| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe36c852b5e145f2f09fe73111fb162e1 e439c6a462f86a3003d6464a8b9999b1c4d1e210 52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5146
Expires: Thu, 27 Oct 2022 07:08:19 GMT
Date: Thu, 27 Oct 2022 05:42:33 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash45bfdf3b823cd24564c8ac296a8b5b19 b0c442eb4f87556b3beb18ca8039dd4399b73f16 32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5466
Cache-Control: max-age=105575
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:33 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 11:02:08 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha39eea1096852891690eaee02a64383e c273000f799fc3676e8e3ef3617611a31252cffc d9d95319013d64bc2ef6d9870f4adba902ee970b6f9e96279c9ed86f556e0001
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9D95319013D64BC2EF6D9870F4ADBA902EE970B6F9E96279C9ED86F556E0001"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13149
Expires: Thu, 27 Oct 2022 09:21:42 GMT
Date: Thu, 27 Oct 2022 05:42:33 GMT
Connection: keep-alive
|
|
| prstfreetrk.com/?a=68&c=2387&s2=7552_sessid20221027054213103&s1=434 |  34.213.243.33 | 302 Found | 251 B |
URL HTTP/1.1prstfreetrk.com/?a=68&c=2387&s2=7552_sessid20221027054213103&s1=434 IP34.213.243.33:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashcc5ba987e18673fc5193a9e9e8ef8385 95486f54e26818dda6e6a4fe31b03c69e92e6527 39e1008ce1990a9e94418c1ce4fc89abcf12d97f5542e7c42928317f2dbbb907
GET /?a=68&c=2387&s2=7552_sessid20221027054213103&s1=434 HTTP/1.1
Host: prstfreetrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Thu, 27 Oct 2022 05:42:33 GMT
content-type: text/html; charset=utf-8
content-length: 251
cache-control: private
location: https://prstfrtrk.com/?a=68&c=2387&s2=7552_sessid20221027054213103&s1=434&ckmguid=80e30041-82e5-4135-8604-1e6182eb931c
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZWP+ypgyVxfD4deTMWWQhYITr+E3XIT0/URykNILqHSzzcQovyyHB1l20bpNiPOQ18ChHKobLIUncTkJ4ZsCvQ==
x-amz-request-id: TBF4HNDMVDYZA7EQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 27 Oct 2022 05:39:29 GMT
age: 184
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 27 Oct 2022 05:42:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp2.globalsign.com/gsalphasha2g2 |  104.18.20.226 | 200 OK | 1.4 kB |
URL HTTP/1.1ocsp2.globalsign.com/gsalphasha2g2 IP104.18.20.226:0
Hashf91689bf2496bb45c1f767c300d192f8 1f6906128299b01a6964c336952b55798959b784 a11add0b6822f5c71ad4170912cbb4c270445bbeb85028a5321c04ab79a4a0cd
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 27 Oct 2022 05:42:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 31 Oct 2022 04:43:19 GMT
ETag: "1f6906128299b01a6964c336952b55798959b784"
Last-Modified: Thu, 27 Oct 2022 04:43:20 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76091beeff59b50f-OSL
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashdd283dfc036535bdeb8a8be1310ef930 d3b1c300dd75d7af630e0f3112e49d7492d66c17 578f9256faa188facb3f2d68b02b0c7fb2e30e02e2e74234d015429563cba7aa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4813
Cache-Control: max-age=99866
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:34 GMT
Etag: "6358ea97-1d7"
Expires: Fri, 28 Oct 2022 09:27:00 GMT
Last-Modified: Wed, 26 Oct 2022 08:06:47 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
|
|
| prstfrtrk.com/?a=68&c=2387&s2=7552_sessid20221027054213103&s1=434&ckmguid=80e30041-82e5-4135-8604-1e6182eb931c | 34.210.140.128 | 302 Found | 272 B |
URL HTTP/1.1prstfrtrk.com/?a=68&c=2387&s2=7552_sessid20221027054213103&s1=434&ckmguid=80e30041-82e5-4135-8604-1e6182eb931c IP34.210.140.128:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashb04e1672f0c792edf7b412db292db4d5 3a05f52fc6cfe823a435e410c41d0e374bdb48bd c20823a90617ba3e5459e9da474b0a0e4213849de825dbcf49c72694cd976e7b
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /?a=68&c=2387&s2=7552_sessid20221027054213103&s1=434&ckmguid=80e30041-82e5-4135-8604-1e6182eb931c HTTP/1.1
Host: prstfrtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 272
Content-Type: text/html; charset=utf-8
Date: Thu, 27 Oct 2022 05:42:34 GMT
Location: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=yD/bv5cp29fou/tLmh+2wuSuHZ9/FCVJ5qi88nec2kj4Wp/3sOPifA==; domain=.prstfrtrk.com; path=/; SameSite=None; secure; HttpOnly
trk=kFRqA8lgy4Qfq1ZVdjJjHO+9/0O0OxV0mLz/heOZEi2kQDtyFOIuCw==; domain=.prstfrtrk.com; expires=Sun, 27-Oct-2024 05:42:34 GMT; path=/; SameSite=None; secure; HttpOnly
c141=yD/bv5cp29eqXsxr3yEWIjuyKz7ZjWiCvg/082/7eai+vyfYDwaiRg==; domain=.prstfrtrk.com; expires=Sat, 26-Nov-2022 05:42:34 GMT; path=/; SameSite=None; secure; HttpOnly
Connection: close
|
|
| ocsp.pki.goog/s/gts1p5/SX_GKWsBYcU | 142.250.74.35 | 200 OK | 472 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1p5/SX_GKWsBYcU IP142.250.74.35:0
Hash1fb045b27a3feab5a8b30010ad355f7c 5f0a4a726e0f752a4f6ad3328ea1f599db5a8f0c bca7c5e59b24121e26dba6b08d6b0d9032ce2a96fdb8d65256d19e911a481d9c
POST /s/gts1p5/SX_GKWsBYcU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| push.services.mozilla.com/ | 54.189.157.130 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.189.157.130:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: yMzvlFglo8Mvqq+D6+NPYA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: x3cuPhDDZ/peJzDITwfCqP1qaKc=
|
|
| theprostatecurse.com/imgs/progressbar.gif | 172.66.43.107 | 200 OK | 7.9 kB |
URL HTTP/2theprostatecurse.com/imgs/progressbar.gif IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashdedee25b009d58d5de1339666d24b022 7d6b2c87a1bf620bc0ba015a1ed5598d157317c4 a3e51832589e3fc60b84b84de14481276ce700f5d7d6d48aeb68a9792fefee57
GET /imgs/progressbar.gif HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:34 GMT
