc55
80af250922a358dc143eee2375c99a9b94b8642f
5244052c4756bcc134a9addcd4bc183caa9ae132a63a11fffd64a8712801b943
GET /app/js/10.0f634e82.min.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-6236"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-165
cdn-requestpullsuccess: True
cdn-fileserver: 512
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:38
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 965d79d237606388ddf35047e62c2cf2
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.omappapi.com/app/js/20.1ca31d61.min.js
200 OK 3.4 kB URL HTTP/2 a.omappapi.com/app/js/20.1ca31d61.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (3730)
Hash d8868a08d08098524dae3e5a608ce35c
76af32194928b24898b1c83e6b0a80ef06de4ba2
ab1954e0d4327e7c0b365cf96b8ec589f9a193b969111699e8bf3700f359ad4e
GET /app/js/20.1ca31d61.min.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-eca"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 4910b12adf5411ad2a9644b3c2e208d3
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/jquery.timeago/locales/jquery.timeago.en.js
200 OK 108 kB URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/jquery.timeago/locales/jquery.timeago.en.js
IP
Size 108 kB (108470 bytes)
Hash 131a26e33936eb3da2de5d8d0b4b2304
6552d06589fea1889e2d2b5fa9e6592d28ca7f06
2c6cc192659219d9a6df89bb5c6603fa40553244ac4152d5f528de8e0808e79a
GET /wp-content/themes/bimber/js/jquery.timeago/locales/jquery.timeago.en.js HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
etag: W/"5fe02461-1c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2215548
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=54InpHzdip4p4l398PCYwJuZi58Q9WrTK6xAtiYOwSrTWkENovq32oDBkPzfiDPAHaCaw1SwlCkr0ksyFsv2DsHr%2B9A0x26N7w%2BrECKbTb3wSLURF6MqmqwRK0TNLRI%2FVvPRasFo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771765f8af23b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP
Hash f77d11ae47b330efd4de419955eab3a3
779cdcd29c66af04c854cc03645f5bb058e89f28
06d929acea35c4183380eee46cb84b6c452e8f941b9b332cd1d8d8774273a06e
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77672
date: Tue, 29 Nov 2022 00:59:02 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1270894719758982&ev=PageView&dl=https%3A%2F%2Ftrendingpolitics.com%2F&rl=https%3A%2F%2Fconcernedpatriot.com%2F&if=true&ts=1669683542136&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&it=1669683541894&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1270894719758982&ev=PageView&dl=https%3A%2F%2Ftrendingpolitics.com%2F&rl=https%3A%2F%2Fconcernedpatriot.com%2F&if=true&ts=1669683542136&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&it=1669683541894&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1270894719758982&ev=PageView&dl=https%3A%2F%2Ftrendingpolitics.com%2F&rl=https%3A%2F%2Fconcernedpatriot.com%2F&if=true&ts=1669683542136&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&it=1669683541894&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 29 Nov 2022 00:59:02 GMT
X-Firefox-Spdy: h2
a.omappapi.com/app/js/1.12278d6a.min.js
200 OK 3.7 kB URL HTTP/2 a.omappapi.com/app/js/1.12278d6a.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (11044)
Hash 5f927b9624fc683119ea5cff5db8a63a
a32ce3cbff9ca33151109a29a21bd0b5562027ce
58e6fa0033ee78dfcab81542cb372e2fb75792dd4b7482dc604c84415ed11dd6
GET /app/js/1.12278d6a.min.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-2b60"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 7d1666760ff449a4d64234ca1d335123
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.omappapi.com/app/js/27.205350b7.min.js
200 OK 552 B URL HTTP/2 a.omappapi.com/app/js/27.205350b7.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (1207)
Hash 48eb84d698a4c03e3909d6502357058d
755a6806862f883d7681fc13096ab4b0501b023d
d8f0640e6d1f71747b19d6f85711d331e00780976ee36e872f78154025040da1
GET /app/js/27.205350b7.min.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-4f6"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-168
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e9050fa712c8fd4026f2528278d2b10d
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/ajax-search.js?ver=8.6
200 OK 681 B URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/ajax-search.js?ver=8.6
IP
Hash e76864a871cef292d24532e69b14ef11
391e9e9920311310de7eacd463a2d73c7b5646a8
2b3b7515b0cc7f647bdb53a5742366d8099faaa276b1e5c817450316926f3723
GET /wp-content/themes/bimber/js/ajax-search.js?ver=8.6 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-816"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 49319577
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=08%2FJ0pdFOU8x4OZxJDp%2FQXixBeuJoCiqAkct%2B7gE0WO11GmJaSUkXIDukIWE87jk6rX%2FqPrBHi%2B%2FRee10eM9cggZ%2BTffalrhTnx%2FbsL6PDb82N6lZVe6dJZMfRDOmOE0MtpFDsOY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8ef47b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
syndication.twitter.com/settings?session_id=c805ed72c2516ad20391099b77ca2394ffaad4c3
200 OK 374 B URL HTTP/2 syndication.twitter.com/settings?session_id=c805ed72c2516ad20391099b77ca2394ffaad4c3
IP
File type JSON data\012- , ASCII text, with very long lines (913), with no line terminators
Hash 925c2a7587f39436ea29513221652474
695b7f2f3d99f407bcdfd0b372db0e28193cc60c
62e36e14e5c219119cb51c3cdf43a2005512a1bd6ebf2d68d0c610a2e6e3ef0f
GET /settings?session_id=c805ed72c2516ad20391099b77ca2394ffaad4c3 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Tue, 29 Nov 2022 00:59:02 GMT
content-length: 374
content-encoding: gzip
x-transaction-id: 9866228f3765601d
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 111
x-connection-hash: 8c29404f05dadf8668766aa1697529014bd538ca9eb3dd12f778ce20512add42
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d648623238b74b51303beecfe2dde4b6
80c5368a9f0f53ad0ade8b671f98506d8c67f37f
de19232e92db7f791b6055284951a4610dc987493d416e38ce184f6afc534ac8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE19232E92DB7F791B6055284951A4610DC987493D416E38CE184F6AFC534AC8"
Last-Modified: Sun, 27 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2055
Expires: Tue, 29 Nov 2022 01:33:18 GMT
Date: Tue, 29 Nov 2022 00:59:03 GMT
Connection: keep-alive
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 12:31:58 GMT
expires: Sun, 26 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 217625
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pm1.dolomitethistle.store/index.php
200 OK 15 kB URL HTTP/2 pm1.dolomitethistle.store/index.php
IP
File type HTML document text\012- HTML document, ASCII text
Hash f76ececd142af25e641c52bd88843797
5379b28057ee54062f38ba937c6a8d48b5d6293b
45f0b3588dadb8d8ef27f7ff04e6ffdc2a79ed0c5eb84cc9e9605fcdb7110528
GET /index.php HTTP/1.1
Host: pm1.dolomitethistle.store
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VJX1%2BjJrfoRT6gJm0IgRAj7Ci6X4pCjsClZR7G5uUpqjecRzOY%2B8vwPiBth3JXkIswk3jyk5psABsN2q85vFZS2dK5jLCi3L2HDvkg68CCoiFMQfdg1%2FgdYuvnDMysHrLruAyxHwq95L7IQu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f50d88b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 879cba431d8b6f2717a750acd5ca7156
1d4eb23583d48dd6801a104aa20046b34acd0efe
31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trendingpolitics.com/
200 OK 22 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (22307)
Hash 2963a0cc9e677746379c887cb5107cbd
c0a14ee2d5a7561232117ce4ea65087fc9ed1be7
