r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9e164a845d32db8fa51fdb5b1aa218d9
169099b4d2f8e119ab6cf6fca279b6fb535b1759
402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "402FFBF1404CF05C0516C5A8CD5344BD53537AC5150D387730A90C81C17DC9E4"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2686
Expires: Tue, 08 Nov 2022 12:27:14 GMT
Date: Tue, 08 Nov 2022 11:42:28 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9fd081ea88e8b8563986b3e558496d21
60700393dce5eb42c0db0d5feef340f4832e3c65
d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6490
Cache-Control: max-age=88620
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 11:42:28 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 12:19:28 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9fd081ea88e8b8563986b3e558496d21
60700393dce5eb42c0db0d5feef340f4832e3c65
d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6490
Cache-Control: max-age=88620
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 11:42:28 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 12:19:28 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d8c32b2fb818533a5b3fe5c69157bde9
93594fd3fc50d9d444c28660eabba1edbe4f0588
df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2227
Expires: Tue, 08 Nov 2022 12:19:35 GMT
Date: Tue, 08 Nov 2022 11:42:28 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NyIa1HCObqMVbVzQYxyT3HKq+IjYHaSkenb2UYVF4DtJO8/LXP2pV5joER1vpS6cj02vs0J3eXA=
x-amz-request-id: WSPGCVPZVW5KWXTB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 08 Nov 2022 11:11:17 GMT
age: 1871
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 08 Nov 2022 11:42:28 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
social.medialinks.cc/files/hot_song.rar
199.115.115.116302 Found 11 B URL HTTP/1.1 social.medialinks.cc/files/hot_song.rar
IP 199.115.115.116:0
ASN #30633 LEASEWEB-USA-WDC
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer Verdict Alert fortinet Malware
GET /files/hot_song.rar HTTP/1.1
Host: social.medialinks.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 08 Nov 2022 11:42:27 GMT
location: http://btpnative.com/click?data=Y29ldWlfUEM5N1FDNW1IYkhoRmh1Y1JlaUNTcTVfS3ZXeXNqY3dVU0pwOHVHU3d2cGxyY0I5VVc4WWNibl9HajlwWWRqbzNEWDVEYUYwTHdyT0lXYVI5ejgteF9TTEFBbVc4Y3J2SG1OdFNtWW4ydlRKbFA1d2xJa21ZamlVS1FKY0NBNFNVNWgyWnlWNVVsbTE0bGhBMg2&id=6d36fe77-a0c5-4110-af53-025340fe3a88
server: nginx
set-cookie: sid=6bfddbe4-5f5a-11ed-a694-ee9c1b0d85bb; path=/; domain=.medialinks.cc; expires=Sun, 26 Nov 2090 14:56:35 GMT; max-age=2147483647; HttpOnly
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 2a47d129a3af5f02c654faf925c60273
9ad27ed9f4500c939260a677c12e702599b00fa9
0e031af077bf7009ffefada782407a247bbd31bddc96994c68de7bfe902bf992
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2941
Cache-Control: max-age=166398
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 11:42:29 GMT
Etag: "636a1c26-1d7"
Expires: Thu, 10 Nov 2022 09:55:47 GMT
Last-Modified: Tue, 08 Nov 2022 09:06:46 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
btpnative.com/click?data=Y29ldWlfUEM5N1FDNW1IYkhoRmh1Y1JlaUNTcTVfS3ZXeXNqY3dVU0pwOHVHU3d2cGxyY0I5VVc4WWNibl9HajlwWWRqbzNEWDVEYUYwTHdyT0lXYVI5ejgteF9TTEFBbVc4Y3J2SG1OdFNtWW4ydlRKbFA1d2xJa21ZamlVS1FKY0NBNFNVNWgyWnlWNVVsbTE0bGhBMg2&id=6d36fe77-a0c5-4110-af53-025340fe3a88
192.99.158.241200 OK 5.5 kB URL HTTP/1.1 btpnative.com/click?data=Y29ldWlfUEM5N1FDNW1IYkhoRmh1Y1JlaUNTcTVfS3ZXeXNqY3dVU0pwOHVHU3d2cGxyY0I5VVc4WWNibl9HajlwWWRqbzNEWDVEYUYwTHdyT0lXYVI5ejgteF9TTEFBbVc4Y3J2SG1OdFNtWW4ydlRKbFA1d2xJa21ZamlVS1FKY0NBNFNVNWgyWnlWNVVsbTE0bGhBMg2&id=6d36fe77-a0c5-4110-af53-025340fe3a88
IP 192.99.158.241:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (349), with CRLF line terminators
Hash 6c75d23093de146a3c175a6b12d9a497
718aab0883406509105642d8d6a0cc052e2cd021
23bede28a8ff5ff1adc12f33c02e3cadc69e69eba78d80800b98ac5311dbe377