content-type: image/webp
content-length: 7908
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=gif, origSize=10819
content-disposition: inline; filename="progressbar.webp"
last-modified: Fri, 29 Jul 2022 14:49:47 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4baf8b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/_screenPF.jpg | 172.66.43.107 | 200 OK | 41 kB |
URL HTTP/2theprostatecurse.com/research/imgs/_screenPF.jpg IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 896x504, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash35656c22266e4d8689f7c19d61fb2990 e40de118372af419a73809c08a66bc88ceeb9340 e7a811fece8ab98d344c6c5604a2564f7fe2f0f0a2aba7ca9da144544d9bd437
GET /research/imgs/_screenPF.jpg HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 41032
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=61567
content-disposition: inline; filename="_screenPF.webp"
last-modified: Wed, 24 Aug 2022 12:46:40 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4bafbb4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/cards3.png | 172.66.43.107 | 200 OK | 2.7 kB |
URL HTTP/2theprostatecurse.com/research/imgs/cards3.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash6721a3677d9da2ddb6634f2964bb9d08 09c58b238ed935f25a911d2a3412a1bd79342cc9 b87cbef63d0c5f629562463b02076993d6bac974ed0bc15397f04f76a330146b
GET /research/imgs/cards3.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 2662
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2954
content-disposition: inline; filename="cards3.webp"
last-modified: Fri, 29 Jul 2022 14:48:00 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb05b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/product1.png | 172.66.43.107 | 200 OK | 6.8 kB |
URL HTTP/2theprostatecurse.com/research/imgs/product1.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash45824351aafc20a6d13a4a2c7a93844e 8b8396de8b6a0b45a5daed6f2c4e3121e0ae3937 c87f1841de22c046b78e7bd789cd2fa43a42a1d633b518ce1735643667edb4dc
GET /research/imgs/product1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 6752
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=7147
content-disposition: inline; filename="product1.webp"
last-modified: Fri, 29 Jul 2022 14:48:07 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb03b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/cta-btn.png | 172.66.43.107 | 200 OK | 2.1 kB |
URL HTTP/2theprostatecurse.com/research/imgs/cta-btn.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hasheee62eab078856d6d4660487cb319603 02b6b4376ad3a5eca179cd580c5ceba5df70b87f 1d08f6e910e93ba795015492d03f538024b02a5e1c4cba0a9e63f8a3577883c1
GET /research/imgs/cta-btn.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 2064
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2387
content-disposition: inline; filename="cta-btn.webp"
last-modified: Fri, 29 Jul 2022 14:48:01 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb04b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/stars-rating-v1.png | 172.66.43.107 | 200 OK | 928 B |
URL HTTP/2theprostatecurse.com/research/imgs/stars-rating-v1.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash326664a0ad80ed37a3d43b2004611aa3 9ca8850e8d45c25399c1d9ca42a14e9dd4451965 94456f4710a41f0fcccd3d83e22bd51328a6067b154abbbd0208038300c42161
GET /research/imgs/stars-rating-v1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 928
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1070
content-disposition: inline; filename="stars-rating-v1.webp"
last-modified: Fri, 29 Jul 2022 14:48:11 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb0db4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/product3.png | 172.66.43.107 | 200 OK | 17 kB |
URL HTTP/2theprostatecurse.com/research/imgs/product3.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash095ede197d17d4c35aeb2eb8dd66c303 fca8eddfb668ef5b906d77f473086e3e84e08c5e 46e15af477af69c3b221eac72273107a5a982bc79de9a9911ad753468f67f68b
GET /research/imgs/product3.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 16858
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=17136
content-disposition: inline; filename="product3.webp"
last-modified: Fri, 29 Jul 2022 14:48:07 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb0bb4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/seal1.png | 172.66.43.107 | 200 OK | 15 kB |
URL HTTP/2theprostatecurse.com/research/imgs/seal1.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash109da7a59645bd72d5d0e8983a8cd67f 9cca75985d03a8fc6935dd52108b74bf788ce950 44412af885544572186d1d10baae3ef99dab99035fe14f5d7f241aed6a87dc03
GET /research/imgs/seal1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 14840
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=15326
content-disposition: inline; filename="seal1.webp"
last-modified: Fri, 29 Jul 2022 14:48:10 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb0eb4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/product6.png | 172.66.43.107 | 200 OK | 19 kB |
URL HTTP/2theprostatecurse.com/research/imgs/product6.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash7d410ef75af4f4aadc05b3d3354e51ad 8ef835a360d7aec4ed1013f96e69243bde7da45c 3b1becdb4cd05e2d959b836e91d6da460a441b6b68830b95e5e0e84d085e56f8
GET /research/imgs/product6.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 19310
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=19810
content-disposition: inline; filename="product6.webp"
last-modified: Fri, 29 Jul 2022 14:48:07 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb0ab4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/bonus-prod1.png | 172.66.43.107 | 200 OK | 26 kB |