1c7eaf3ad7c9aa93a66d3d9f80138ecf06529a244548c72036beddd7d3464d1b
GET / HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.0.24
link: <https://trendingpolitics.com/wp-json/>; rel="https://api.w.org/"
rt-fastcgi-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BTHUjsk%2FrPK7WXCfZf1PzbH5kNaW03rNcjZYQfGnVoDXTaRoMGdkREp7G4%2BboDc8LRu1CnqVbfGr%2BfpIQn3bjixOKbymhyDcVlTUWkHvpcPyJSOyMXtKSuyTJTXh3uAMErMj3N%2B9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f6be59b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-86277393-3&cid=1806828358.1669683542&jid=1245719752&_u=YGBACEAABAAAACAAI~&z=598270386
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-86277393-3&cid=1806828358.1669683542&jid=1245719752&_u=YGBACEAABAAAACAAI~&z=598270386
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-86277393-3&cid=1806828358.1669683542&jid=1245719752&_u=YGBACEAABAAAACAAI~&z=598270386 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 00:59:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 879cba431d8b6f2717a750acd5ca7156
1d4eb23583d48dd6801a104aa20046b34acd0efe
31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
m.addthis.com/live/red_lojson/100eng.json?sh=0&ph=0&ivh=0&dt=0&pdt=709&ict=&pct=0&perf=widget%7C709%7C141%2Clojson%7C1059%7C522%2Csh%7C1064%7C15&rndr=render_toolbox%7C1636%2Crender_layers_thankyou%7C1895&cmenu=null&ppd=0&ppl=0&fbe=&xmv=0&xms=0&xmlc=0&jsfw=jquery%2Cgoogleanalytics&jsfwv=jquery-3.6.1%2Cgoogleanalytics-analytics.js&al=wpp%2Csmlty&scr=0&scv=0&apiu=1&ba=3&sid=63855955d8038f77&rev=v8.28.8-wp&pub=ra-5fff9b3450f7a922&dp=trendingpolitics.com&fp=&pfm=0&icns=
204 No Content 0 B URL HTTP/2 m.addthis.com/live/red_lojson/100eng.json?sh=0&ph=0&ivh=0&dt=0&pdt=709&ict=&pct=0&perf=widget%7C709%7C141%2Clojson%7C1059%7C522%2Csh%7C1064%7C15&rndr=render_toolbox%7C1636%2Crender_layers_thankyou%7C1895&cmenu=null&ppd=0&ppl=0&fbe=&xmv=0&xms=0&xmlc=0&jsfw=jquery%2Cgoogleanalytics&jsfwv=jquery-3.6.1%2Cgoogleanalytics-analytics.js&al=wpp%2Csmlty&scr=0&scv=0&apiu=1&ba=3&sid=63855955d8038f77&rev=v8.28.8-wp&pub=ra-5fff9b3450f7a922&dp=trendingpolitics.com&fp=&pfm=0&icns=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /live/red_lojson/100eng.json?sh=0&ph=0&ivh=0&dt=0&pdt=709&ict=&pct=0&perf=widget%7C709%7C141%2Clojson%7C1059%7C522%2Csh%7C1064%7C15&rndr=render_toolbox%7C1636%2Crender_layers_thankyou%7C1895&cmenu=null&ppd=0&ppl=0&fbe=&xmv=0&xms=0&xmlc=0&jsfw=jquery%2Cgoogleanalytics&jsfwv=jquery-3.6.1%2Cgoogleanalytics-analytics.js&al=wpp%2Csmlty&scr=0&scv=0&apiu=1&ba=3&sid=63855955d8038f77&rev=v8.28.8-wp&pub=ra-5fff9b3450f7a922&dp=trendingpolitics.com&fp=&pfm=0&icns= HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://trendingpolitics.com
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
date: Tue, 29 Nov 2022 00:59:04 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5de5ece55fb75c35ec4e1f1dc04e6e84
50f316ac26e992525fcda543f401bbeb89bc5f5c
9ac9afea104b148ab2424ae7bff7f2d62bbbea3bf35fd4e3a0a72e3350424362
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AC9AFEA104B148AB2424AE7BFF7F2D62BBBEA3BF35FD4E3A0A72E3350424362"
Last-Modified: Sun, 27 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7268
Expires: Tue, 29 Nov 2022 03:00:12 GMT
Date: Tue, 29 Nov 2022 00:59:04 GMT
Connection: keep-alive
long.interestmoments.com/go/away.php?id=9689546-75-934597645&pid=2324&lid=7933345&from=google
302 Found 0 B URL HTTP/1.1 long.interestmoments.com/go/away.php?id=9689546-75-934597645&pid=2324&lid=7933345&from=google
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/away.php?id=9689546-75-934597645&pid=2324&lid=7933345&from=google HTTP/1.1
Host: long.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 29 Nov 2022 00:59:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://long.interestmoments.com/go/away.php?id=987730385-23-683234&pid=7856&lid=07882367658&jid=67852&from=sIIInisterjack
Access-Control-Allow-Origin: *
long.interestmoments.com/go/away.php?id=987730385-23-683234&pid=7856&lid=07882367658&jid=67852&from=sIIInisterjack
200 OK 440 B URL HTTP/1.1 long.interestmoments.com/go/away.php?id=987730385-23-683234&pid=7856&lid=07882367658&jid=67852&from=sIIInisterjack
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d282386a919dab7821ecb8af2c2be991
cb29f509dd65f520b4b8d72ee0c2b560a2c360b0
6403ec35140c92ba51786815e1505a33606ae5e76f33d13e5f64ed83ff5c2179
GET /go/away.php?id=987730385-23-683234&pid=7856&lid=07882367658&jid=67852&from=sIIInisterjack HTTP/1.1
Host: long.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 00:59:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 80f807d3d704a10aa14bce0414ce5531
df36dff2ec7c87efecc48b8cfe12c92fdf286e0f
1bb317059139f31d9f20633f6bf5ecf003e31544564d1c0c279ad47201aa4d59
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 00:59:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 21:36:18 GMT
Expires: Tue, 29 Nov 2022 21:36:18 GMT
ETag: "df36dff2ec7c87efecc48b8cfe12c92fdf286e0f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
trendingpolitics.com/wp-content/themes/bimber-child-theme/modifications.js
200 OK 192 B URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber-child-theme/modifications.js
IP
Hash 832737c04a34835431976bfb873d5faf
ea270d163e64fb579e632bde46f3bbf7875af1b3
be9dc1cbbc89d4ef5eaf11dfda561b7bcf71d5f24f062668b78717a92a68712b
GET /wp-content/themes/bimber-child-theme/modifications.js HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Fri, 15 Jan 2021 22:28:30 GMT
etag: W/"6002170e-165"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2215548
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SWdeiWmDwc9PCHOXk1L8PxSCeEKntJ%2BvIm8VR7M4Z9fOtMUyvODVdf9e2svOmuxlzlzAsN4Jim%2FveOgirIzbidl3v31Y%2FDCc46sr5eDPhDZlwE5r5o213%2F5pnEaIhG5sf1C7Xvos"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771765f8ef48b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bd2897c82c183ba2556c82e075eb7002
b15517523e6cdba6631a11cb20e398c61e2868d4
c440cfcf0b0313f9fa8bf82b160c849a85a6268d90b76b35524a6645f416015c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6113
Cache-Control: max-age=123967
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:05 GMT
Etag: "638482b7-1d7"
Expires: Wed, 30 Nov 2022 11:25:12 GMT
Last-Modified: Mon, 28 Nov 2022 09:43:19 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
trck.wargaming.net/e2ncihl0/?t=1&pub_id=1287&xid=63855959386c0f00019facce&xid_param1=EZ46HGBJ6R&xid_param_2=
301 Moved Permanently 22 B URL HTTP/1.1 trck.wargaming.net/e2ncihl0/?t=1&pub_id=1287&xid=63855959386c0f00019facce&xid_param1=EZ46HGBJ6R&xid_param_2=
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with no line terminators
Hash 0e0bf67572311f8a23814419ff24ee9a
78328dfc54708433cdfb3e7857e57f87ec443b08
c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
GET /e2ncihl0/?t=1&pub_id=1287&xid=63855959386c0f00019facce&xid_param1=EZ46HGBJ6R&xid_param_2= HTTP/1.1
Host: trck.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 29 Nov 2022 00:59:05 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 22
Connection: keep-alive
Location: https://promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=63855959386c0f00019facce&xid_param1=EZ46HGBJ6R&xid_param_2=&sid=SIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA&enctid=coodf3qcm6ef&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1669683545643741316&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