GET /click?data=Y29ldWlfUEM5N1FDNW1IYkhoRmh1Y1JlaUNTcTVfS3ZXeXNqY3dVU0pwOHVHU3d2cGxyY0I5VVc4WWNibl9HajlwWWRqbzNEWDVEYUYwTHdyT0lXYVI5ejgteF9TTEFBbVc4Y3J2SG1OdFNtWW4ydlRKbFA1d2xJa21ZamlVS1FKY0NBNFNVNWgyWnlWNVVsbTE0bGhBMg2&id=6d36fe77-a0c5-4110-af53-025340fe3a88 HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: ahjybIwYNsJMivh=ahjybIwYNsJMivh; path=/
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Tue, 08 Nov 2022 11:42:28 GMT
Content-Length: 5470
push.services.mozilla.com/
44.242.41.15101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.242.41.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bX4IF84NyO+T+rlJEnIFqA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BjFqDtak73zj+tRikxRIZavhhdU=
btpnative.com/Redirect/
192.99.158.241302 Found 2.2 kB IP 192.99.158.241:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (2099), with CRLF line terminators
Hash bdea8bff86de5abceaefdf0ef48f833c
6a8e56ce39b2b5142b15087165e14363ee1ab83a
e7ab6b8620422be58cdc5ae799d8e8dfdfe447746249c5716a184a60145f93b5
POST /Redirect/ HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 359
Origin: http://btpnative.com
Connection: keep-alive
Referer: http://btpnative.com/click?data=Y29ldWlfUEM5N1FDNW1IYkhoRmh1Y1JlaUNTcTVfS3ZXeXNqY3dVU0pwOHVHU3d2cGxyY0I5VVc4WWNibl9HajlwWWRqbzNEWDVEYUYwTHdyT0lXYVI5ejgteF9TTEFBbVc4Y3J2SG1OdFNtWW4ydlRKbFA1d2xJa21ZamlVS1FKY0NBNFNVNWgyWnlWNVVsbTE0bGhBMg2&id=6d36fe77-a0c5-4110-af53-025340fe3a88
Cookie: ahjybIwYNsJMivh=ahjybIwYNsJMivh
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEz-4cMgc7k2CQfSMU3tyux_zXLC0fCdztIBwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYmDyfaZRNJu7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cN7nH-SptGww0_Lc2BzhBbCnxcNkCxyKSbKuE68LJmrUkVnDRgcdXKTRnSxXXyhrt1xm2sYVSlCFRkaRc23CHkBomvTjQEAbO4ZhDgi-W47FpWsppPeNsvRyfo_D9CtSJSvId5w79OcLE-9X1IABuaPZRV_iUIoMC8g_Nw7BA97Bs7TJeRID9nHaN7dhotK4HIxu2Gzo00pPjaIhSVk98Ta7PA4YRPArKLJFoiSlbxWSjlLvjiIPaHg5WPgtKC4XQoDU-lLNn0lGFqlWDvY61fRElp_Lyu7uq6FrbJc0oX9RyfSjum-1vkAlAhyehRpfEvDZG5E179ZZ_gxb9hbxFbbHMpUa76G-k9ku2xdugSecXNfwkx_E3Cx38et5OL5Lxlf3xtMiDxoeB5D2E5YTrnb5WsIXDxW9rano2m3zal-yNoB12Wcaf9p9EEFiEjq8T-M6WNx7ngYBK8Wi7zx_1XWAA8F9dVLbRPBFLkekxh4DntLudd2S-BG6-GUiJEGfqdCWYv5OlFTO3LhW8KpE0Wv4x0--q4VAMTWAAylz7Hc2GmoD4w1QNKXQxwVKrSkdwd_9TebP7OhX7Uaum7L1yL7C2l1jkxrhIb5fthUBwnxNXWQ4nw5vdsInNKuVfWw7k1Ahv2cF5MTsaF3PyFOjvs7TyAdGpK0gKGva4l2r6eafMN9JTirQRCvz4SjWdsxYRXQnl0R-OQW6-KiDpl0OOFLy8ypOVuuy_ZvLsZdLYdwgHuSuI0UmZAEvb_KD-bS5PtqZI-7jOcEtmkkeCN7nHDoWxwhh3SV2F9PxYrgj9BuXSj9JeEBDHbvyWnVOL-od02K3p_QRnQ8kE090udTztmZbLQnVPeS3dg_8xum8RGay0scI-FzxcQhHAMLjbH-aIJQ8KjL4VORoVFApyocbCi_0mSrFO0TYCn_YD1jzo2RvsJzzn99eojS5o6Z0JEfM65kSHR8wMseU5ImlzngRh5JhWFujM_vfbPo8wBaobN2znk2nMGp8p1nE0Wtij7diTtdfhakJ-WzWaPLObEr7R5sjnvmXTu3s_t3nKkDX0cKzGdTuPSZPxLuWZpPkolUl0dgMYn-q_Cz_fxn2PwZj_1G6IEH2vd3EE9l6zmwxYmZRLjddtNgvdsvFKwAFgloip-ZQ5AdIgfoOE8JF80g8EcMMLluUHoZDmMjPOHSGnqiAg2vWOb7nyMFC4GFm-cs5MTVra1_0n8_OF6gzSCZLOw3uZh0qJZTfP0f7e7Plm3cdolvMisrk30SaUNoHu1KPvWfEFlu4-m5-Puc0AMP0jIidkVh7rKC-c1CXCvrQoC2f-7ZgrtBRq64437gHojIR_YtPQ5x5kP2F2a-rimsCvmiBtXNSqd7JyHECEhPobjZI5W_bJJ1bRf82F8JRQ3FjMpidioPg4XAeX4ZARgE-q4z1Q-NRmHqAf9Hib5KBADQRbVG5aRc_q8pcfx0th3Q4kQNMkFTpQtIoAD_lcm6TaQyOe7hOUbpZ2ZNj-Ibr1uGDcYt_BUTwk1SPsToWSr7YxkHDfQEnCNvA7VzB9UDmg1qEb8B8Y2MepcfbNMsYAKvLaDoDfaczcYJb2gyS7ICWpxAp_m_XBYlKida0AI2svxJQbIgP46qg0eOTLExdRXZM-_rZUzqiCRk5bSTdWcYVZNT5T88me1c9QbPNX8wAD0zV-eOuBH1BZl-3FOhveX1m-Enx24tEQ5ChRQs8KFMvedFvFy5Ax27vDhlSKu0kB7f_Cw8aQxaviKNlkMokTYeFcQISE-huNkhgzCLu5nvHw42qXGjsOvMSdrXPZ8z1Vm5z7G7ZPe4bzvQ1q0TVydv1DlFQO5HpzDxgt3fOgdq5oOaHrLZE3F_n
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Tue, 08 Nov 2022 11:42:28 GMT
Content-Length: 2171
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 1941d73ba356684871d0365b46718ce4
e3373632774a88489062f9999578ce7fac6d1b8d
c4b1f4711ec95f9da50a598f45280f55b7463c4bc525871e598db077adf5ddc5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 08 Nov 2022 11:42:29 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 19:25:44 GMT