URL HTTP/2theprostatecurse.com/research/imgs/bonus-prod1.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash29216a0f747cf70637b518b3cfff688e 3f7ba1ff8ef1e6cb83273bdddd98fad7d74bedfe daac6db9660f3fbcfff4a042335e0e491d2e4cc00e972172d20f324145d5624f
GET /research/imgs/bonus-prod1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 25882
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=28232
content-disposition: inline; filename="bonus-prod1.webp"
last-modified: Fri, 29 Jul 2022 14:47:59 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb12b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/guar-bages.png | 172.66.43.107 | 200 OK | 16 kB |
URL HTTP/2theprostatecurse.com/research/imgs/guar-bages.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashe2a8b708eaeb912c0cf4062e06f7ac6f d924435ae6a24ed90fcc9fb7ae2d69fd1006f5b0 dd3510b603ace7d2874752a085861d9a3a835c7687c4b03ad71bc67d82663296
GET /research/imgs/guar-bages.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 15746
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=17842
content-disposition: inline; filename="guar-bages.webp"
last-modified: Fri, 29 Jul 2022 14:48:02 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb0fb4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/bonus-prod2.png | 172.66.43.107 | 200 OK | 68 kB |
URL HTTP/2theprostatecurse.com/research/imgs/bonus-prod2.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashad6a5acc443c80ab39c59bd039ea1ef4 90d4ae4a9819bdcd0a8c491a631745573de6efc6 e88a5a4221dba90ae8b2a711e65cd1328b0032a243480decd9bcfc33276cf30e
GET /research/imgs/bonus-prod2.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 67578
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=72509
content-disposition: inline; filename="bonus-prod2.webp"
last-modified: Fri, 29 Jul 2022 14:48:00 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb13b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/shipping-icon.png | 172.66.43.107 | 200 OK | 1.2 kB |
URL HTTP/2theprostatecurse.com/research/imgs/shipping-icon.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashb04e5ea534505d170e447db759fb6577 8fb026ec5ba0e2d197a981b3dfa7591d4808b1b1 6bf0a5e79c679fe916f5eb0ea8499eb116ec7cabec30eb3130f5e30a7073cb70
GET /research/imgs/shipping-icon.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 1182
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1413
content-disposition: inline; filename="shipping-icon.webp"
last-modified: Fri, 29 Jul 2022 14:48:10 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4cb15b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/testi1.png | 172.66.43.107 | 200 OK | 23 kB |
URL HTTP/2theprostatecurse.com/research/imgs/testi1.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashfb9e0abe4c5caac09cbc673bcc6bdbe4 40541c0b36b8f27299c11d68d1de5ada57819081 d12194e4161f18dea6cb51175c9689080e8a23726ce3e282b0619c0f5327a284
GET /research/imgs/testi1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 22952
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=36259
content-disposition: inline; filename="testi1.webp"
last-modified: Fri, 29 Jul 2022 14:48:14 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4db1cb4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/stars.png | 172.66.43.107 | 200 OK | 1.1 kB |
URL HTTP/2theprostatecurse.com/research/imgs/stars.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash4f58890e51e66659232fde7f4e850437 f3b73e9a9e286d6c962a7812cf4908ea036727f6 86145fe164dc0e5c2ed1034bb82bd615ac12fb590f0b7e2578f68e08fd90d587
GET /research/imgs/stars.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 1116
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1265
content-disposition: inline; filename="stars.webp"
last-modified: Fri, 29 Jul 2022 14:48:11 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4db1db4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/imgs/ProstaFree_logo-x2.png | 172.66.43.107 | 200 OK | 12 kB |
URL HTTP/2theprostatecurse.com/imgs/ProstaFree_logo-x2.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash63ce61bd57613e77b63ae7391e1fb9d3 1ef1be33bb6212875d170a69e00c6805955afaab 0c89500204b0ba00de437837dd0585444494da33943baa76a0daf40a614544c8
GET /imgs/ProstaFree_logo-x2.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 11520
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=12026
content-disposition: inline; filename="ProstaFree_logo-x2.webp"
last-modified: Fri, 29 Jul 2022 14:49:48 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4db17b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/benefits_bullet.png | 172.66.43.107 | 200 OK | 1.7 kB |
URL HTTP/2theprostatecurse.com/research/imgs/benefits_bullet.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash56c3657a7c7c57eb09e283e2d466bd41 16f83093da4bf672d76642f4388c6b7a3cca52fc 88c86a870016c03f246aaa4523de5776f134007cabde287d42402151ca91d379
GET /research/imgs/benefits_bullet.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 1678
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1879
content-disposition: inline; filename="benefits_bullet.webp"
last-modified: Fri, 29 Jul 2022 14:47:58 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4db1ab4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/testi3.png | 172.66.43.107 | 200 OK | 28 kB |
URL HTTP/2theprostatecurse.com/research/imgs/testi3.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashf9e2017378fcb6526846ad7ad6931716 096528177e038681d4497b425f194859b9329f74 e45abee0f32ffd0668e6abb182da6673cd876abfe95e5661b5033b958cbb4d56
GET /research/imgs/testi3.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 28054
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=42565
content-disposition: inline; filename="testi3.webp"