Set-Cookie: STIDREFERRAL=SIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
enctid=coodf3qcm6ef; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
teclient=1669683545643741316; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache
trendingpolitics.com/wp-content/plugins/ad-ace/includes/shoppable-images/assets/js/shoppable-images-front.js?ver=1.3.18
200 OK 1.2 kB URL HTTP/2 trendingpolitics.com/wp-content/plugins/ad-ace/includes/shoppable-images/assets/js/shoppable-images-front.js?ver=1.3.18
IP
Hash 68394d40dc29dc66b957568e6fc477a7
4bc7c76b113cfeb6ee8343038f06e813ad8cc480
3e08bdc126261f3553160dabbc985a8099046dd2def5086b5aabe9af4cd49230
GET /wp-content/plugins/ad-ace/includes/shoppable-images/assets/js/shoppable-images-front.js?ver=1.3.18 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Fri, 22 Jan 2021 21:50:17 GMT
vary: Accept-Encoding
etag: W/"600b4899-700"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 50115095
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KkoBy72dBzJSEm2GMq0lxYzSZj6hU5TF%2FRZQfgxB9TyZ6%2FYV%2FFMbcUqT%2FTU1rzwYuaRpBYtFxgzZz1PmxKWjqbTyRooO3Tbq%2FLnCxwH3PGt6ty5OI2dALJfUQhSxrMWZ4k8OA2cG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f89f19b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30ee6d1c58e83efb993be1061a9d13bf
6fc81ad13dedf2a8623c2c83bd33e88f246aeb46
5667c135e5e91cfaec20d06745505ec091f8d1d4edda5afdfb7dbd82969130fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5667C135E5E91CFAEC20D06745505EC091F8D1D4EDDA5AFDFB7DBD82969130FB"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9010
Expires: Tue, 29 Nov 2022 03:29:15 GMT
Date: Tue, 29 Nov 2022 00:59:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ec8ad12e1a51290ddea8b50202a6125e
c8c886966b4ded79f4cbe25cbac15ff5a0e0d3f3
280e46bd31f398427c5e05bfcbd6e3e88e95e423bb914e64c6395823dd5c2c1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "280E46BD31F398427C5E05BFCBD6E3E88E95E423BB914E64C6395823DD5C2C1C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8884
Expires: Tue, 29 Nov 2022 03:27:09 GMT
Date: Tue, 29 Nov 2022 00:59:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30ee6d1c58e83efb993be1061a9d13bf
6fc81ad13dedf2a8623c2c83bd33e88f246aeb46
5667c135e5e91cfaec20d06745505ec091f8d1d4edda5afdfb7dbd82969130fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5667C135E5E91CFAEC20D06745505EC091F8D1D4EDDA5AFDFB7DBD82969130FB"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9068
Expires: Tue, 29 Nov 2022 03:30:13 GMT
Date: Tue, 29 Nov 2022 00:59:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ec8ad12e1a51290ddea8b50202a6125e
c8c886966b4ded79f4cbe25cbac15ff5a0e0d3f3
280e46bd31f398427c5e05bfcbd6e3e88e95e423bb914e64c6395823dd5c2c1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "280E46BD31F398427C5E05BFCBD6E3E88E95E423BB914E64C6395823DD5C2C1C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8878
Expires: Tue, 29 Nov 2022 03:27:03 GMT
Date: Tue, 29 Nov 2022 00:59:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30ee6d1c58e83efb993be1061a9d13bf
6fc81ad13dedf2a8623c2c83bd33e88f246aeb46
5667c135e5e91cfaec20d06745505ec091f8d1d4edda5afdfb7dbd82969130fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5667C135E5E91CFAEC20D06745505EC091F8D1D4EDDA5AFDFB7DBD82969130FB"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9058
Expires: Tue, 29 Nov 2022 03:30:03 GMT
Date: Tue, 29 Nov 2022 00:59:05 GMT
Connection: keep-alive
promo-cdn.worldofwarships.com/glows-37602/src/images/prem-ship.png
200 OK 53 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/prem-ship.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 24af85f4d83908010a8767dd766b20bd
5d134c6da618d2462f30398290cdbb0125a55aa0
8b1e8ec476107a88e815452f885b3b0ceb380add0bf8fc324b88f78c53198649
GET /glows-37602/src/images/prem-ship.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: image/png
content-length: 52609
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "24af85f4d83908010a8767dd766b20bd"
x-amz-request-id: tx000000000000000617861-0063767ad7-1cdf9313-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:20:06+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bd2897c82c183ba2556c82e075eb7002
b15517523e6cdba6631a11cb20e398c61e2868d4
c440cfcf0b0313f9fa8bf82b160c849a85a6268d90b76b35524a6645f416015c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6113
Cache-Control: max-age=123967
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:05 GMT
Etag: "638482b7-1d7"
Expires: Wed, 30 Nov 2022 11:25:12 GMT
Last-Modified: Mon, 28 Nov 2022 09:43:19 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
promo-cdn.worldofwarships.com/glows-37602/src/images/wowsl_logo.png
200 OK 10 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/wowsl_logo.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 749 x 299, 8-bit colormap, non-interlaced\012- data
Hash 4d9371a87a4f9a0d6a8792e0397aa303
1308b49f8614f0ab05e81698daf5bfc4a2498bf0
68ddcc9fad945493001c241d8de6fb9acdd436bc82bff503302dbffa64f4f5ed
GET /glows-37602/src/images/wowsl_logo.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: image/png
content-length: 10514
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "4d9371a87a4f9a0d6a8792e0397aa303"
x-amz-request-id: tx0000000000000009e8d4b-0063767ad7-1bfc3e68-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:20:06+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/prem-icon.png
200 OK 62 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/prem-icon.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 8782ba37be835d15f1baadc4a39e5506
1a4e79d68766262525605e528f25cf77a9fe3229
5aa7576e1679ee8aab7fae60c8862b811466708bf8e281a33a2b9633ee583dd0
GET /glows-37602/src/images/prem-icon.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: image/png
content-length: 62427
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "8782ba37be835d15f1baadc4a39e5506"
x-amz-request-id: tx000000000000003f506ee-0063767ad7-1c8e9cf0-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:20:06+00:00
x-id: sto5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
tenor.wargaming.net/assets/campaigns/static/campaign_data_gtm_sender.js
200 OK 6.6 kB URL HTTP/1.1 tenor.wargaming.net/assets/campaigns/static/campaign_data_gtm_sender.js
IP
ASN #199524 G-Core Labs S.A.
File type HTML document, ASCII text, with very long lines (7249)
Hash 51b44a9f232d5cec869a12623ae6dbfd
19305e6be93c7944f3e4cd68d778a73bf4a03031
32d957fdbd3debc51e0df55c6af4dbf747c501d19fafdd75731cb9a02cc68107
GET /assets/campaigns/static/campaign_data_gtm_sender.js HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 29 Nov 2022 00:59:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Last-Modified: Wed, 09 Nov 2022 09:49:54 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"636b77c2-4ced"
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash 4aaa77014516858f14c344f04a146c8a
0d026ea4bed41cd14328d38b0d7834db5df578f8
ca9cb0a19c26bc023184de82f8666189118a8c16a1c44bbc2ce4150eebcfc9ba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5421
Cache-Control: max-age=111038
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:05 GMT
Etag: "638452eb-117"
Expires: Wed, 30 Nov 2022 07:49:43 GMT
Last-Modified: Mon, 28 Nov 2022 06:19:23 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promo-cdn.worldofwarships.com/glows-37602/src/js/main.js
200 OK 708 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/js/main.js
IP
ASN #199524 G-Core Labs S.A.