Expires: Sun, 13 Nov 2022 19:25:43 GMT
Etag: "e3373632774a88489062f9999578ce7fac6d1b8d"
Cache-Control: max-age=459193,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 766e0bac1c810b31-OSL
mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEz-4cMgc7k2CQfSMU3tyux_zXLC0fCdztIBwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYmDyfaZRNJu7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cN7nH-SptGww0_Lc2BzhBbCnxcNkCxyKSbKuE68LJmrUkVnDRgcdXKTRnSxXXyhrt1xm2sYVSlCFRkaRc23CHkBomvTjQEAbO4ZhDgi-W47FpWsppPeNsvRyfo_D9CtSJSvId5w79OcLE-9X1IABuaPZRV_iUIoMC8g_Nw7BA97Bs7TJeRID9nHaN7dhotK4HIxu2Gzo00pPjaIhSVk98Ta7PA4YRPArKLJFoiSlbxWSjlLvjiIPaHg5WPgtKC4XQoDU-lLNn0lGFqlWDvY61fRElp_Lyu7uq6FrbJc0oX9RyfSjum-1vkAlAhyehRpfEvDZG5E179ZZ_gxb9hbxFbbHMpUa76G-k9ku2xdugSecXNfwkx_E3Cx38et5OL5Lxlf3xtMiDxoeB5D2E5YTrnb5WsIXDxW9rano2m3zal-yNoB12Wcaf9p9EEFiEjq8T-M6WNx7ngYBK8Wi7zx_1XWAA8F9dVLbRPBFLkekxh4DntLudd2S-BG6-GUiJEGfqdCWYv5OlFTO3LhW8KpE0Wv4x0--q4VAMTWAAylz7Hc2GmoD4w1QNKXQxwVKrSkdwd_9TebP7OhX7Uaum7L1yL7C2l1jkxrhIb5fthUBwnxNXWQ4nw5vdsInNKuVfWw7k1Ahv2cF5MTsaF3PyFOjvs7TyAdGpK0gKGva4l2r6eafMN9JTirQRCvz4SjWdsxYRXQnl0R-OQW6-KiDpl0OOFLy8ypOVuuy_ZvLsZdLYdwgHuSuI0UmZAEvb_KD-bS5PtqZI-7jOcEtmkkeCN7nHDoWxwhh3SV2F9PxYrgj9BuXSj9JeEBDHbvyWnVOL-od02K3p_QRnQ8kE090udTztmZbLQnVPeS3dg_8xum8RGay0scI-FzxcQhHAMLjbH-aIJQ8KjL4VORoVFApyocbCi_0mSrFO0TYCn_YD1jzo2RvsJzzn99eojS5o6Z0JEfM65kSHR8wMseU5ImlzngRh5JhWFujM_vfbPo8wBaobN2znk2nMGp8p1nE0Wtij7diTtdfhakJ-WzWaPLObEr7R5sjnvmXTu3s_t3nKkDX0cKzGdTuPSZPxLuWZpPkolUl0dgMYn-q_Cz_fxn2PwZj_1G6IEH2vd3EE9l6zmwxYmZRLjddtNgvdsvFKwAFgloip-ZQ5AdIgfoOE8JF80g8EcMMLluUHoZDmMjPOHSGnqiAg2vWOb7nyMFC4GFm-cs5MTVra1_0n8_OF6gzSCZLOw3uZh0qJZTfP0f7e7Plm3cdolvMisrk30SaUNoHu1KPvWfEFlu4-m5-Puc0AMP0jIidkVh7rKC-c1CXCvrQoC2f-7ZgrtBRq64437gHojIR_YtPQ5x5kP2F2a-rimsCvmiBtXNSqd7JyHECEhPobjZI5W_bJJ1bRf82F8JRQ3FjMpidioPg4XAeX4ZARgE-q4z1Q-NRmHqAf9Hib5KBADQRbVG5aRc_q8pcfx0th3Q4kQNMkFTpQtIoAD_lcm6TaQyOe7hOUbpZ2ZNj-Ibr1uGDcYt_BUTwk1SPsToWSr7YxkHDfQEnCNvA7VzB9UDmg1qEb8B8Y2MepcfbNMsYAKvLaDoDfaczcYJb2gyS7ICWpxAp_m_XBYlKida0AI2svxJQbIgP46qg0eOTLExdRXZM-_rZUzqiCRk5bSTdWcYVZNT5T88me1c9QbPNX8wAD0zV-eOuBH1BZl-3FOhveX1m-Enx24tEQ5ChRQs8KFMvedFvFy5Ax27vDhlSKu0kB7f_Cw8aQxaviKNlkMokTYeFcQISE-huNkhgzCLu5nvHw42qXGjsOvMSdrXPZ8z1Vm5z7G7ZPe4bzvQ1q0TVydv1DlFQO5HpzDxgt3fOgdq5oOaHrLZE3F_n
108.168.193.189302 Found 0 B URL HTTP/2 mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEz-4cMgc7k2CQfSMU3tyux_zXLC0fCdztIBwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYmDyfaZRNJu7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cN7nH-SptGww0_Lc2BzhBbCnxcNkCxyKSbKuE68LJmrUkVnDRgcdXKTRnSxXXyhrt1xm2sYVSlCFRkaRc23CHkBomvTjQEAbO4ZhDgi-W47FpWsppPeNsvRyfo_D9CtSJSvId5w79OcLE-9X1IABuaPZRV_iUIoMC8g_Nw7BA97Bs7TJeRID9nHaN7dhotK4HIxu2Gzo00pPjaIhSVk98Ta7PA4YRPArKLJFoiSlbxWSjlLvjiIPaHg5WPgtKC4XQoDU-lLNn0lGFqlWDvY61fRElp_Lyu7uq6FrbJc0oX9RyfSjum-1vkAlAhyehRpfEvDZG5E179ZZ_gxb9hbxFbbHMpUa76G-k9ku2xdugSecXNfwkx_E3Cx38et5OL5Lxlf3xtMiDxoeB5D2E5YTrnb5WsIXDxW9rano2m3zal-yNoB12Wcaf9p9EEFiEjq8T-M6WNx7ngYBK8Wi7zx_1XWAA8F9dVLbRPBFLkekxh4DntLudd2S-BG6-GUiJEGfqdCWYv5OlFTO3LhW8KpE0Wv4x0--q4VAMTWAAylz7Hc2GmoD4w1QNKXQxwVKrSkdwd_9TebP7OhX7Uaum7L1yL7C2l1jkxrhIb5fthUBwnxNXWQ4nw5vdsInNKuVfWw7k1Ahv2cF5MTsaF3PyFOjvs7TyAdGpK0gKGva4l2r6eafMN9JTirQRCvz4SjWdsxYRXQnl0R-OQW6-KiDpl0OOFLy8ypOVuuy_ZvLsZdLYdwgHuSuI0UmZAEvb_KD-bS5PtqZI-7jOcEtmkkeCN7nHDoWxwhh3SV2F9PxYrgj9BuXSj9JeEBDHbvyWnVOL-od02K3p_QRnQ8kE090udTztmZbLQnVPeS3dg_8xum8RGay0scI-FzxcQhHAMLjbH-aIJQ8KjL4VORoVFApyocbCi_0mSrFO0TYCn_YD1jzo2RvsJzzn99eojS5o6Z0JEfM65kSHR8wMseU5ImlzngRh5JhWFujM_vfbPo8wBaobN2znk2nMGp8p1nE0Wtij7diTtdfhakJ-WzWaPLObEr7R5sjnvmXTu3s_t3nKkDX0cKzGdTuPSZPxLuWZpPkolUl0dgMYn-q_Cz_fxn2PwZj_1G6IEH2vd3EE9l6zmwxYmZRLjddtNgvdsvFKwAFgloip-ZQ5AdIgfoOE8JF80g8EcMMLluUHoZDmMjPOHSGnqiAg2vWOb7nyMFC4GFm-cs5MTVra1_0n8_OF6gzSCZLOw3uZh0qJZTfP0f7e7Plm3cdolvMisrk30SaUNoHu1KPvWfEFlu4-m5-Puc0AMP0jIidkVh7rKC-c1CXCvrQoC2f-7ZgrtBRq64437gHojIR_YtPQ5x5kP2F2a-rimsCvmiBtXNSqd7JyHECEhPobjZI5W_bJJ1bRf82F8JRQ3FjMpidioPg4XAeX4ZARgE-q4z1Q-NRmHqAf9Hib5KBADQRbVG5aRc_q8pcfx0th3Q4kQNMkFTpQtIoAD_lcm6TaQyOe7hOUbpZ2ZNj-Ibr1uGDcYt_BUTwk1SPsToWSr7YxkHDfQEnCNvA7VzB9UDmg1qEb8B8Y2MepcfbNMsYAKvLaDoDfaczcYJb2gyS7ICWpxAp_m_XBYlKida0AI2svxJQbIgP46qg0eOTLExdRXZM-_rZUzqiCRk5bSTdWcYVZNT5T88me1c9QbPNX8wAD0zV-eOuBH1BZl-3FOhveX1m-Enx24tEQ5ChRQs8KFMvedFvFy5Ax27vDhlSKu0kB7f_Cw8aQxaviKNlkMokTYeFcQISE-huNkhgzCLu5nvHw42qXGjsOvMSdrXPZ8z1Vm5z7G7ZPe4bzvQ1q0TVydv1DlFQO5HpzDxgt3fOgdq5oOaHrLZE3F_n