last-modified: Fri, 29 Jul 2022 14:48:15 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4db25b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/testi2.png | 172.66.43.107 | 200 OK | 23 kB |
URL HTTP/2theprostatecurse.com/research/imgs/testi2.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashe826fc53d53107a10b0c520abdebb73e e56d59b9af0f9cc84862f76b56b431f55d87af05 6339bbff78b92233c48c27ed9ce73e5a855fbdfedc14e0d76ef31b5a7415b9a1
GET /research/imgs/testi2.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 22752
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=35558
content-disposition: inline; filename="testi2.webp"
last-modified: Fri, 29 Jul 2022 14:48:14 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4db20b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/imgs/ProstaFree_logo-x2-white.png | 172.66.43.107 | 200 OK | 5.8 kB |
URL HTTP/2theprostatecurse.com/imgs/ProstaFree_logo-x2-white.png IP172.66.43.107:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashc1e13cacf45d6f9061d468c7f83f3f54 81252e167d9bbf5fa917131176b834ea827c6a16 0788892d5792ca6583bb67c01b3990c88a6defb903887ee5f46916db313023d4
GET /imgs/ProstaFree_logo-x2-white.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/webp
content-length: 5814
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=6067
content-disposition: inline; filename="ProstaFree_logo-x2-white.webp"
last-modified: Fri, 29 Jul 2022 14:49:47 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
server: cloudflare
cf-ray: 76091bf4fb40b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/fonts/ProximaNova-Extrabld.woff | 172.66.43.107 | 200 OK | 52 kB |
URL HTTP/2theprostatecurse.com/research/fonts/ProximaNova-Extrabld.woff IP172.66.43.107:0
File typeWeb Open Font Format, TrueType, length 51504, version 0.0\012- data Hash7f277b30c2d157a866644f7d861cbd6e 68ec8f7b24e40f10374ead63aa0daf0cc455f1e0 ca58fe74a581322b46d41e976600b4a5019bfe2c7839ffd38c8e710f2e833737
GET /research/fonts/ProximaNova-Extrabld.woff HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: font/woff
content-length: 51504
last-modified: Fri, 29 Jul 2022 14:47:54 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76091bf53b87b4f9-OSL
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js | 172.66.43.107 | 200 OK | 56 kB |
URL HTTP/2theprostatecurse.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP172.66.43.107:0
Hash5de0423a17e4b3382ef2ffa70dc992b2 9242a35711fb74a74c3483a4b0c06dbf67ca6e9b b8e758dd2501e427b10f3b8d4e83ba808192183d85a9b31e4d14f42efa7e2fac
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 15:26:52 GMT
etag: W/"634ec5bc-302c"
vary: Accept-Encoding
server: cloudflare
cf-ray: 76091bf50b56b4f9-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 29 Oct 2022 05:42:35 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/fonts/ProximaNova-Bold.woff | 172.66.43.107 | 200 OK | 52 kB |
URL HTTP/2theprostatecurse.com/research/fonts/ProximaNova-Bold.woff IP172.66.43.107:0
File typeWeb Open Font Format, TrueType, length 51944, version 0.0\012- data Hash637c241b1d81e95d681796891e1fb1ac d5da75d2b826d9da27378a9c0f7e0b620031c339 e9f28e3823f3c6f150bbc92899c421d470322e7c1118eb8ce6c9c18e8aeb6799
GET /research/fonts/ProximaNova-Bold.woff HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: font/woff
content-length: 51944
last-modified: Fri, 29 Jul 2022 14:47:53 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76091bf53b8ab4f9-OSL
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/embed/medias/zpgiy96yzn.jsonp |  151.101.86.110 | 200 OK | 1.6 kB |
URL HTTP/2fast.wistia.com/embed/medias/zpgiy96yzn.jsonp IP151.101.86.110:0
File typeASCII text, with very long lines (5232) Hash912623068c5ab351e22f25cc7539ed16 ecf2f39fdb2143cd1cad7cc37ac2a56d97567709 90af01cf5cbae4d8f4692ada37e7e1765a3e20c73399fc55f770a0a7db1c579a
GET /embed/medias/zpgiy96yzn.jsonp HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-encoding: br
content-type: application/javascript; charset=utf-8
etag: W/"00b069bff9d45b036ccc529dd8e6bc62"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 148a7a57ebe357efda9a641b0c88c548
x-runtime: 0.062919
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 27 Oct 2022 05:42:35 GMT
age: 52199
x-served-by: cache-iad-kjyo7100041-IAD, cache-bma1683-BMA
x-cache: HIT, HIT
x-cache-hits: 79, 1
x-timer: S1666849355.148701,VS0,VE1
vary: Accept-Encoding,Referer,X-Forwarded-Proto,X-Normalized-User-Agent,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1632
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashf046e6113dd1e5e499c765516be08b17 c2253055e09b46209469853cad8720e64f84a1bf 18663a8f0b5d4d7581b771da6c2dc897bc2b82d51d7dac1a56d22f9bebab6fb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fast.wistia.net/assets/external/E-v1.js | 151.101.86.110 | 200 OK | 116 kB |
URL HTTP/2fast.wistia.net/assets/external/E-v1.js IP151.101.86.110:0
File typeASCII text, with very long lines (65536), with no line terminators Size116 kB (116516 bytes) Hash805a3c13d49a9ad9d88e10742ae0e106 dfc3b8888e5cd3169d14b8bf1cac7c9e5195f838 9d508d6a228635703b2e5966631165ae2585f3b33774d3bbfe6dacca773e6cba
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63595ee9-1c724"
last-modified: Wed, 26 Oct 2022 16:23:05 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 27 Oct 2022 05:42:35 GMT
age: 1630
x-served-by: cache-iad-kjyo7100167-IAD, cache-bma1669-BMA
x-cache: HIT, HIT
x-cache-hits: 107, 24
x-timer: S1666849355.150308,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 116516
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash4cdf16c5333628708fae7b304303fc48 23654b66838aa89e8b975a9e6c0251d2f8f18366 6f3935f102b0dcfee703eb07abcf04d9181fdfe13fae4d7566aed743a00beb9c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashf046e6113dd1e5e499c765516be08b17 c2253055e09b46209469853cad8720e64f84a1bf 18663a8f0b5d4d7581b771da6c2dc897bc2b82d51d7dac1a56d22f9bebab6fb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtm.js?id=GTM-W4CVTDK | 142.250.74.168 | 200 OK | 45 kB |