Hash 0f9002675c842e727c260e1fdecbe686
38d6ab27ee0a1e39fac6a95c24e04825b31d3c84
896c5b539588ae04684d51f51d365b2dfa748346bdcc8458bcdebad91ce7e5e0
GET /glows-37602/src/js/main.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"c700e9ef6ee434ec2996a61803ea5367"
x-amz-request-id: tx00000000000000055ccfa-0063767ad7-1ce07b18-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:20:06+00:00
x-id: sto5-up-gc14
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
200 OK 2.4 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
IP
ASN #199524 G-Core Labs S.A.
Hash f35f094a423ace002bcc8fc043078b09
eae6459177b314c0a9bf0f6d98720b320d9f902b
a380515063a5a40119f4ea37db33d281ac7b15be00426e25c2a10cf0d524fc32
GET /global_static/age_ratings/v2/pegi_rating.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:21 GMT
etag: W/"207ef7e145ba483b342b96f8c2fbf72a"
x-amz-request-id: tx0000000000000002a85f1-00633fe0c3-1c4459fa-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-28T08:23:03+00:00
x-id: sto5-up-gc13
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/libs/oneTrustBanner.js
200 OK 6.1 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/libs/oneTrustBanner.js
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (10006)
Hash b9cced75c70c757a4caf199adc20b146
e1359fdcf98369afc49dcff8d893de38877df4c4
7696955a233236d54d738479808af1e4bd8d4fdd76f3f5d077285aa95b8a90ca
GET /glows-37602/src/libs/oneTrustBanner.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"9a2978c60dfa952243b458458bd6fe95"
x-amz-request-id: tx00000000000000061785d-0063767ad7-1cdf9313-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:20:06+00:00
x-id: sto5-up-gc10
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg
200 OK 24 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg
IP
ASN #199524 G-Core Labs S.A.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (21747)
Hash c3ee9713b413f1f370d14b3b17a34b6a
69e9dfd0e9efbd18eed2113090e35df175fa9d21
f2554ea608026bd96c0533dbeb84be929248c1a3fc1cecebef75566e512957b5
GET /global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"635ea99325f08d75fd8f09201f998f50"
x-amz-request-id: tx0000000000000002a85b2-00633fe0c3-1c445a09-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-28T08:21:53+00:00
x-id: sto5-up-gc11
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json
200 OK 1.9 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json
IP
File type JSON data\012- , ASCII text, with very long lines (5875), with no line terminators
Hash 23b49030e418c340a4d3b3c510f6558d
fd7f8e05f97e7bf21c83782409f6972b172121f1
0f1e442050ca65df6cbaa0371a5097b75cb8bd93d0a7df66dfb88c249ed86b71
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:06 GMT
content-type: application/x-javascript
content-length: 1898
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: I7SQMOQYw0Ck07PFEPZVjQ==
last-modified: Fri, 25 Nov 2022 10:09:39 GMT
etag: 0x8DACECD29F68FC0
x-ms-request-id: 22332b09-f01e-0147-73b6-0041d8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 53071
expires: Wed, 30 Nov 2022 00:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 771766128e701c12-OSL
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/Back.jpg
200 OK 554 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/Back.jpg
IP
ASN #199524 G-Core Labs S.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 554 kB (554306 bytes)
Hash 5b1143e3f10fd52adf017a8c52710246
0eb93a177d800fd1c5498ab56ab2c3dbeffb1604
3f79426bfdbb1b3dd81395847178e30ca89e488ab1a55d8c9385eda70e459536
GET /glows-37602/src/images/Back.jpg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-37602/src/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:06 GMT
content-type: image/jpeg
content-length: 554306
last-modified: Thu, 17 Nov 2022 17:40:58 GMT
etag: "5b1143e3f10fd52adf017a8c52710246"
x-amz-request-id: tx0000000000000007a6f17-0063767ad8-1cdd7ef6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:21:54+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/main.css
200 OK 128 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/main.css
IP
ASN #199524 G-Core Labs S.A.
Size 128 kB (127517 bytes)
Hash 78ed0dd14ce3fa89481da33d6572c1f2
27c6802cf5bdcf418144aa31c1ac098ec5ac20d8
8519826cd0e4e7b1fb035799e0da8faf5907e6949c799ef0f98928b27b7beecc
GET /glows-37602/src/main.css HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"efd6dc5fe282e1ddd7debd0cf7c36232"
x-amz-request-id: tx0000000000000005cd540-0063767ad7-1cdfff90-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:20:06+00:00
x-id: sto5-up-gc10
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 451498
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tenor.wargaming.net/sid?include=campaign&filter[sid]=SIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA
200 OK 480 B URL HTTP/1.1 tenor.wargaming.net/sid?include=campaign&filter[sid]=SIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA
IP
ASN #199524 G-Core Labs S.A.
File type JSON data\012- , ASCII text, with very long lines (937), with no line terminators
Hash f2009de99954ffcfd6054e3007669edd
27be67c6ed246b04f15bc215bb8d0f7af59fd31b
9e6b5b6a5dbf9e50d123f50e60b651bb35dbc0d7311385f5115db1a95965888a
GET /sid?include=campaign&filter[sid]=SIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 29 Nov 2022 00:59:06 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Vary: Accept-Encoding
Access-Control-Expose-Headers: Server,Content-Length,Date
Access-Control-Allow-Origin: https://promo.worldofwarships.eu
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:51:51 GMT
expires: Thu, 23 Nov 2023 18:51:51 GMT
cache-control: public, max-age=31536000
age: 454035
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:17:43 GMT
expires: Wed, 22 Nov 2023 22:17:43 GMT
cache-control: public, max-age=31536000
age: 528083
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/favicon/v2/apple-touch-icon-180x180.png
200 OK 2.3 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/favicon/v2/apple-touch-icon-180x180.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 687168d21b7e78dfb6175de97ae3d045
78081e22c1ea9e51a6cac8910d7ce01c319132e1
49f69cf7e37fda7051cd440048ecd5b2ab0973f106dc6e669959ee453b03e5d1
GET /global_static/favicon/v2/apple-touch-icon-180x180.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:06 GMT
content-type: image/png
content-length: 2326
last-modified: Mon, 05 Sep 2022 07:56:20 GMT
etag: "687168d21b7e78dfb6175de97ae3d045"
x-amz-request-id: tx0000000000000002a896d-00633fe0e6-1c4459fa-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-28T08:39:58+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/favicon/v2/favicon-64x64.png
200 OK 1.2 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/favicon/v2/favicon-64x64.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash de30b29e8bbc72b7828734d5d781b9eb
9d5fb51148291180b45d9481b756eb7fc2d4a352
e47efd1c616db1a5564776f4be806183ee085c80d2d3722d3f8d5a06115e46ee
GET /global_static/favicon/v2/favicon-64x64.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:06 GMT
content-type: image/png
content-length: 1198
last-modified: Mon, 05 Sep 2022 07:56:21 GMT
etag: "de30b29e8bbc72b7828734d5d781b9eb"
x-amz-request-id: tx00000000000000080ac6e-00633fe0d1-1c4c0c09-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-28T08:23:04+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 757ed96a69f60ee2f391d4ddf1201b89
4f87c8578d82630c2feac92282dcff0564fafe90
1a714dfc94f94d45d52f9434dadacc1aaa4e77d6771cccd03f6e8fbbe0e8f1c3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6359
Cache-Control: max-age=132483
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:06 GMT
Etag: "6384a306-116"
Expires: Wed, 30 Nov 2022 13:47:09 GMT
Last-Modified: Mon, 28 Nov 2022 12:01:10 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278
cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
200 OK 94 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65451)
Hash f6a491be9dc7f6ba1271f4faa9753179
e11e8e291ca6548f4933103088b8acd15af84191
6cf04708cbb25e9b7144e865deebd75bd4b2d42fa703299ba303a084d457b081
GET /scripttemplates/202211.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:06 GMT
content-type: application/javascript
content-length: 93485
content-encoding: gzip
content-md5: 9qSRvp3H9roScfT6qXUxeQ==
last-modified: Thu, 24 Nov 2022 02:58:37 GMT
etag: 0x8DACDC7C8B2690E
x-ms-request-id: 6ef0f6f9-d01e-005f-61be-ff2a18000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 58874
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 771766140eda1c12-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:59:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 560 B URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
Hash 4dc74f8a29b10817595a7a322dcd0595
53d1385526833455c2164c9bab1674db2e589c77
7c8ada265bce95443f3c55e6ab425e333429055653d990113944294cf16b31d1
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:06 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77176613d8820b55-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/viewthroughconversion/1006839708/?random=1669683545487&cv=11&fst=1669683545487&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&gcs=G100&gcd=G100&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63855959386c0f00019facce%26xid_param1%3DEZ46HGBJ6R%26xid_param_2%3D%26sid%3DSIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA%26enctid%3Dcoodf3qcm6ef%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669683545643741316%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pagead/viewthroughconversion/1006839708/?random=1669683545487&cv=11&fst=1669683545487&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&gcs=G100&gcd=G100&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63855959386c0f00019facce%26xid_param1%3DEZ46HGBJ6R%26xid_param_2%3D%26sid%3DSIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA%26enctid%3Dcoodf3qcm6ef%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669683545643741316%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1006839708/?random=1669683545487&cv=11&fst=1669683545487&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&gcs=G100&gcd=G100&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63855959386c0f00019facce%26xid_param1%3DEZ46HGBJ6R%26xid_param_2%3D%26sid%3DSIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA%26enctid%3Dcoodf3qcm6ef%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669683545643741316%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 00:59:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ade.googlesyndication.com/ddm/activity/src=10697551;type=pagev0;cat=allvi0;ord=9622467821522;gtm=2wgb90;gcs=G100;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63855959386c0f00019facce%26xid_param1%3DEZ46HGBJ6R%26xid_param_2%3D%26sid%3DSIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA%26enctid%3Dcoodf3qcm6ef%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669683545643741316%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63855959386c0f00019facce%26xid_param1%3DEZ46HGBJ6R%26xid_param_2%3D%26sid%3DSIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA%26enctid%3Dcoodf3qcm6ef%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669683545643741316%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287?
200 OK 42 B URL HTTP/2 ade.googlesyndication.com/ddm/activity/src=10697551;type=pagev0;cat=allvi0;ord=9622467821522;gtm=2wgb90;gcs=G100;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63855959386c0f00019facce%26xid_param1%3DEZ46HGBJ6R%26xid_param_2%3D%26sid%3DSIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA%26enctid%3Dcoodf3qcm6ef%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669683545643741316%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63855959386c0f00019facce%26xid_param1%3DEZ46HGBJ6R%26xid_param_2%3D%26sid%3DSIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA%26enctid%3Dcoodf3qcm6ef%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669683545643741316%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287?
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/activity/src=10697551;type=pagev0;cat=allvi0;ord=9622467821522;gtm=2wgb90;gcs=G100;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63855959386c0f00019facce%26xid_param1%3DEZ46HGBJ6R%26xid_param_2%3D%26sid%3DSIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA%26enctid%3Dcoodf3qcm6ef%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669683545643741316%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63855959386c0f00019facce%26xid_param1%3DEZ46HGBJ6R%26xid_param_2%3D%26sid%3DSIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA%26enctid%3Dcoodf3qcm6ef%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669683545643741316%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287? HTTP/1.1
Host: ade.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 00:59:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (48198), with no line terminators
Hash b423017d2eccc05cb5e3921d36eeb535
b989dd503a71fa6a448860a5d59c28bbceee910b
b8aab8ba299a063e0e5faacea59d7cc56da466c0fd3b91a8d03480184eaf7495
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:06 GMT
content-type: application/x-javascript
content-length: 11485
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: tCMBfS7MwFy145IdNu61NQ==
last-modified: Fri, 25 Nov 2022 10:09:21 GMT
etag: 0x8DACECD1F1475FC
x-ms-request-id: ba3e27e9-f01e-00e9-15b6-0024e0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 53071
expires: Wed, 30 Nov 2022 00:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 771766150f1c1c12-OSL
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/matchmedia/matchmedia.js
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/matchmedia/matchmedia.js
IP
GET /wp-content/themes/bimber/js/matchmedia/matchmedia.js HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-6a4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 418676
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SeYwLGdJGUwtvwkiRCixUkSe4VI2katm%2FH2AvFSYDPfeUyLvrMiWY606g%2B2ZE15DpiIG42jOCvAWfk0EfsapriVhlMpryBqSXDY6xd8TEob%2BLtDzm8%2FKJrQsxGIXWmVHlas41rkN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8bf2bb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/global.js?ver=8.6
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/global.js?ver=8.6
IP
GET /wp-content/themes/bimber/js/global.js?ver=8.6 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-b3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 50115095
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8rqgjvYFVP%2B2KHB65Ht4uMAxhkCbqAanh035gUF6UjvBKRsRLaO2P9CWD%2BzF8ZMnHY%2BVQ1HPLzf%2BS8VdKdoJMSfO9pwu2C0fkR3Lht0FTptgjGHPD0IHdxcUfnsddcPuOlr5b%2Bie"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8df39b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
a.omappapi.com/app/js/22.7f83f3f7.min.js
200 OK 0 B URL HTTP/2 a.omappapi.com/app/js/22.7f83f3f7.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/22.7f83f3f7.min.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-613"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-199
cdn-requestpullsuccess: True
cdn-fileserver: 506
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 022cd6138786114d042768a66badad67
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/plugins/ad-ace/assets/js/slideup.js?ver=1.3.18
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/plugins/ad-ace/assets/js/slideup.js?ver=1.3.18
IP
GET /wp-content/plugins/ad-ace/assets/js/slideup.js?ver=1.3.18 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Fri, 22 Jan 2021 21:50:17 GMT
vary: Accept-Encoding
etag: W/"600b4899-6cf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2215548
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X30TDuiDdCAFF6A9mZGyuvlfaf0n%2BXwX4XOoN%2FpVSAyuE0%2FfU6lPCuTVTYSaIQdqMK6ghVAl5%2BCSSemLBe2cdG8FyR7k6BDOtmVLZ45BLfibsPiFa2Iv9KNrOA15pUZUBaWSEA2I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f89f17b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/jquery.timeago/jquery.timeago.js?ver=1.5.2
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/jquery.timeago/jquery.timeago.js?ver=1.5.2
IP
GET /wp-content/themes/bimber/js/jquery.timeago/jquery.timeago.js?ver=1.5.2 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-1c47"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 15118708
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0VoWcW11%2FD07PgcSTrLqYrFcGIBEej0APXHII%2FMjjyqXwuwUsPnb%2FQ0XT08ooEfT4jPlQdFytbHiIhCXwt87qAxDMX9NS99n7B8ihQUPcUqVtjokuKlIb%2Bj0K9ywoq67AeZ0CrY2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8af21b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css1f768154f6a606a6c27008a5d969ad1603258e6f936c4405023b9e231ec80.css
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css1f768154f6a606a6c27008a5d969ad1603258e6f936c4405023b9e231ec80.css
IP
GET /wp-content/cache/fvm/min/1668116812-css1f768154f6a606a6c27008a5d969ad1603258e6f936c4405023b9e231ec80.css HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/css
last-modified: Thu, 10 Nov 2022 21:46:55 GMT
vary: Accept-Encoding
etag: W/"636d714f-30e6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1481647
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WU5FR2RpmOEe5I52rRTqTx0JhI8ySOCuF9zkP2sDaN2QEZCraDnL9qpd3uVyqsfCsa9sPZysLe89giBh7g9DQwTx1ZWerUmvr8pkV%2Fm9zPi5IKB2NDfbHF%2Fl%2FmgzWebg04j5sfLf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f85efab505-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js?ver=6.1.1
200 OK 0 B URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js?ver=6.1.1
IP
GET /sdks/OneSignalSDK.js?ver=6.1.1 HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 169
expires: Fri, 02 Dec 2022 00:59:01 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 771765f968b6b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
a.omappapi.com/app/js/29.1c75394c.min.js
200 OK 0 B URL HTTP/2 a.omappapi.com/app/js/29.1c75394c.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/29.1c75394c.min.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-adf"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-200
cdn-requestpullsuccess: True
cdn-fileserver: 471
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 0857d5df6bf424934c6f5dc3e4ee9730
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css7be1a30771e748245b32a24ed1f688ccdefbae40a56506c98465785643e87.css
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css7be1a30771e748245b32a24ed1f688ccdefbae40a56506c98465785643e87.css
IP
GET /wp-content/cache/fvm/min/1668116812-css7be1a30771e748245b32a24ed1f688ccdefbae40a56506c98465785643e87.css HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/css
last-modified: Thu, 10 Nov 2022 21:46:54 GMT
etag: W/"636d714e-129"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1481647
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QnJjxqOqZ1EyWmZEAFBWYQdztaSgA2uY9kjZQbEeVpa3cmGEVw68%2FwrBU4m2zTvbH8Z91yAj5Zah3E93fvN6gUXT54yCJyvIlf7OQVYtPpo1KaOP1CiORgiY4ZOhjvuYGqsGrs8a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771765f84eeeb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=63855959386c0f00019facce&xid_param1=EZ46HGBJ6R&xid_param_2=&sid=SIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA&enctid=coodf3qcm6ef&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1669683545643741316&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
200 OK 0 B URL HTTP/2 promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=63855959386c0f00019facce&xid_param1=EZ46HGBJ6R&xid_param_2=&sid=SIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA&enctid=coodf3qcm6ef&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1669683545643741316&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
IP
ASN #199524 G-Core Labs S.A.
GET /glows-37602/eu-no/?t=1&pub_id=1287&xid=63855959386c0f00019facce&xid_param1=EZ46HGBJ6R&xid_param_2=&sid=SIDADbfQHUaDiM90Lvi5PZDATJ7U-jgqQBWPktR8B2lWxWIQAn3sbf_mIeJFe8GAliqPSKmtzBS1aalcjdGIy7B0A4iaBU-r3RW9qCsKHVsP7L_O2TdIlN49qJOy3_2pQHxZMiYsC5Uo_NniA&enctid=coodf3qcm6ef&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1669683545643741316&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287 HTTP/1.1
Host: promo.worldofwarships.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"e33d014eb7accd282861240782267878"
x-amz-request-id: tx000000000000003f5fcf4-00637681ad-1c8e9cf0-ed1
cache: HIT
x-cached-since: 2022-11-25T21:15:25+00:00
x-id: sto5-up-gc14
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto+Condensed:wght@400;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto+Condensed:wght@400;700&display=swap
IP
GET /css2?family=Roboto+Condensed:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 00:59:05 GMT
date: Tue, 29 Nov 2022 00:59:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i%2C900%2C900i%2C100ii%2C300ii%2C400ii%2C500ii%2C700ii%2C900ii%7CBitter%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100i%2C200i%2C300i%2C400i%2C500i%2C600i%2C700i%2C800i%2C900i%2C100ii%2C200ii%2C300ii%2C400ii%2C500ii%2C600ii%2C700ii%2C800ii%2C900ii&display=swap&subset=all&ver=3.2.5
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i%2C900%2C900i%2C100ii%2C300ii%2C400ii%2C500ii%2C700ii%2C900ii%7CBitter%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100i%2C200i%2C300i%2C400i%2C500i%2C600i%2C700i%2C800i%2C900i%2C100ii%2C200ii%2C300ii%2C400ii%2C500ii%2C600ii%2C700ii%2C800ii%2C900ii&display=swap&subset=all&ver=3.2.5
IP
GET /css?family=Roboto%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C700%2C700i%2C900%2C900i%2C100ii%2C300ii%2C400ii%2C500ii%2C700ii%2C900ii%7CBitter%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100i%2C200i%2C300i%2C400i%2C500i%2C600i%2C700i%2C800i%2C900i%2C100ii%2C200ii%2C300ii%2C400ii%2C500ii%2C600ii%2C700ii%2C800ii%2C900ii&display=swap&subset=all&ver=3.2.5 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 00:59:00 GMT
date: Tue, 29 Nov 2022 00:59:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/stickyfill/stickyfill.min.js?ver=2.0.3
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/stickyfill/stickyfill.min.js?ver=2.0.3
IP
GET /wp-content/themes/bimber/js/stickyfill/stickyfill.min.js?ver=2.0.3 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-1893"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 15118708
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6xa491J%2FfFKLHM0%2BhBMVfHx2YzvQwbBR7FXma%2FbztJlw4AGx07dLpZrgpfwpF8JZziTR%2FErWaUP7edDyvHHOcfP9VEwl4sEuVS2Huz7RK8iZJ0TYHP8ToeD0NrbSap8%2B1gq12pRt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8af1fb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/matchmedia/matchmedia.addlistener.js
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/matchmedia/matchmedia.addlistener.js
IP
GET /wp-content/themes/bimber/js/matchmedia/matchmedia.addlistener.js HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-b00"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1137431
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9qlCUUgTHkD4fdMQloRsouYobuUe7Tvp5qbLbYMDIGleK0B7p1sOp9wJimdiuGl9ZzzlYyhmJcZI47R6hmIhGSuOEpt6AUtKOkSOT9XHicOU91y%2B2WRXmDy3WBI83Y48fLwskVk%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8bf2cb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2
IP
GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 21:20:49 GMT
vary: Accept-Encoding
etag: W/"636430b1-2112"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2171571
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wabeYPHgyxBZNKYVLESDxGViWwFSlw%2FaOThJDFp4hB9FtQW%2BF66mTYccWirf4drOw5dcym8FqWrlT7iTt0UDlfuZfjUkVAOqNL9cBB2AYubDrq7IVgk%2B%2FGZRp8KouDPvhGCBC8Ew"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8ef46b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
concernedpatriot.com/explosive-letter-from-arizona-ag-to-maricopa-county-is-held-up-by-kari-lake-as-evidence-she-will-become-governor/?utm_source=cpnl&utm_medium=EMAIL
200 OK 0 B URL HTTP/2 concernedpatriot.com/explosive-letter-from-arizona-ag-to-maricopa-county-is-held-up-by-kari-lake-as-evidence-she-will-become-governor/?utm_source=cpnl&utm_medium=EMAIL
IP
GET /explosive-letter-from-arizona-ag-to-maricopa-county-is-held-up-by-kari-lake-as-evidence-she-will-become-governor/?utm_source=cpnl&utm_medium=EMAIL HTTP/1.1
Host: concernedpatriot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:00 GMT
content-type: text/html; charset=UTF-8
x-xss-protection: 1; mode=block
expect-ct: max-age=7776000, enforce
access-control-allow-origin: null
access-control-allow-methods: GET,PUT,POST,DELETE
access-control-allow-headers: Content-Type, Authorization
x-content-security-policy: default-src 'self'; img-src *; media-src * data:;
x-content-type-options: nosniff
content-security-policy: report-uri https://concernedpatriot.com
referrer-policy: strict-origin-when-cross-origin
cross-origin-embedder-policy-report-only: unsafe-none; report-to="default"
cross-origin-embedder-policy: unsafe-none; report-to="default"
cross-origin-opener-policy-report-only: same-origin; report-to="default"
cross-origin-opener-policy: same-origin-allow-popups; report-to="default"
cross-origin-resource-policy: cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), document-domain=(), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), window-placement=()
feature-policy: display-capture 'self'
x-permitted-cross-domain-policies: none
strict-transport-security: max-age=63072000; includeSubDomains; preload
link: <https://concernedpatriot.com/wp-json/>; rel="https://api.w.org/", <https://concernedpatriot.com/wp-json/wp/v2/posts/18985>; rel="alternate"; type="application/json", <https://concernedpatriot.com/?p=18985>; rel=shortlink
set-cookie: shield-notbot-nonce=29362daccc; expires=Tue, 29-Nov-2022 00:59:14 GMT; Max-Age=15; path=/; secure
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LXQdQnythN42tEdBy3pOlkfi8UWK%2BbKaG59USRo6ygwBXJHAhLfzsYpTXlx6DdINZ6aLmg3Wn%2BFVnF0%2F9DtuAAfmaGoa28CZsr8nPGtqIPSOPYKhG7%2Fd%2B%2FjqCO2JFaqIDx%2BrPhlc%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765e4fb7ab4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/modernizr/modernizr-custom.min.js?ver=3.3.0
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/modernizr/modernizr-custom.min.js?ver=3.3.0
IP
GET /wp-content/themes/bimber/js/modernizr/modernizr-custom.min.js?ver=3.3.0 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-1b70"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 49319579
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L8nJFOxhGtPGfhXTYdntOGLRunzzti8U94U1h2Uno3xpNiy34KPlvRtKxgH3aZt1VUxBxFUe8%2FzPO%2BV7AQfU1az2LclyeDWw8OBLzJlNBaDO67n6KEvTdRySPQsje4NDEmwr0kEU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8af1db505-OSL
content-encoding: br
X-Firefox-Spdy: h2
a.omappapi.com/app/js/api.min.js
200 OK 0 B URL HTTP/2 a.omappapi.com/app/js/api.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/api.min.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6378026b-13ef5"
last-modified: Fri, 18 Nov 2022 22:08:43 GMT
cdn-storageserver: DE-198
cdn-requestpullsuccess: True
cdn-fileserver: 492
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:37
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 130d2617946536a57b2cb1a342be6931
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
IP
GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 21:20:49 GMT
vary: Accept-Encoding
etag: W/"636430b1-2782"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2171571
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KS35Kilv8KJIQnloDaHGhyXO9Ig5B9FpAsLGeFqpmhyILFJtw5vs4OzHqU7QtNpGBbFB4eV6mA8W3ovMDN5UjwuOyjGZjLVoNprgYPFXBfDKVnCC8ouznQ0WPWEQC4AZQILQUciL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8df3bb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
IP
ASN #199524 G-Core Labs S.A.
GET /global_static/age_ratings/v2/pegi_ext-violence.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"9a3e2c35d77bd8b96138310eeb6b7f7b"
x-amz-request-id: tx00000000000000080ab06-00633fe0c3-1c4c0c09-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-28T08:21:53+00:00
x-id: sto5-up-gc11
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/loader/anchor.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/loader/anchor.svg
IP
ASN #199524 G-Core Labs S.A.
GET /glows-37602/src/images/loader/anchor.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-37602/src/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:06 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"4c1b50010445879a6da944e80fde178a"
x-amz-request-id: tx000000000000003f50702-0063767ad8-1c8e9cf0-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:21:55+00:00
x-id: sto5-up-gc12
content-encoding: gzip
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/themes/bimber/js/jquery.placeholder/placeholders.jquery.min.js?ver=4.0.1
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/themes/bimber/js/jquery.placeholder/placeholders.jquery.min.js?ver=4.0.1
IP
GET /wp-content/themes/bimber/js/jquery.placeholder/placeholders.jquery.min.js?ver=4.0.1 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 04:28:17 GMT
vary: Accept-Encoding
etag: W/"5fe02461-1555"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 15125036
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B5Gg%2FKhRGx1L2n%2FvjIchhr7EOM6NWP58KBXdKiQCTIclKkMVGo3x%2FdoMQWJWB5OO6O4Q8Uhr2OJv%2BtgbofrgGp%2By4ptZxyclXw900Vb%2FPK%2B%2BqGzwr9DXYKIoeQvvu9nJo9AOpY5S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8af20b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 21:20:49 GMT
vary: Accept-Encoding
etag: W/"636430b1-53c0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 2171571
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iRycfxXaY2vUn50w2x5cBSVeZMS%2FzFKAGyIygevZ4undHnnL5oNYTUtDYhSds7c7xCUw%2BvyNQB8RXWrW%2F1kikoiZfnSKuJXBPu6Dsaiq0ec83xs6%2FvGnVLUdlJ%2BaRziozsxfqGMX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f8df3ab505-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700%7CRoboto%3A400%2C500%2C700%7CPoppins%3A400%2C600%2C700%7CCrimson+Pro%3A400%7CRubik%3A500%2C400%7CAllison%3A500%2C400&display=swap&ver=11.5.1
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700%7CRoboto%3A400%2C500%2C700%7CPoppins%3A400%2C600%2C700%7CCrimson+Pro%3A400%7CRubik%3A500%2C400%7CAllison%3A500%2C400&display=swap&ver=11.5.1
IP
GET /css?family=Open+Sans%3A400%2C600%2C700%7CRoboto%3A400%2C500%2C700%7CPoppins%3A400%2C600%2C700%7CCrimson+Pro%3A400%7CRubik%3A500%2C400%7CAllison%3A500%2C400&display=swap&ver=11.5.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://concernedpatriot.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 00:59:00 GMT
date: Tue, 29 Nov 2022 00:59:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/cache/fvm/min/1668116812-cssf08b4714ab0bfa7a871d25e54ff23cab4934b9e67a8d59002407e5149f94a.css
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/cache/fvm/min/1668116812-cssf08b4714ab0bfa7a871d25e54ff23cab4934b9e67a8d59002407e5149f94a.css
IP
GET /wp-content/cache/fvm/min/1668116812-cssf08b4714ab0bfa7a871d25e54ff23cab4934b9e67a8d59002407e5149f94a.css HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/css
last-modified: Thu, 10 Nov 2022 21:46:54 GMT
vary: Accept-Encoding
etag: W/"636d714e-1a58"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1565475
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nv12WgDIxGh%2BFQ4y5ajxlu7wNNpu5AZLvdPH581iylCyo4r3MA3ZvebpW58NTecldoX7EboCug5Ev%2FGLhjocsrOiZ%2Ft5dGbtYPcAtLTZTB6LHaYrw6tloWayO0yEoODiDxoz5wTe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f84ef2b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: application/javascript
last-modified: Thu, 19 Nov 2020 09:31:13 GMT
vary: Accept-Encoding
etag: W/"5fb63b61-2bd8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 15118708
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EomzUCF4at8t1SsmIqk0th6qypvSxMz1BBEO9YpxyUzGJmkX9G7xiPYnQl0SnP5EhfLsxfCIfSGVfTq5LRJPz%2F15vq03W7OJ2zuo7dtmzHNxGGsyQ8np3LtyNah9iRx%2FuQJmd%2FDg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f89f16b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
embed.air.tv/v1/twoview_bootstrap.js?organization=vbNx0Au4Ti2T9BJXkzclTQ
200 OK 0 B URL HTTP/2 embed.air.tv/v1/twoview_bootstrap.js?organization=vbNx0Au4Ti2T9BJXkzclTQ
IP
GET /v1/twoview_bootstrap.js?organization=vbNx0Au4Ti2T9BJXkzclTQ HTTP/1.1
Host: embed.air.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:02 GMT
content-type: text/javascript
server: nginx/1.20.1
vary: Accept-Encoding
cache-control: max-age=0, private, no-cache
access-control-allow-credentials: true
access-control-allow-methods: GET, PATCH, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Mx-ReqToken,X-Requested-With
access-control-expose-headers: Authorization,Location
content-encoding: gzip
X-Firefox-Spdy: h2
thirawogla.com/bm3iVx0.Pj3upevvb/m/V_JqZ-DG0v0/NqTJcEylMqjNApwjLVTsQA1wNJzGIgy/MbDOEu
200 OK 0 B URL HTTP/2 thirawogla.com/bm3iVx0.Pj3upevvb/m/V_JqZ-DG0v0/NqTJcEylMqjNApwjLVTsQA1wNJzGIgy/MbDOEu
IP
GET /bm3iVx0.Pj3upevvb/m/V_JqZ-DG0v0/NqTJcEylMqjNApwjLVTsQA1wNJzGIgy/MbDOEu HTTP/1.1
Host: thirawogla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://long.interestmoments.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
x-frame-options: DENY
referrer-policy: no-referrer
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Tue, 29 Nov 2022 00:59:04 GMT
set-cookie: kadCCap=220790:1:1668460505;79610:1:1669272875;194136:1:1669413157;220335:1:1669620452;218693:1:1669515516;212269:1:1667199062;199455:1:1668245056;221398:1:1669672704;219652:1:1669330335;219484:1:1667715065;219047:1:1667194435; max-age=1701219545; path=/
kadACap=424441:1:1669620569;419301:1:1669646033;446531:1:1669270846;419323:1:1669432178;419293:1:1669526430;401659:1:1669529511;419295:1:1669362714;445506:1:1669286676;419299:1:1669590798;445735:1:1669286676;449523:1:1669611040;346327:1:1669617075;419321:1:1669463839;419297:1:1669465197;190964:1:1669272875;383700:1:1669640980;419303:1:1669446827;410252:1:1669683544;446013:1:1668228435;419291:1:1669443279;451724:1:1669565807;453831:1:1669633147;442019:1:1669618252;451139:1:1669521403;407100:1:1668246232; max-age=1701219545; path=/
kadCSCap=220335:1:1669620452;221398:1:1669672704; path=/
kadASCap=424441:1:1669620569;346327:1:1669617075;383700:1:1669640980;442019:1:1669618252;449523:1:1669611040;453831:1:1669633147;410252:1:1669683544;419301:1:1669646033; path=/
kadRPixJ=bnVsbA==; max-age=1701219545; path=/
kadUnP3=CAEQ2LKVnAYaDQiEyJMCEAEY0Y2TnAYaDQiy0ZQCEAEYgN6UnAYaDQioiJcCEAEY2LKVnAYaDQigrZcCEAEY5MWRnAYaDQiorZcCEAEY2caRnAYaDQjzwZkBEAEYs6uRnAYiCggDEAEY2LKVnAYqDAjU7CcQARiA3pScBioMCKSTKBABGNiylZwGKgwI3ZcoEAEY5MWRnAYqDAjelygQARjZxpGcBioMCIy9EhABGLOrkZwGKgwIhKclEAEY0Y2TnAY=; max-age=1701219545; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/logo-main.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/logo-main.svg
IP
ASN #199524 G-Core Labs S.A.
GET /glows-37602/src/images/logo-main.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:05 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 17:40:58 GMT
etag: W/"3205035293624ac8f4502ce6c888db9e"
x-amz-request-id: tx0000000000000007a6efa-0063767ad7-1cdd7ef6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:20:06+00:00
x-id: sto5-up-gc14
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/loader/circle.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/loader/circle.svg
IP
ASN #199524 G-Core Labs S.A.
GET /glows-37602/src/images/loader/circle.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-37602/src/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:59:06 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"2c3f7ab695415509a360372c3e81deb8"
x-amz-request-id: tx000000000000004deb980-0063767ad8-1c6c35db-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-25T18:21:54+00:00
x-id: sto5-up-gc12
content-encoding: gzip
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/cache/fvm/min/1668116812-csse6a19b33696ce3967759ddce26ffb39a2a2e283c54c44df98c4b5415aea54.css
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/cache/fvm/min/1668116812-csse6a19b33696ce3967759ddce26ffb39a2a2e283c54c44df98c4b5415aea54.css
IP
GET /wp-content/cache/fvm/min/1668116812-csse6a19b33696ce3967759ddce26ffb39a2a2e283c54c44df98c4b5415aea54.css HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/css
last-modified: Thu, 10 Nov 2022 21:46:54 GMT
vary: Accept-Encoding
etag: W/"636d714e-1564"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1565475
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aQE1r16X0dMzKmk%2Bdx%2BhQzqTiIyY9Nm77JmpiFcxVjZGDvHMVdIX8rVq%2B%2FwqtqvoCMalhs4Ek1hp3crQjGekZjkWcr104OkXxDN94EXGIXgt3ArA1XGFvu9txcb%2BJ9BrAMmJRTOz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f84eefb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/cache/fvm/min/1668116812-cssf87649f60291161c8ac601c7e73291d45dd27f1a00b24e73d08254d4aef9e.css
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/cache/fvm/min/1668116812-cssf87649f60291161c8ac601c7e73291d45dd27f1a00b24e73d08254d4aef9e.css
IP
GET /wp-content/cache/fvm/min/1668116812-cssf87649f60291161c8ac601c7e73291d45dd27f1a00b24e73d08254d4aef9e.css HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 03:01:32 GMT
vary: Accept-Encoding
etag: W/"6374528c-250"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1099110
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8B19oa44wAjGNWMupBZi7e4haM6WL52htiOvcN3QEm8k05JQcjPOi9f5NVHJ7TtR7TpDpXmh30Ycf27j7%2FiWFhg6Qrtd64ZHKhSlWCgc3IoB8xMIv%2FHZXvCKqxEDWE%2FkFqbbuAJB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771765f86effb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css0775fb04250f7b11128cdf5b536e4377a67dc5b63b51f937b3d14a280a60f.css
200 OK 0 B URL HTTP/2 trendingpolitics.com/wp-content/cache/fvm/min/1668116812-css0775fb04250f7b11128cdf5b536e4377a67dc5b63b51f937b3d14a280a60f.css
IP
GET /wp-content/cache/fvm/min/1668116812-css0775fb04250f7b11128cdf5b536e4377a67dc5b63b51f937b3d14a280a60f.css HTTP/1.1
Host: trendingpolitics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trendingpolitics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:59:01 GMT
content-type: text/css
last-modified: Thu, 10 Nov 2022 21:46:55 GMT
etag: W/"636d714f-1b9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 494446
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4wyiAtG6M%2FxqbAS%2F5o8MJnxrT%2FtzdbEeSUhHKLayxP%2B4bLf8NlJxD0ghYdM2E%2BbylQ1A12oERc54cya38%2Fo35HSSqCWVyME4n8eeB2qnCWKc9epMLW%2Ftg9QkCBIAmoygr%2FMgCXum"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771765f86f03b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
23.250.14.10
89.22.228.250
92.223.97.97
104.16.148.64
93.184.220.29
31.13.72.12
23.38.200.123
193.169.194.63
88.85.94.246