IP 108.168.193.189:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /aS/feedclick?s=HFz5zNIIs95ROWPasgEEz-4cMgc7k2CQfSMU3tyux_zXLC0fCdztIBwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYmDyfaZRNJu7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cN7nH-SptGww0_Lc2BzhBbCnxcNkCxyKSbKuE68LJmrUkVnDRgcdXKTRnSxXXyhrt1xm2sYVSlCFRkaRc23CHkBomvTjQEAbO4ZhDgi-W47FpWsppPeNsvRyfo_D9CtSJSvId5w79OcLE-9X1IABuaPZRV_iUIoMC8g_Nw7BA97Bs7TJeRID9nHaN7dhotK4HIxu2Gzo00pPjaIhSVk98Ta7PA4YRPArKLJFoiSlbxWSjlLvjiIPaHg5WPgtKC4XQoDU-lLNn0lGFqlWDvY61fRElp_Lyu7uq6FrbJc0oX9RyfSjum-1vkAlAhyehRpfEvDZG5E179ZZ_gxb9hbxFbbHMpUa76G-k9ku2xdugSecXNfwkx_E3Cx38et5OL5Lxlf3xtMiDxoeB5D2E5YTrnb5WsIXDxW9rano2m3zal-yNoB12Wcaf9p9EEFiEjq8T-M6WNx7ngYBK8Wi7zx_1XWAA8F9dVLbRPBFLkekxh4DntLudd2S-BG6-GUiJEGfqdCWYv5OlFTO3LhW8KpE0Wv4x0--q4VAMTWAAylz7Hc2GmoD4w1QNKXQxwVKrSkdwd_9TebP7OhX7Uaum7L1yL7C2l1jkxrhIb5fthUBwnxNXWQ4nw5vdsInNKuVfWw7k1Ahv2cF5MTsaF3PyFOjvs7TyAdGpK0gKGva4l2r6eafMN9JTirQRCvz4SjWdsxYRXQnl0R-OQW6-KiDpl0OOFLy8ypOVuuy_ZvLsZdLYdwgHuSuI0UmZAEvb_KD-bS5PtqZI-7jOcEtmkkeCN7nHDoWxwhh3SV2F9PxYrgj9BuXSj9JeEBDHbvyWnVOL-od02K3p_QRnQ8kE090udTztmZbLQnVPeS3dg_8xum8RGay0scI-FzxcQhHAMLjbH-aIJQ8KjL4VORoVFApyocbCi_0mSrFO0TYCn_YD1jzo2RvsJzzn99eojS5o6Z0JEfM65kSHR8wMseU5ImlzngRh5JhWFujM_vfbPo8wBaobN2znk2nMGp8p1nE0Wtij7diTtdfhakJ-WzWaPLObEr7R5sjnvmXTu3s_t3nKkDX0cKzGdTuPSZPxLuWZpPkolUl0dgMYn-q_Cz_fxn2PwZj_1G6IEH2vd3EE9l6zmwxYmZRLjddtNgvdsvFKwAFgloip-ZQ5AdIgfoOE8JF80g8EcMMLluUHoZDmMjPOHSGnqiAg2vWOb7nyMFC4GFm-cs5MTVra1_0n8_OF6gzSCZLOw3uZh0qJZTfP0f7e7Plm3cdolvMisrk30SaUNoHu1KPvWfEFlu4-m5-Puc0AMP0jIidkVh7rKC-c1CXCvrQoC2f-7ZgrtBRq64437gHojIR_YtPQ5x5kP2F2a-rimsCvmiBtXNSqd7JyHECEhPobjZI5W_bJJ1bRf82F8JRQ3FjMpidioPg4XAeX4ZARgE-q4z1Q-NRmHqAf9Hib5KBADQRbVG5aRc_q8pcfx0th3Q4kQNMkFTpQtIoAD_lcm6TaQyOe7hOUbpZ2ZNj-Ibr1uGDcYt_BUTwk1SPsToWSr7YxkHDfQEnCNvA7VzB9UDmg1qEb8B8Y2MepcfbNMsYAKvLaDoDfaczcYJb2gyS7ICWpxAp_m_XBYlKida0AI2svxJQbIgP46qg0eOTLExdRXZM-_rZUzqiCRk5bSTdWcYVZNT5T88me1c9QbPNX8wAD0zV-eOuBH1BZl-3FOhveX1m-Enx24tEQ5ChRQs8KFMvedFvFy5Ax27vDhlSKu0kB7f_Cw8aQxaviKNlkMokTYeFcQISE-huNkhgzCLu5nvHw42qXGjsOvMSdrXPZ8z1Vm5z7G7ZPe4bzvQ1q0TVydv1DlFQO5HpzDxgt3fOgdq5oOaHrLZE3F_n HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 08 Nov 2022 11:42:30 GMT
content-length: 0
set-cookie: rhid=82330143726; Max-Age=15552000; Expires=Sun, 07-May-2023 11:42:30 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://p274639.mybettermb.com/adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCPP6bGrmPHLF5-LiUA8wtLzcErZENwSxFU26z0IKUBeEj6guVMe0rp9i-EvSz_p9wLWDgwPv8lj3CM44Fw-x8jGaL9k7lSpyf3tDiowgTL6oUQyBEIx1cc2adyigf-zD72xMI8S5NwhqRc_ryzfjEDUjhcJc5ApG87WmQM3VxI7N-PejLjNJ1uqF5l4JCHH7zbeeD6LqrID9f9vsZd8PQtg_SzowGwVNMN5YUP0JdO9_Of-xIX2nDFfopt3P867vl_NyRGSUEUZ4HOubXB9CBaBRRcwO3YwfvXMZFC-BfxymSoG89FRf_lh__W_JMtiNWzrePfs4n5z2oQiQ3tH7NntdpOF1ScxyV_JhYB0lhN02XrNlmpeM9v_SYbBfwF3akJVSqdc_f4IQeyZeB4t_supbj8yLhZgjMloAz1e-ccJW1pvUCc6mKTP34sXPwOiAstElW549a04tzju39D0qkcuqTaMPZ4hFYb7AdIrib2gOJf4yBNRlqxdPnEhIaw2zsRJHJzdDv6O5-zfUS8nVU04fFcxJ0StShp2s0_34CATUuHZzeSQTgkyFv_aZQC5A4r4FDOdw858tImbOeXz24ZVRY0XLI-w26tWjri88Beg6ZonWe_Vtl9GtFLC8pMLsUA5RUDuR6cw8YLd3zoHauaBz7G7ZPe4bznH7_a5KV3xE&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSAuzkoMK5phvd0Q4nuH0Htw1Mn8jDkdgIdN0_QgWg2c5s44eyV-C0WwZtONrAuwvhwOagw5rlATsMiN9fGVat5w&si=1&oref=41a59b7c146eafced8ca6a33fe12f964&optunit=MRcRXKXFX7t8_Qbcfr6DZA&rb=_IMbbubN2xw&rr=0&abtg=0
X-Firefox-Spdy: h2