URL HTTP/2www.googletagmanager.com/gtm.js?id=GTM-W4CVTDK IP142.250.74.168:0
File typeASCII text, with very long lines (1588) Hash13f8a02da781fde1eb873dc2b6548be5 8d670a66dd78bc80820657663c67c3abb58dc358 ec4f1874587a5d73752dceed97926990446e9f7b3ccba4d83f0dc4f08667d89a
GET /gtm.js?id=GTM-W4CVTDK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 27 Oct 2022 05:42:35 GMT
expires: Thu, 27 Oct 2022 05:42:35 GMT
cache-control: private, max-age=900
last-modified: Thu, 27 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45243
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| theprostatecurse.com/research/imgs/favicon.ico | 172.66.43.107 | 200 OK | 514 B |
URL HTTP/2theprostatecurse.com/research/imgs/favicon.ico IP172.66.43.107:0
File typeMS Windows icon resource - 1 icon, 10x10, 32 bits/pixel\012- data Hash4690833b97a998842c5ea1150b46421b 466f6eaa3eec196c584a580fd9aa798a12c782ce c48290e29f8dc98d84097edcfee8edf2c48ce0dc70e868a2dcbc6d541fdbc963
GET /research/imgs/favicon.ico HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967
Cookie: looked=yes; PHPSESSID=9df6740650d6df0dc335ba5d97354b3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:35 GMT
content-type: image/x-icon
last-modified: Fri, 29 Jul 2022 14:48:01 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
vary: Accept-Encoding
server: cloudflare
cf-ray: 76091bf67c89b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fast.wistia.net/assets/external/wistia-mux.js | 151.101.86.110 | 200 OK | 31 kB |
URL HTTP/2fast.wistia.net/assets/external/wistia-mux.js IP151.101.86.110:0
File typeASCII text, with very long lines (65468) Hash7bbda692ed67646f25dba744c5434e5e 86b6b3115e2e40d56c85a4f9106768f6cd079557 e38979cf6a4262e45c31fc4684458663f5c7a2ffde5b9692572cfc4cbc2e9c5a
GET /assets/external/wistia-mux.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63595ee9-7a5e"
last-modified: Wed, 26 Oct 2022 16:23:05 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 27 Oct 2022 05:42:35 GMT
age: 1631
x-served-by: cache-iad-kcgs7200052-IAD, cache-bma1669-BMA
x-cache: HIT, HIT
x-cache-hits: 76, 10
x-timer: S1666849355.399498,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 31326
X-Firefox-Spdy: h2
|
|
| fast.wistia.net/assets/external/playPauseLoadingControl.js | 151.101.86.110 | 200 OK | 16 kB |
URL HTTP/2fast.wistia.net/assets/external/playPauseLoadingControl.js IP151.101.86.110:0
File typeASCII text, with very long lines (59899), with no line terminators Hash64f01434883a00ff1d01b93adb588f99 76eae253b7f96c5424b90ce32423a83367959115 53eb25a618192d08f748375908fa0e772ad0a0390302a407f2add761d982d5ac
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63595ee9-3e3f"
last-modified: Wed, 26 Oct 2022 16:23:05 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 27 Oct 2022 05:42:35 GMT
age: 1631
x-served-by: cache-iad-kiad7000024-IAD, cache-bma1669-BMA
x-cache: HIT, HIT
x-cache-hits: 91, 9
x-timer: S1666849355.419505,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 15935
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 27 Oct 2022 04:41:09 GMT
expires: Thu, 27 Oct 2022 06:41:09 GMT
cache-control: public, max-age=7200
age: 3686
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| embed-ssl.wistia.com/deliveries/b635c036ddbaf8ef483fb6abd2924ad1.webp?image_crop_resized=896x504 | 151.101.86.133 | 200 OK | 38 kB |
URL HTTP/2embed-ssl.wistia.com/deliveries/b635c036ddbaf8ef483fb6abd2924ad1.webp?image_crop_resized=896x504 IP151.101.86.133:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 896x504, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashf8fbbd8864861eda3737ad756128a8c4 910649abb3305044496ec45b36f188d00fd481e4 4ffc11cf448db3abe3380d77092657888238ae5a4c09a34e1fcc581cfeda25af
GET /deliveries/b635c036ddbaf8ef483fb6abd2924ad1.webp?image_crop_resized=896x504 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
access-control-expose-headers: Origin, Content-Type, Accept, Server, x-amz-version-id, X-Cache
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: b635c036ddbaf8ef483fb6abd2924ad1
last-modified: Wed, 24 Aug 2022 12:48:18 UTC
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 27 Oct 2022 05:42:35 GMT
age: 1959716
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kjyo7100044-IAD, cache-bma1683-BMA
x-cache: HIT, HIT
x-cache-hits: 448, 1
x-timer: S1666849356.500381,VS0,VE1
content-length: 37930
X-Firefox-Spdy: h2
|
|
| fast.wistia.net/assets/external/engines/hls_video.js | 151.101.86.110 | 200 OK | 114 kB |
URL HTTP/2fast.wistia.net/assets/external/engines/hls_video.js IP151.101.86.110:0
File typeASCII text, with very long lines (65469) Size114 kB (114302 bytes) Hashc4587ee29716061184dcd74c731e00fb ea8daa0e1cfcb6e64cc7cde7f76250e24357767a 647075a8c57f86d4e35dba4dcd3dff2e1e3c28ccbdbaa352fc3b11babf8afea1
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "63595ee9-1be7e"
last-modified: Wed, 26 Oct 2022 16:23:05 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 27 Oct 2022 05:42:35 GMT
age: 1631
x-served-by: cache-iad-kjyo7100129-IAD, cache-bma1669-BMA
x-cache: HIT, HIT
x-cache-hits: 453, 6
x-timer: S1666849356.561213,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 114302
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash7d4b826b3cd4f4fffd35abd60c407bdb 28e5a20b197bf6972fd097c3b302c1dd89b68f09 681fd035abbbf788f315fea7402f5e0d77b51f6167e237ff7516335911499b21