p274639.mybettermb.com/adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCPP6bGrmPHLF5-LiUA8wtLzcErZENwSxFU26z0IKUBeEj6guVMe0rp9i-EvSz_p9wLWDgwPv8lj3CM44Fw-x8jGaL9k7lSpyf3tDiowgTL6oUQyBEIx1cc2adyigf-zD72xMI8S5NwhqRc_ryzfjEDUjhcJc5ApG87WmQM3VxI7N-PejLjNJ1uqF5l4JCHH7zbeeD6LqrID9f9vsZd8PQtg_SzowGwVNMN5YUP0JdO9_Of-xIX2nDFfopt3P867vl_NyRGSUEUZ4HOubXB9CBaBRRcwO3YwfvXMZFC-BfxymSoG89FRf_lh__W_JMtiNWzrePfs4n5z2oQiQ3tH7NntdpOF1ScxyV_JhYB0lhN02XrNlmpeM9v_SYbBfwF3akJVSqdc_f4IQeyZeB4t_supbj8yLhZgjMloAz1e-ccJW1pvUCc6mKTP34sXPwOiAstElW549a04tzju39D0qkcuqTaMPZ4hFYb7AdIrib2gOJf4yBNRlqxdPnEhIaw2zsRJHJzdDv6O5-zfUS8nVU04fFcxJ0StShp2s0_34CATUuHZzeSQTgkyFv_aZQC5A4r4FDOdw858tImbOeXz24ZVRY0XLI-w26tWjri88Beg6ZonWe_Vtl9GtFLC8pMLsUA5RUDuR6cw8YLd3zoHauaBz7G7ZPe4bznH7_a5KV3xE&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSAuzkoMK5phvd0Q4nuH0Htw1Mn8jDkdgIdN0_QgWg2c5s44eyV-C0WwZtONrAuwvhwOagw5rlATsMiN9fGVat5w&si=1&oref=41a59b7c146eafced8ca6a33fe12f964&optunit=MRcRXKXFX7t8_Qbcfr6DZA&rb=_IMbbubN2xw&rr=0&abtg=0
108.168.193.189302 Found 0 B URL HTTP/2 p274639.mybettermb.com/adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCPP6bGrmPHLF5-LiUA8wtLzcErZENwSxFU26z0IKUBeEj6guVMe0rp9i-EvSz_p9wLWDgwPv8lj3CM44Fw-x8jGaL9k7lSpyf3tDiowgTL6oUQyBEIx1cc2adyigf-zD72xMI8S5NwhqRc_ryzfjEDUjhcJc5ApG87WmQM3VxI7N-PejLjNJ1uqF5l4JCHH7zbeeD6LqrID9f9vsZd8PQtg_SzowGwVNMN5YUP0JdO9_Of-xIX2nDFfopt3P867vl_NyRGSUEUZ4HOubXB9CBaBRRcwO3YwfvXMZFC-BfxymSoG89FRf_lh__W_JMtiNWzrePfs4n5z2oQiQ3tH7NntdpOF1ScxyV_JhYB0lhN02XrNlmpeM9v_SYbBfwF3akJVSqdc_f4IQeyZeB4t_supbj8yLhZgjMloAz1e-ccJW1pvUCc6mKTP34sXPwOiAstElW549a04tzju39D0qkcuqTaMPZ4hFYb7AdIrib2gOJf4yBNRlqxdPnEhIaw2zsRJHJzdDv6O5-zfUS8nVU04fFcxJ0StShp2s0_34CATUuHZzeSQTgkyFv_aZQC5A4r4FDOdw858tImbOeXz24ZVRY0XLI-w26tWjri88Beg6ZonWe_Vtl9GtFLC8pMLsUA5RUDuR6cw8YLd3zoHauaBz7G7ZPe4bznH7_a5KV3xE&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSAuzkoMK5phvd0Q4nuH0Htw1Mn8jDkdgIdN0_QgWg2c5s44eyV-C0WwZtONrAuwvhwOagw5rlATsMiN9fGVat5w&si=1&oref=41a59b7c146eafced8ca6a33fe12f964&optunit=MRcRXKXFX7t8_Qbcfr6DZA&rb=_IMbbubN2xw&rr=0&abtg=0
IP 108.168.193.189:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCPP6bGrmPHLF5-LiUA8wtLzcErZENwSxFU26z0IKUBeEj6guVMe0rp9i-EvSz_p9wLWDgwPv8lj3CM44Fw-x8jGaL9k7lSpyf3tDiowgTL6oUQyBEIx1cc2adyigf-zD72xMI8S5NwhqRc_ryzfjEDUjhcJc5ApG87WmQM3VxI7N-PejLjNJ1uqF5l4JCHH7zbeeD6LqrID9f9vsZd8PQtg_SzowGwVNMN5YUP0JdO9_Of-xIX2nDFfopt3P867vl_NyRGSUEUZ4HOubXB9CBaBRRcwO3YwfvXMZFC-BfxymSoG89FRf_lh__W_JMtiNWzrePfs4n5z2oQiQ3tH7NntdpOF1ScxyV_JhYB0lhN02XrNlmpeM9v_SYbBfwF3akJVSqdc_f4IQeyZeB4t_supbj8yLhZgjMloAz1e-ccJW1pvUCc6mKTP34sXPwOiAstElW549a04tzju39D0qkcuqTaMPZ4hFYb7AdIrib2gOJf4yBNRlqxdPnEhIaw2zsRJHJzdDv6O5-zfUS8nVU04fFcxJ0StShp2s0_34CATUuHZzeSQTgkyFv_aZQC5A4r4FDOdw858tImbOeXz24ZVRY0XLI-w26tWjri88Beg6ZonWe_Vtl9GtFLC8pMLsUA5RUDuR6cw8YLd3zoHauaBz7G7ZPe4bznH7_a5KV3xE&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSAuzkoMK5phvd0Q4nuH0Htw1Mn8jDkdgIdN0_QgWg2c5s44eyV-C0WwZtONrAuwvhwOagw5rlATsMiN9fGVat5w&si=1&oref=41a59b7c146eafced8ca6a33fe12f964&optunit=MRcRXKXFX7t8_Qbcfr6DZA&rb=_IMbbubN2xw&rr=0&abtg=0 HTTP/1.1
Host: p274639.mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Cookie: rhid=82330143726
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 08 Nov 2022 11:42:30 GMT
content-length: 0
set-cookie: rhid=82330143726; Max-Age=15552000; Expires=Sun, 07-May-2023 11:42:30 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
loi=ad_490233_off_142374_aff_3322_cid_274639-578767269-MEDIALINKS.CC_ts_1667907750; Max-Age=3600; Expires=Tue, 08-Nov-2022 12:42:30 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://myfood.ltd/?v=20171031&s1=0
X-Firefox-Spdy: h2
myfood.ltd/?v=20171031&s1=0
151.139.128.10200 OK 2.9 kB URL HTTP/2 myfood.ltd/?v=20171031&s1=0
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6859), with no line terminators
Hash 029ccb01ef612a9e6748494c60d24b69
d385f7671725be11701998c27571e94b1950f991
7ac429dc45b509b1bed9bdcdc5610868d510d979ce3cc06d48870511bf0425f5
GET /?v=20171031&s1=0 HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 11:42:30 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 2896
content-type: text/html
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: W/"603cb731-1ad4"
x-hw: 1667907750.cds067.sk1.hn,1667907750.cds236.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/main/css/style.css
151.139.128.10200 OK 19 kB URL HTTP/2 myfood.ltd/main/css/style.css
IP 151.139.128.10:0
File type Unicode text, UTF-8 text, with very long lines (65134), with no line terminators
Hash a95a0c8bd1273406b8c8053fb3527d56
2a461dcfa2c4bf1d22727bfd7c3c2abc85d44343
55b46146d32f4ee365d4ca91d8b3b1c504a062b15bbc1ed60a22ac2d05be1db5
GET /main/css/style.css HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 11:42:30 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 18933
content-type: text/css
last-modified: Mon, 01 Mar 2021 09:43:15 GMT
accept-ranges: bytes
server: nginx
etag: W/"603cb733-1b1ac"
x-hw: 1667907750.cds067.sk1.hn,1667907750.cds261.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_1.jpg
151.139.128.10200 OK 74 kB URL HTTP/2 myfood.ltd/images/Superfood_1.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x420, components 3\012- data
Hash c2c3ec0e55e648c2a85d4499714a9c11
073f2990a52da59a7d3b73583b30be3c2cf45523
b66cf7365382753dc6340bfa2fba89c368ca3b930a0833d8f64c4c34525fc2ec
GET /images/Superfood_1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 11:42:30 GMT
cache-control: max-age=30
content-length: 74204
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-121dc"
x-hw: 1667907750.cds067.sk1.hn,1667907750.cds247.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_2.jpg
151.139.128.10200 OK 52 kB URL HTTP/2 myfood.ltd/images/Superfood_2.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x341, components 3\012- data
Hash b87af7248a82f58fe2ea5d0c7b030886
1d5a5b9752d7978c68b0d4a1689b3d8e6d322f0a
14da8c39c357dad0441b26d575c0000a9529c76d785680306a3cf51abe4cae81
GET /images/Superfood_2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 11:42:30 GMT
cache-control: max-age=30
content-length: 51830
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: "603cb731-ca76"
x-hw: 1667907750.cds067.sk1.hn,1667907750.cds220.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-1.jpg
151.139.128.10200 OK 11 kB URL HTTP/2 myfood.ltd/images/avatar-1.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash 62d0b6a649ac10e72bcb6ea3bbf57564
3e333889b0b66bfc6a32499f4c55878e2102b463
58dddc0a77632d920d096da6c6e2587c5859a4b4dd7af6dcd6eb8009ebc23ba6
GET /images/avatar-1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 11:42:30 GMT
cache-control: max-age=30
content-length: 11304
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-2c28"
x-hw: 1667907750.cds067.sk1.hn,1667907750.cds218.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-2.jpg
151.139.128.10200 OK 11 kB URL HTTP/2 myfood.ltd/images/avatar-2.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash dd3881ed1b5b03b1d571edf89e12c466
61ca68c1c2d2ae7d286dfc0540f4ca8b357fdf3d
97b65e41dd547b310e1e860d2ae4717dba1d97bd36c0cd06c35749caa515e207
GET /images/avatar-2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 11:42:30 GMT
cache-control: max-age=30
content-length: 10665
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-29a9"
x-hw: 1667907750.cds067.sk1.hn,1667907750.cds217.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/main/js/main.js
151.139.128.10200 OK 39 kB URL HTTP/2 myfood.ltd/main/js/main.js
IP 151.139.128.10:0
File type Unicode text, UTF-8 text, with very long lines (60220)
Hash 181e3fa3b1de97ff4efd259bc2a2c8c7
52edf1dc36109cb57bea12689a48442e27f06ad1
ffa8984bea3bf0c0a0cb282e9a5a98b3435e63fb6a26dfe0351979fa9f827c40
GET /main/js/main.js HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 11:42:30 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 38656
content-type: application/javascript
last-modified: Mon, 01 Mar 2021 09:43:14 GMT