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-236253750-1&cid=1437885660.1666849355&jid=1508640359&gjid=1951687086&_gid=1914682295.1666849355&_u=YEBAAEAAAAAAACAAI~&z=1324214589 | 173.194.222.156 | 200 OK | 4 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-236253750-1&cid=1437885660.1666849355&jid=1508640359&gjid=1951687086&_gid=1914682295.1666849355&_u=YEBAAEAAAAAAACAAI~&z=1324214589 IP173.194.222.156:0
File typeASCII text, with no line terminators Hash48c0473b7821185d937e685216e2168b 3743e47f8a429a5e87b86cb582d78940733d9d2e 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-236253750-1&cid=1437885660.1666849355&jid=1508640359&gjid=1951687086&_gid=1914682295.1666849355&_u=YEBAAEAAAAAAACAAI~&z=1324214589 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://theprostatecurse.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 27 Oct 2022 05:42:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hasha63ea2903767bb46326d85331e42e34e b113b248df6025ed117551b7baa1960316122415 4ba54e12a06237d2c396d93e1cf9513b066074df9993ee408ee2bfb365c5f3c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash7d4b826b3cd4f4fffd35abd60c407bdb 28e5a20b197bf6972fd097c3b302c1dd89b68f09 681fd035abbbf788f315fea7402f5e0d77b51f6167e237ff7516335911499b21
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashce5d09bafa968f66bc7828927cb90e05 d6445e57629d1fcb89ac2fefdc5071cf82f71a59 e6b4e02dcd04a13ac1c6ce72819b8f20b1b5555a516151264b9a685532c38632
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=1437885660.1666849355&jid=1508640359&_u=YEBAAEAAAAAAACAAI~&z=38844449 | 142.250.74.164 | 200 OK | 42 B |
URL HTTP/2www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=1437885660.1666849355&jid=1508640359&_u=YEBAAEAAAAAAACAAI~&z=38844449 IP142.250.74.164:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=1437885660.1666849355&jid=1508640359&_u=YEBAAEAAAAAAACAAI~&z=38844449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 27 Oct 2022 05:42:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fast.wistia.net/assets/images/blank.gif | 151.101.86.110 | 200 OK | 1.2 kB |
URL HTTP/2fast.wistia.net/assets/images/blank.gif IP151.101.86.110:0
File typeGIF image data, version 89a, 100 x 100\012- data Hashfbdc4ed9a1e2ee4917a265306927bcf1 6d177725d8230df0457e72004080f712e26fe624 a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=315360000, public
content-type: image/gif
etag: "6359be4d-4be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 26 Oct 2022 23:10:05 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 27 Oct 2022 05:42:35 GMT
age: 23232
x-served-by: cache-iad-kjyo7100120-IAD, cache-bma1669-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 42
x-timer: S1666849356.755060,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1214
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=1437885660.1666849355&jid=1508640359&_u=YEBAAEAAAAAAACAAI~&z=38844449 | 142.250.74.3 | 200 OK | 42 B |
URL HTTP/2www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=1437885660.1666849355&jid=1508640359&_u=YEBAAEAAAAAAACAAI~&z=38844449 IP142.250.74.3:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=1437885660.1666849355&jid=1508640359&_u=YEBAAEAAAAAAACAAI~&z=38844449 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 27 Oct 2022 05:42:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/embed/medias/zpgiy96yzn.m3u8 | 151.101.86.110 | 200 OK | 753 B |
URL HTTP/2fast.wistia.com/embed/medias/zpgiy96yzn.m3u8 IP151.101.86.110:0
Hash3e9cb9483943ff11e1f4b0db2bd3b3d7 231990d6d25317cb706c4b1ad5951630522a78da d302bf80e15b6848c04ac493171897e59f4ac1559fc4bff9539f30742b96c266
GET /embed/medias/zpgiy96yzn.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-type: application/x-mpegURL
etag: W/"d302bf80e15b6848c04ac493171897e5"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 21b52446238317394f20a381f7230ef6
x-runtime: 0.022736
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 27 Oct 2022 05:42:35 GMT
age: 52160
x-served-by: cache-iad-kcgs7200048-IAD, cache-bma1658-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 1
x-timer: S1666849356.789842,VS0,VE1
vary: Accept-Encoding,Referer,X-Forwarded-Proto,X-Normalized-User-Agent,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 753
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash26e60c83d7af169687cbd74f7ca924e0 00f7ceb935fe1cc423f95718a04076e4f5eca150 a041e2901d418b289c3129ce7c07a66e598f6d3ac076732635b0a9ac6fbabb89
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashce5d09bafa968f66bc7828927cb90e05 d6445e57629d1fcb89ac2fefdc5071cf82f71a59 e6b4e02dcd04a13ac1c6ce72819b8f20b1b5555a516151264b9a685532c38632
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| embedwistia-a.akamaihd.net/deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8 | 23.36.76.162 | 200 OK | 116 kB |
URL HTTP/1.1embedwistia-a.akamaihd.net/deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8 IP23.36.76.162:0 ASN#20940 Akamai International B.V.
Size116 kB (116055 bytes) Hash230ba5f787369871971b1880ef017f7b a064f80616d0d77b0220226257e173278577ba18 2c5c09fffaf083d87ce339ddfa8357ea879f554d55eaff6cd9fe8a46a465b3e7
GET /deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8 HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.apple.mpegurl
Content-Length: 116055
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 0f599d2ef063421b6fc7043717da0fde23e6139e-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=30571571
Expires: Mon, 16 Oct 2023 01:48:46 GMT
Date: Thu, 27 Oct 2022 05:42:35 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
|
|
| embedwistia-a.akamaihd.net/deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8/seg-1-v1-a1.ts | 23.36.76.162 | 200 OK | 2.6 MB |
URL HTTP/1.1embedwistia-a.akamaihd.net/deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8/seg-1-v1-a1.ts IP23.36.76.162:0 ASN#20940 Akamai International B.V.
File typeMPEG transport stream data\012- data Size2.6 MB (2638392 bytes) Hash1a658d09de2712271a38aa21594a72df 50fbfba38a6eaddd61e440f4270ead7a47dea986 2756fb32da75ca228bb3d3c7de5617f0cb60adfbff0c58319440dca01c97937c
GET /deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: video/MP2T
Content-Length: 2638392
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 0f599d2ef063421b6fc7043717da0fde23e6139e-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=30799105
Expires: Wed, 18 Oct 2023 17:01:00 GMT
Date: Thu, 27 Oct 2022 05:42:35 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash262ee317a7d41424cef3f541f6e538d3 1c298c901f93a95e99bdc63259f415ab84a13783 c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2391
Expires: Thu, 27 Oct 2022 06:22:27 GMT
Date: Thu, 27 Oct 2022 05:42:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash262ee317a7d41424cef3f541f6e538d3 1c298c901f93a95e99bdc63259f415ab84a13783 c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2391
Expires: Thu, 27 Oct 2022 06:22:27 GMT
Date: Thu, 27 Oct 2022 05:42:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash262ee317a7d41424cef3f541f6e538d3 1c298c901f93a95e99bdc63259f415ab84a13783 c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2391
Expires: Thu, 27 Oct 2022 06:22:27 GMT
Date: Thu, 27 Oct 2022 05:42:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash262ee317a7d41424cef3f541f6e538d3 1c298c901f93a95e99bdc63259f415ab84a13783 c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2391
Expires: Thu, 27 Oct 2022 06:22:27 GMT
Date: Thu, 27 Oct 2022 05:42:36 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F468f05a4-ac72-4a66-8993-53a827bffd49.jpeg | 34.120.237.76 | 200 OK | 7.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F468f05a4-ac72-4a66-8993-53a827bffd49.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash134b31ca1a6cb74ab6f6c21e27114883 bb13bb4f8876e00be7fb70e0b4f6cd52d0165458 539ee95d515835ade79c63a5c85c138678019563ac0e2f86bcfd7fcc0dc9dce2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F468f05a4-ac72-4a66-8993-53a827bffd49.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7436
x-amzn-requestid: 58eb8ffe-f4e6-40f0-a5b0-8c5cb3d32b21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apWAYGh4IAMF0Yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a039b-742161244dced54246938f0d;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 04:05:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KVQ_mvfxGRPLkqBXDjCksjKai7YkIRYvhoRxXJ31A38fDNyJaBl1Wg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 04:08:06 GMT
age: 5670
etag: "bb13bb4f8876e00be7fb70e0b4f6cd52d0165458"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5a9dae4-226e-42f6-b38d-d6f3f560ed69.jpeg | 34.120.237.76 | 200 OK | 6.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5a9dae4-226e-42f6-b38d-d6f3f560ed69.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8240214ef7bc82b09de023cde217beb9 0f432e521fc4392f528042c711139dc0becc5598 2d5f1a426441536086c8278651808dc6e3e819ec18b48048520a4dedbc8a08ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5a9dae4-226e-42f6-b38d-d6f3f560ed69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6806
x-amzn-requestid: bdf4f489-b474-4143-881f-521ad5dee74b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aocwUGb9oAMFRGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359a801-2a1e822f6b1dd3304c8f0527;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: oxLrpXYZuUBO5qEKrFYAkh3lx2ZE7Jph8tcq0b4dWIHxUODXP3FDDQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 21:52:49 GMT
etag: "0f432e521fc4392f528042c711139dc0becc5598"
content-type: image/jpeg
age: 28187
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2013af8a-e057-44cd-8dca-381e200609e6.jpeg | 34.120.237.76 | 200 OK | 18 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2013af8a-e057-44cd-8dca-381e200609e6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashed4462f023dbabb596a2e3b521425ca1 61b82445b422a5f917bb10640beb6d73eb0e62c3 a02af2897331acc123bf7d54b30929e3bc062a0875b5dea95302ddf60d808ded
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2013af8a-e057-44cd-8dca-381e200609e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 18182
x-amzn-requestid: f1232b1f-32ac-4820-b186-b3bfb928c0b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aYvSKFF4oAMF2Wg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63535f40-0b9bc4d27b7534176cc278ed;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 03:10:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -iSQAX4xEu0e3ym9ovX4jXaBbE6JVQyqZQOI4vNg_uEOO2hFafgl4A==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 07:50:45 GMT
age: 78711
etag: "61b82445b422a5f917bb10640beb6d73eb0e62c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasheb430e5efbc6c8c306fce87e26faf734 b05b7299a7e473e873510671a6abdd5227a53f46 c49d64e87ec8243a1ee7f214f21988b6f6a33ba93814ec31262d80e4a22b8504
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8936
x-amzn-requestid: d0698fc0-e4c9-4633-9b64-df09be35b450
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aocuiGBlIAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359a7f6-7c78a1fc43552b934e6b8708;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 21:34:46 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gus8UKo03dRkfqPRhxnW6zzqx7o-2tZbbv-DsBSW7UREHPOA1uqdUw==
via: 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 21:50:53 GMT
age: 28303
etag: "b05b7299a7e473e873510671a6abdd5227a53f46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f76b27f-20d2-4f67-9182-ea9c8da749a1.jpeg | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f76b27f-20d2-4f67-9182-ea9c8da749a1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0b2a9369fbecb4c2543d616eb054b80c b940acbcde5370ab0d8f94f8536822d413d79255 55e6b81bfaba44c3eb7d038499d6b5cf8f0649386aa8aba9aef51a69b2c0cad5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f76b27f-20d2-4f67-9182-ea9c8da749a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6855
x-amzn-requestid: 6a2e4f75-dc1c-454f-8b8a-3a6e7b9fd39d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apTuSGzUoAMFmsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359fff4-50f1550123adb1192d89e442;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 03:50:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rVJQTBkML73Qsep_bhMExSK9ht7dYCD5y1L8sXCKz5Tywl_QAM4ClA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 04:13:37 GMT
age: 5339
etag: "b940acbcde5370ab0d8f94f8536822d413d79255"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd980e84d-7557-46f4-86fa-a1750bc0556c.jpeg | 34.120.237.76 | 200 OK | 4.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd980e84d-7557-46f4-86fa-a1750bc0556c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash67c7146ff56c9463c0b083309a978ea0 707b7879deeb50d13d83aafc7293995e937024a7 b7165804db9a86623445ee8dce01ac6cbbf65cc7f99b60089ca4382a230b093e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd980e84d-7557-46f4-86fa-a1750bc0556c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4328
x-amzn-requestid: 0d4e3cd2-261d-48ca-9eaa-e8781bba8208
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aocvjFZtIAMFWlg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359a7fc-78d12691124af7052d77f5be;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 21:34:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: zhIR7YHR6tsp4mlWUeYqCk2QjLPiE_uyUwpSptMBqCjjtJQE6Fb5cw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 21:50:42 GMT
age: 28314
etag: "707b7879deeb50d13d83aafc7293995e937024a7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| embedwistia-a.akamaihd.net/deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8 | 23.36.76.162 | 200 OK | 116 kB |
URL HTTP/1.1embedwistia-a.akamaihd.net/deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8 IP23.36.76.162:0 ASN#20940 Akamai International B.V.
Size116 kB (116055 bytes) Hashcbe2b26f17e73c7ce3e1e721a7655c6c 7242cc1a7ff3c8607bb4a6fc0faebf5d4641ca2f 4bb573fef42ddca6c8e3c924c243e9a41edc47fe967164e91270ab2409fe50f1
GET /deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8 HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.apple.mpegurl
Content-Length: 116055
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 629f20bc5761f24f6de88bbaaac9380352fc4afc-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=30806671
Expires: Wed, 18 Oct 2023 19:07:07 GMT
Date: Thu, 27 Oct 2022 05:42:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
|
|
| embedwistia-a.akamaihd.net/deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8/seg-1-v1-a1.ts | 23.36.76.162 | 200 OK | 984 kB |
URL HTTP/1.1embedwistia-a.akamaihd.net/deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8/seg-1-v1-a1.ts IP23.36.76.162:0 ASN#20940 Akamai International B.V.
File typeMPEG transport stream data\012- data Size984 kB (983992 bytes) Hash3e4e077c201c11540050b5f9c4fa1027 e020600d6433cf2ce55904a81ea9d8df33487994 ebd07eec559fd7260f208624002e248ef77d2226f4ab66dd7198673db3f865f6
GET /deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: video/MP2T
Content-Length: 983992
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 629f20bc5761f24f6de88bbaaac9380352fc4afc-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=30800162
Expires: Wed, 18 Oct 2023 17:18:38 GMT
Date: Thu, 27 Oct 2022 05:42:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.100 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.100:0
Hash235d1daaf752dbf2d02dcb525fd86637 b869fa3eea8e79a87acd3d72a1630e0f70b6bf22 3351fd336a1c6f6b4cd1d8f70150f1d2e9214b2173edf66fbfd51870aac510e7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=96547
Date: Thu, 27 Oct 2022 05:42:36 GMT
Etag: "6358e4ee-1d7"
Expires: Fri, 28 Oct 2022 08:31:43 GMT
Last-Modified: Wed, 26 Oct 2022 07:42:38 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qGFZfP7VocQmEL88FWgOS1B0wX25H196l13zyzgrqyPEdzg152xliA==
Age: 2945
|
|
| distillery.wistia.com/x | 44.197.44.53 | 204 No Content | 0 B |
IP44.197.44.53:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1596
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 27 Oct 2022 05:42:36 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
X-Firefox-Spdy: h2
|
|
| pipedream.wistia.com/mput?topic=metrics | 34.204.136.114 | 200 OK | 2 B |
URL HTTP/2pipedream.wistia.com/mput?topic=metrics IP34.204.136.114:0
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/x-www-form-urlencoded
Content-Length: 6770
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:36 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hasha54a570dc45d136ae6aca56322f6ab0b 9d6869ef04cc7cc2654885b8dd0b1846f8b09c75 1bdf7828b1f7e1dbc5a9c9dffa647a0f2e6251b3b0f3673a64f985491e4f50a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=130680
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 05:42:37 GMT
Etag: "635975c5-117"
Expires: Fri, 28 Oct 2022 18:00:37 GMT
Last-Modified: Wed, 26 Oct 2022 18:00:37 GMT
Server: nginx
Content-Length: 279
|
|
| theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967 | 172.66.43.107 | 200 OK | 0 B |
URL HTTP/2theprostatecurse.com/research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967 IP172.66.43.107:0
GET /research/?s1=434&s2=7552_sessid20221027054213103&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=133049967 HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:34 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=9df6740650d6df0dc335ba5d97354b3b; path=/
looked=yes; expires=Thu, 27-Oct-2022 06:42:33 GMT; Max-Age=3600
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76091bf2e94db4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js | 142.250.74.74 | 200 OK | 0 B |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP142.250.74.74:0
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Oct 2022 19:20:54 GMT
expires: Sat, 21 Oct 2023 19:20:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
age: 469301
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| go.maxweb.com/conversion/iframe/?a=7552&token=32c64d80036cd2a2c2f25a4e1f88668e | 172.66.40.143 | 200 OK | 0 B |
URL HTTP/2go.maxweb.com/conversion/iframe/?a=7552&token=32c64d80036cd2a2c2f25a4e1f88668e IP172.66.40.143:0
GET /conversion/iframe/?a=7552&token=32c64d80036cd2a2c2f25a4e1f88668e HTTP/1.1
Host: go.maxweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 27 Oct 2022 05:42:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 27 Oct 2022 06:42:37 GMT
cache-control: max-age=3600, private
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76091c041d800b49-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|