accept-ranges: bytes
server: nginx
etag: "603cb732-1d57b"
x-hw: 1667907750.cds067.sk1.hn,1667907750.cds228.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2e37c89a5a7f608a21ac42b87ee0f7fc
55132fb03671e178b7e186da48ac7e02d6e96e23
6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4185
Expires: Tue, 08 Nov 2022 12:52:15 GMT
Date: Tue, 08 Nov 2022 11:42:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2e37c89a5a7f608a21ac42b87ee0f7fc
55132fb03671e178b7e186da48ac7e02d6e96e23
6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4185
Expires: Tue, 08 Nov 2022 12:52:15 GMT
Date: Tue, 08 Nov 2022 11:42:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2e37c89a5a7f608a21ac42b87ee0f7fc
55132fb03671e178b7e186da48ac7e02d6e96e23
6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4185
Expires: Tue, 08 Nov 2022 12:52:15 GMT
Date: Tue, 08 Nov 2022 11:42:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd21b731d-5fcc-42b8-ba5c-4292558c1d65.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd21b731d-5fcc-42b8-ba5c-4292558c1d65.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 37802736d42529da1237e5d89e253928
6f246d25b36dc880489f3af2ae8767a0f5f2542b
b21622ee7e858a4508096480ec3ffba824e96d469b0fcfa0f6daaabad296fd40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd21b731d-5fcc-42b8-ba5c-4292558c1d65.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12165
x-amzn-requestid: 7baae03c-2e22-477c-9c14-d21a26469b47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAvEFHdIAMF_XQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697b2d-2edb1d9722872b1166a5b085;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:39:57 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1QlljbC_YBobvvYSxTH2jH4a4kZAK8Am-k6CNxJrLIm1TY1gbfP1gg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 22:12:03 GMT
age: 48627
etag: "6f246d25b36dc880489f3af2ae8767a0f5f2542b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7884b85a4b30e918a0b44f73a301a78b
f7ae1b83a0199b76dd0d31a21db4072b867e4f37
9576f9ad95c958887de953dee72b267cd0ed7293ed62fb540df76a2d49fac035
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4527
x-amzn-requestid: c3be9447-c43a-48d6-9aef-c0999742886c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQA1GFN5IAMFaRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697b53-3bb315de52dcf6114da9ad05;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:40:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _nFA59k8ERwiA6Ct_pZJs0WkFuagosyyiOkeQc1PuWMcno-Lpz4UfA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 22:01:04 GMT
age: 49286
etag: "f7ae1b83a0199b76dd0d31a21db4072b867e4f37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc57b3745-ae4a-4265-b3dd-286aed8be329.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc57b3745-ae4a-4265-b3dd-286aed8be329.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d22d633d497f2e25eab580a648c05434
8e549621e4182a257895a03db93e786bd86072a5
2263e6c2417c5a40885359d93939febbb9e94cef1c598b7ef95069d50275bf28
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc57b3745-ae4a-4265-b3dd-286aed8be329.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5978
x-amzn-requestid: e4cff3d7-86a7-44a8-8858-7c893c19e76c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAVFHdWIAMFQZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a86-60d1a8250e0017a3574a6642;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:37:10 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qSguV2gfEtxsoWSMifxQEbIAAqhUDgVom0IWauJEIrFoMA5f17J-GA==
via: 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:56:55 GMT
age: 49535
etag: "8e549621e4182a257895a03db93e786bd86072a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bF_38GKXoAMFwSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q0yZmbExDP4tH0n1n2qj_NR2Mv_y_dsO0LJ1RKZoS6Me-NLbhpUWqw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 09:08:56 GMT
age: 9214
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39446652ee66d20bd73df20f1a29589c
349ea78f3ad0f2f7376ba22e417226b2e06806d7
655a00944a319ba167e99b43055044cb18bc48d53605ff0d1b6c8b1ba8ee8237
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4737
x-amzn-requestid: ad230e08-9f4e-46cf-9a86-f8e013a1c498
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQBFkEhLIAMFq_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697bbd-7e8b686a23a84c5d473c9ef5;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:42:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FoOPmZEjC6nhw801dgqENVL-9-aC0pyFAF-fMS57XzQyfxck2GGUvA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:55:45 GMT
age: 49605
etag: "349ea78f3ad0f2f7376ba22e417226b2e06806d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 11:42:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 11:42:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02ba851a-86f3-43b7-8371-24e96a151dec.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02ba851a-86f3-43b7-8371-24e96a151dec.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 36a5fcfdd58558031f15af5d13ebe21f
8bb15829bec5bbded9b864e73d8fbf1059cd4afc
544bb499e28cc9d1e0bffccacf74411bbe7186959d9f1ba54edbd167935b9055
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02ba851a-86f3-43b7-8371-24e96a151dec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7442
x-amzn-requestid: f8fedc67-c5ed-41b5-a384-6d45596197fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKusfEbxoAMF67Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63675e4f-1459fdf653f4ee6f3dda084f;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 07:12:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oLvf8nVtboo44ig5ChneqJThrrMubWZEsi3IUYQqZ1O2akng2EN5iA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 07:53:38 GMT
age: 13732
etag: "8bb15829bec5bbded9b864e73d8fbf1059cd4afc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
216.58.207.195200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 14544, version 1.0\012- data
Hash 223a277bd88d8a90c8cdf24cda0ad5f5
24234c1c81b3948758c1a0be8e5a65386ca94c52
d61b45b8b3cded238a65ee0aac4043b989f11cee56acfe5c889777f961f241a2
GET /s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myfood.ltd
Connection: keep-alive
Referer: https://myfood.ltd/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14544
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Nov 2022 00:58:50 GMT
expires: Tue, 07 Nov 2023 00:58:50 GMT
cache-control: public, max-age=31536000
age: 125020
last-modified: Wed, 11 Oct 2017 21:49:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
216.58.207.195200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 14564, version 1.0\012- data
Hash 60c866748ff15f5b347fdba64596b1b1
34f486906decb7c8cf7a02d4758add9a2408c7a5
5278c0f6063ca9ad85653b18a2ddf1aa57e3ab40b7973a69b09acf859db8264d
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myfood.ltd
Connection: keep-alive
Referer: https://myfood.ltd/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 05 Nov 2022 02:00:16 GMT
expires: Sun, 05 Nov 2023 02:00:16 GMT
cache-control: public, max-age=31536000
age: 294134
last-modified: Wed, 11 Oct 2017 21:49:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
myfood.ltd/favicon.ico
151.139.128.10200 OK 1.2 kB IP 151.139.128.10:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash b671b0407b8abf4ffb9946ee1596d992
79a116ffd13f1888451abd3cb8751cb2140f2fa4
1515616a51664df153b03397585ee45469cb936100992f870419514b17820649
GET /favicon.ico HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 11:42:30 GMT
cache-control: max-age=30
content-length: 1150
content-type: image/x-icon
last-modified: Wed, 28 Mar 2018 14:00:16 GMT
accept-ranges: bytes
server: nginx
etag: "5abb9ff0-47e"
x-hw: 1667907750.cds067.sk1.hn,1667907750.cds240.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 11:42:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN