firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 12 Sep 2022 18:44:01 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OiRZRmW6Z3B7KGK19xjZEd4Q8mDqx8DeX1SM2unipMfB-g_ZJ2T7vg==
Age: 2846
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6037
Expires: Mon, 12 Sep 2022 21:12:04 GMT
Date: Mon, 12 Sep 2022 19:31:27 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.49200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.49:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 12 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eyQ0HZ0xYEZGdoiu2l2fNBbykGfAdSk7hv_i9WgudpmeGF2_6CcpmA==
age: 44055
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 19:31:27 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 12 Sep 2022 18:56:07 GMT
Expires: Mon, 12 Sep 2022 19:52:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1GLiiU-1jpRqlfIMjarAjnJ3Tek5h3sobFS7bfZ5tqrk96gQ1L9Z0w==
Age: 2120
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 9f5b335a9acf5fbff8a9f9959ab41952
130cc17fde021840bd7d46521dd391c39f95f8a8
c20e7812855bdc6ef887ce6a76bb70efda9bc08c9d972d55630520e1c07ea7cd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 19:31:28 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 02:58:56 GMT
Expires: Fri, 16 Sep 2022 02:58:55 GMT
Etag: "130cc17fde021840bd7d46521dd391c39f95f8a8"
Cache-Control: max-age=285446,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 749b10435d05b4e8-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cb674936db4af4be99c3c397eff8c6ae
de79d76bac3fae5799b0ff35ecc19360595dfb06
992b884b64f9f6fdb76a6ba91c48fed329325b95b99d8003b282879a52093c08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3884
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:28 GMT
Last-Modified: Mon, 12 Sep 2022 18:26:44 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.42.74.230101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.42.74.230:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Me6mZ4EIRpilDv7dDwGM/w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3rpD76u+YvCxsbQMS/duEx7oDf8=
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash bff3a3f3f4f889b08163e7d307438790
c430c7c151973fa0e63ddf52e5624e1ce2282161
bce7d12a2343d8e43fbd05522fe82807ed48933a984aa113c284267364981750
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash bff3a3f3f4f889b08163e7d307438790
c430c7c151973fa0e63ddf52e5624e1ce2282161
bce7d12a2343d8e43fbd05522fe82807ed48933a984aa113c284267364981750
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ec7a5bb8e310f5c9c992cf85832d5445
e32b8e200a79da9008985e8e6c272f35b02581c5
6391e4c68631e272509ade559b8f568b03dd88be1956906332ae584f9faee00a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nat.ceraliftskin.com/
3.101.115.243200 OK 43 kB IP 3.101.115.243:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (28504)
Hash 6b5398fbe83e68b8bece65ad259373bf
ec31410707c20c5f773198866abc000c533be093
520bd7bead945f48b5c4c789b0469c28be7e8cc95751e17cef9670622eba2c7c
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: nat.ceraliftskin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
X-DNS-Prefetch-Control: off
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP 8.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Content-Type: text/html; charset=utf-8
ETag: W/"3276e-ZtqAzZkAlKT1ioJ7CtatYZZRCvY"
Set-Cookie: esid=s%3ArhEErVeZ12BUO_rXgOTzNbIk2zqa_pGV.QB1jSdO6zU0s6VX%2FBvWQoADsqVgIBXJWTfvEUxjgSuo; Path=/; HttpOnly
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 12 Sep 2022 19:31:28 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
www.googletagmanager.com/gtm.js?id=GTM-WFHD3GT
142.250.74.72200 OK 60 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WFHD3GT
IP 142.250.74.72:0
File type ASCII text, with very long lines (12689)
Hash de523dae138996aa49a65f2d5c3222d9
c54493f2ccc946b39d1996a7b08a826d528b1495
72e5eb48a28a8d42e5315feb1d873e13f710c63a95c5f8c0557f2bf1fde0a480
GET /gtm.js?id=GTM-WFHD3GT HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 12 Sep 2022 19:31:28 GMT
expires: Mon, 12 Sep 2022 19:31:28 GMT
cache-control: private, max-age=900
last-modified: Mon, 12 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 59549
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
del-mar-laboratories.imgix.net/ceraliftskin.com/phone-symbol-blue.png?fit=max&auto=format
151.101.86.208200 OK 4.9 kB URL HTTP/2 del-mar-laboratories.imgix.net/ceraliftskin.com/phone-symbol-blue.png?fit=max&auto=format
IP 151.101.86.208:0
File type ISO Media, AVIF Image\012- data
Hash 85952a12f298fbe10d8fd01c6be04596
5e92ad1f8800f7743440cca53aaa8fa9172682a0
5b253556e045e23dbc2c668d97f16f63f7d7a09debf035b3214cb90c48ec9a09
GET /ceraliftskin.com/phone-symbol-blue.png?fit=max&auto=format HTTP/1.1
Host: del-mar-laboratories.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 16 Aug 2022 09:14:39 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: e1f4a57aa8885acec58021775c309ec8a52dfc6e
date: Mon, 12 Sep 2022 19:31:28 GMT
age: 2369809
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10063-SJC, cache-bma1658-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 4937
X-Firefox-Spdy: h2
convertri.imgix.net/20d05f77-93bf-11ea-abef-0697e5ca793e/5115405dfae763430706c7ebc4a284273e5daf76/del-mar-logo-g.svg
151.101.86.208200 OK 4.5 kB URL HTTP/2 convertri.imgix.net/20d05f77-93bf-11ea-abef-0697e5ca793e/5115405dfae763430706c7ebc4a284273e5daf76/del-mar-logo-g.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6642)
Hash ac90cc94b592b48ad3da46ccae4dc83e
d697c29857babe2796833a76b86d4b97ac9f79c1
e3edb58d9c3581a87662b7b6c84ecd23c7df4559077e6abab44daba8c847818b
GET /20d05f77-93bf-11ea-abef-0697e5ca793e/5115405dfae763430706c7ebc4a284273e5daf76/del-mar-logo-g.svg HTTP/1.1
Host: convertri.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2419200
last-modified: Thu, 01 Oct 2020 18:57:34 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 9c14e79c5c52a6ccca450d714155b7f6a05fea64
x-imgix-render-farm: 01.1
date: Mon, 12 Sep 2022 19:31:28 GMT
age: 1159076
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10055-SJC, cache-bma1648-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 4493
X-Firefox-Spdy: h2
convertri.imgix.net/20d05f77-93bf-11ea-abef-0697e5ca793e/71513df817cb3814febff1887ec74dfd75b8751d/del-mar-logo.svg
151.101.86.208200 OK 16 kB URL HTTP/2 convertri.imgix.net/20d05f77-93bf-11ea-abef-0697e5ca793e/71513df817cb3814febff1887ec74dfd75b8751d/del-mar-logo.svg
IP 151.101.86.208:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (13867)
Hash 81f6d876a09c4db53105025503930167
14baba81afb6202b4f16745ea53731babe2d241c
e76c038d598388844f26627438bf6bcda2acbd32a2fd9eca1537cfd28dbb43d7
GET /20d05f77-93bf-11ea-abef-0697e5ca793e/71513df817cb3814febff1887ec74dfd75b8751d/del-mar-logo.svg HTTP/1.1
Host: convertri.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=2419200
last-modified: Wed, 30 Sep 2020 20:04:10 GMT
content-encoding: gzip
server: imgix
x-imgix-id: d8b3fc7cceeb3f7aa23582e5d22aa399f5994560
date: Mon, 12 Sep 2022 19:31:28 GMT
age: 2362830
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1648-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 16125
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash bff3a3f3f4f889b08163e7d307438790
c430c7c151973fa0e63ddf52e5624e1ce2282161
bce7d12a2343d8e43fbd05522fe82807ed48933a984aa113c284267364981750
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
del-mar-laboratories.imgix.net/ceraliftskin.com/dr-paul-chasan.png?auto=compress,format&dpr=2&fit=scale&w=252&h=336
151.101.86.208200 OK 16 kB URL HTTP/2 del-mar-laboratories.imgix.net/ceraliftskin.com/dr-paul-chasan.png?auto=compress,format&dpr=2&fit=scale&w=252&h=336
IP 151.101.86.208:0
File type ISO Media, AVIF Image\012- data
Hash 2344b4ba94492c037d17ccca8d9ca384
3015bb7ee93cf08c9e5121249141c0fc9daddde4
750e89012e0ecc3a8e7474b7d94c0ee401ed16494e6859dd36a8d48a5699007c
GET /ceraliftskin.com/dr-paul-chasan.png?auto=compress,format&dpr=2&fit=scale&w=252&h=336 HTTP/1.1
Host: del-mar-laboratories.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Aug 2022 10:35:07 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: c8f046270aa009b4dedec53a5232a0757e6c312e
date: Mon, 12 Sep 2022 19:31:28 GMT
age: 2278581
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10034-SJC, cache-bma1658-BMA
x-cache: HIT, HIT
vary: Accept, User-Agent
content-length: 15579
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
142.250.74.74200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP 142.250.74.74:0
File type ASCII text, with very long lines (65451)
Hash 903bc7a7e510f87aa5d0201eb59a0832
ac9aa4dd94cde1bcba9037e94087138b127e41fc
41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 13:30:59 GMT
expires: Fri, 08 Sep 2023 13:30:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 367229
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ec7a5bb8e310f5c9c992cf85832d5445
e32b8e200a79da9008985e8e6c272f35b02581c5
6391e4c68631e272509ade559b8f568b03dd88be1956906332ae584f9faee00a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 4894843dd17150368f9e81305262c361
09c1036ec45f4da92b1749c5b0a76062d32ee681
5242d2bcde6e9f49b38e0749771de0388b9687af78be7b13a27e147b3e38684e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash bd7b5eb635d48acf1428c326eaa892a1
ba9f6c0db831a88b7d6dbdd98f19e76b4b501258
557466a3b642e90e352898073ff23f6a034c3b233e8aee0f0f69cd6ca83d49f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
142.250.74.163200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 17:10:21 GMT
expires: Wed, 06 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 526867
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
142.250.74.163200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 17:10:21 GMT
expires: Wed, 06 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 526867
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 4894843dd17150368f9e81305262c361
09c1036ec45f4da92b1749c5b0a76062d32ee681
5242d2bcde6e9f49b38e0749771de0388b9687af78be7b13a27e147b3e38684e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
quick.vidalytics.com/embeds/dmpsCGvb/mopfwuYpTO7rps1y/loader.min.js
192.229.220.49200 OK 9.9 kB URL HTTP/2 quick.vidalytics.com/embeds/dmpsCGvb/mopfwuYpTO7rps1y/loader.min.js
IP 192.229.220.49:0
File type ASCII text, with very long lines (40710), with no line terminators
Hash afcb9f1498e44fc310e3df51e40a7b3d
52576fb36a988ffce003037df9090ef505a66003
8c7ae5f1722f62b4b81e570cde4908275e302f1f5f287f23d5779c0071c2b906
GET /embeds/dmpsCGvb/mopfwuYpTO7rps1y/loader.min.js HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 3563
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=300, s-maxage=2592000
content-type: application/javascript
date: Mon, 12 Sep 2022 18:32:05 GMT
etag: "afcb9f1498e44fc310e3df51e40a7b3d"
expires: Wed, 12 Oct 2022 18:32:05 GMT
last-modified: Mon, 12 Sep 2022 15:09:10 GMT
server: UploadServer
vary: Accept-Encoding
x-cdn: 3
x-cdn-info: loader
x-goog-generation: 1662995350464409
x-goog-hash: crc32c=OWgGQQ==, md5=r8ufFJjkT8MQ499R5Ap7PQ==
x-goog-metageneration: 1
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 9887
x-guploader-uploadid: ADPycdvLrkVNlntObpIxSKCGTqtmhwRHXrcLMzXQSFmEcQr61bdd3uDO53BhOqiMh8-Z4TfrfKK7jmVJMqNb4hTAEe_Mc0HVMg6F
content-length: 9887
X-Firefox-Spdy: h2
quick.vidalytics.com/embeds/dmpsCGvb/mopfwuYpTO7rps1y/player-dash-mse.min.js
192.229.220.49200 OK 498 kB URL HTTP/2 quick.vidalytics.com/embeds/dmpsCGvb/mopfwuYpTO7rps1y/player-dash-mse.min.js
IP 192.229.220.49:0
File type Unicode text, UTF-8 text, with very long lines (65399)
Size 498 kB (498379 bytes)
Hash 1ebff6afb2daad5ee41f807f0946f738
5c5ee0e2661b6cfb73f433fdff0a3864ffe807b4
b477622eedd1f1f238f9c43ba27c733c3f9cc9c9c2ca9f0b8f51d42c00e40262
GET /embeds/dmpsCGvb/mopfwuYpTO7rps1y/player-dash-mse.min.js HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 12623
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=300, s-maxage=2592000
content-type: application/javascript
date: Mon, 12 Sep 2022 19:31:28 GMT
etag: "1ebff6afb2daad5ee41f807f0946f738"
expires: Wed, 12 Oct 2022 19:31:28 GMT
last-modified: Mon, 12 Sep 2022 15:09:10 GMT
server: ECAcc (ska/F769)
vary: Accept-Encoding
x-cache: HIT
x-cdn: 3
x-goog-generation: 1662995350809755
x-goog-hash: crc32c=P78qrg==, md5=Hr/2r7LarV7kH4B/CUb3OA==
x-goog-metageneration: 1
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 498379
x-guploader-uploadid: ADPycdvJv3qpG2_ot3lAHxVt_CPQH9_mUAuNwbu1SXAHqgSECDYFQ2YyCnHcn2oxGQmMKdMCy6EGr_UyJuCOkskLd0Gb3dK65hxs
content-length: 498379
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 5b2e493088cbef4da7cbf4161150cc49
a29e90ba8f61b488b7b79c50d9ef46bd5df74cd4
f1b687e304daa7395c52b75fbe5c8f96343798d70a8fe2ddfbd422b23aa1e7ab
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 12 Sep 2022 19:31:28 GMT
Server: ECS (dcb/7F15)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mp8gzD5FEwb6sWo66QmlSTTtgoWk00LocjN9k8EqxXr5RwFXDjKcEg==
asset.delmarlaboratories.com/favicon-32x32.png
54.230.111.126200 OK 487 B URL HTTP/2 asset.delmarlaboratories.com/favicon-32x32.png
IP 54.230.111.126:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash edc43bc1a7e600f1148546ab7c55db92
a4a903a95209492f927c6b25d883ab2c5074531c
45265840404b0592d06f88c91a47a8c0b1a59948ba5a0aea3252f051795974e4
GET /favicon-32x32.png HTTP/1.1
Host: asset.delmarlaboratories.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 487
date: Sat, 03 Sep 2022 06:21:08 GMT
last-modified: Sun, 06 Sep 2020 18:41:34 GMT
etag: "edc43bc1a7e600f1148546ab7c55db92"
cache-control: max-age=1296000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -YCggVj2uA3VT-0X-hyqn3uhw5zXB-2aqxQn3hR_nHHg2k--3Yo9Cg==
age: 825021
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 10fd4512a399d46daed91968e476438f
5756e8ad0df6b98779606b1e325b71cc3e8760c3
c130d4b1a415528060712e45854b8397fffb588686c13ce8b89a6e12d2ce95e3
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 12 Sep 2022 19:31:30 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 12 Sep 2022 07:37:00 GMT
Expires: Tue, 13 Sep 2022 07:37:00 GMT
ETag: "5756e8ad0df6b98779606b1e325b71cc3e8760c3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/stream.mpd
192.229.220.49200 OK 4.7 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/stream.mpd
IP 192.229.220.49:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash dccbb14f68233a84bfb9d81c3188d34d
a78c99730705b74efdc5de63e7b73178dae3723b
ea5a40185096e423e93610051d7f3f464e4f14275971bc21af00433bc9f411db
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/stream.mpd HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761282
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: application/dash+xml
date: Mon, 12 Sep 2022 19:31:29 GMT
etag: "dccbb14f68233a84bfb9d81c3188d34d"
expires: Thu, 07 Sep 2023 19:31:29 GMT
last-modified: Mon, 07 Feb 2022 15:23:15 GMT
server: ECAcc (ska/F739)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247395895108
x-goog-hash: crc32c=Kp9+xA==, md5=3MuxT2gjOoS/udgcMYjTTQ==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4698
x-guploader-uploadid: ADPycdvDhfHZPShdXfbgPxwhtbcj8BifJRCzJjH2ZFM8rMgZ-M6ojOFWllm5eBuqsjDRhvAmLJJ149SCbS23vb2c86s
content-length: 4698
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/licensing
35.190.27.197200 OK 117 B URL HTTP/2 analytics-ingress-global.bitmovin.com/licensing
IP 35.190.27.197:0
File type JSON data\012- , ASCII text, with no line terminators
Hash f90d2c53623621471228392bf3047e2a
b9f0bb5e8fd5fd97cb47a25edb9b6950ad51627e
5c22e577292cc557786ad7c531cb0d73bfefd43e006865f2945bca9c04d2b700
POST /licensing HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 107
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: v1.53.0
date: Mon, 12 Sep 2022 19:31:29 GMT
content-type: application/json
content-length: 117
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4791
Expires: Mon, 12 Sep 2022 20:51:20 GMT
Date: Mon, 12 Sep 2022 19:31:29 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4791
Expires: Mon, 12 Sep 2022 20:51:20 GMT
Date: Mon, 12 Sep 2022 19:31:29 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4791
Expires: Mon, 12 Sep 2022 20:51:20 GMT
Date: Mon, 12 Sep 2022 19:31:29 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4791
Expires: Mon, 12 Sep 2022 20:51:20 GMT
Date: Mon, 12 Sep 2022 19:31:29 GMT
Connection: keep-alive
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/640x640_vp9_280624/init.mp4
192.229.220.49200 OK 459 B URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/640x640_vp9_280624/init.mp4
IP 192.229.220.49:0
File type WebM\012- EBML file, creator webmB\20\012- data
Hash e43b722e6d01eaba209df219042bc0d7
c65403e2bc4ea297a592e6720d1f5fa3142edf43
8ae5f2609d81c3d3b84e0a1063067065487d53b970e633e1d7de26105f2c8a77
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/640x640_vp9_280624/init.mp4 HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18592775
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:29 GMT
etag: "e43b722e6d01eaba209df219042bc0d7"
expires: Thu, 07 Sep 2023 19:31:29 GMT
last-modified: Mon, 07 Feb 2022 15:19:22 GMT
server: ECAcc (ska/F7B5)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247162314188
x-goog-hash: crc32c=TiPW2g==, md5=5DtyLm0B6rognfIZBCvA1w==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 459
x-guploader-uploadid: ADPycdugWTGMyd7r-KxwyO5rv2rRgfZ5tZLgjKZ1SmlyAw26sy9z9PPga4oy7v8QACw9k3TD0G8BvRp8c02GGR5DsIdVW2Nq2w
content-length: 459
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7ccc33ae0c85a906f2c17db281ec790
1904722d70348235d5472c54f888d2b4b991e2aa
f48edc03624f582b05b596694b76bd784f85eb9f2ca5dd025bbea9cc2ff1f096
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6999
x-amzn-requestid: 61e3e817-fb62-47c7-b938-2dfc6a134622
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO1mlG3XIAMFo5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3629-37c2c8982c4ccf891875c59a;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:00:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: S2TR552YpZeEbhTSAn4vdXexYpvR4Lrr-LaJmfNd7LnO0L4QM8w-Dg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 03:38:55 GMT
age: 57154
etag: "1904722d70348235d5472c54f888d2b4b991e2aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c14088c4ca0d576e087feed41b7f1565
172b23f2ef39b6c3fdebb5441b10a95712206d0a
2699efa811ceac5420f5bd26c35a6f48b51854e29cbce7cbb62efb613db7d6b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8799
x-amzn-requestid: 1bcdf387-9ad2-449a-861e-3352b1744d23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUI-0G6vIAMFgbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e552b-42aa46af6315148106c4fdee;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:37:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: g2mxKK8L5T4YkeD8JqNUuV_KfsIq8ypRMvxhsyzSZSEIP4gDl4zLVQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:41:51 GMT
age: 78578
etag: "172b23f2ef39b6c3fdebb5441b10a95712206d0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6174529fff57758e958da5432344962f
05ec2076b32398d60ee77fab8c14345bc7dfe647
65284a76355864efa944dff5033575013c6d74a019a7b731e0236603f2f656a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9466
x-amzn-requestid: ba3f7eac-61c9-4b5f-ae8a-b372906a25ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YOTeoHMKoAMFr5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bff90-1e70e2c444242a2d46387986;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 03:08:00 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: u_jETr8miiFyuhq7R09yb0lAP-hUv_6eTRV81Xzd9gSqU31VXwC9CQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 03:15:48 GMT
age: 58541
etag: "05ec2076b32398d60ee77fab8c14345bc7dfe647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
35.190.27.197204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP 35.190.27.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1234
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Mon, 12 Sep 2022 19:31:29 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e407da4d97d497925b1ab523fd416787
166741631fb93d109b18dde6d316b3fa3276aa8f
707460c02438da6114e35e0b6569d42c0f3fb747f8cb51002f4d52bedbcffa61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8485
x-amzn-requestid: a56c9282-2786-4ae7-9fc2-0468bcc820a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_FM1oAMFZ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-753cc4f121c9b77d22bb82b5;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2jR7F56GE_qqbRBWjNDiDBgWbCYv-Ac6kvC1LI0HciQkKGTeNDYlyw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:57:43 GMT
age: 77626
etag: "166741631fb93d109b18dde6d316b3fa3276aa8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8625e0707046e7a3715a8dbb40b1cae2
0f44ee871ad9d0a0ddd07d0c87d54f7e72b56f78
abc4c12561be08897341d9c8104c30a289357c0907e55c46895f7fb6afb2f75d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13568
x-amzn-requestid: a2fadcbe-350b-4a06-9f9c-ee2da40bb285
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YEESeHA_oAMFjCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317e742-4740aa3f4ebd479e7a4886ed;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 00:35:14 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: jbF2ZaJUhIoJV-o4f6iviFyUnoDW4R0KHTfC5NySmITnsLbD5iJrPQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 14:22:45 GMT
age: 18524
etag: "0f44ee871ad9d0a0ddd07d0c87d54f7e72b56f78"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 239262b6ab17cb19414c35cd4f761092
48eddcf9838e980e67cc8f9cbb05b475df2f0331
cd27cbce632d769288d9c33c5c8e887ba02df5677f10f7a6d03139b590ba24b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9815
x-amzn-requestid: 89243e57-94eb-4c6b-903f-aa01df030ecc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIxnEAjoAMF_Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54d6-199403e2695b214711f5117f;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: NKM6RRhJ5AuRF4NKSyBO6-KMkd1UGaw3DuZBkBao_8fzzpkMeDrn0w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:55:40 GMT
etag: "48eddcf9838e980e67cc8f9cbb05b475df2f0331"
content-type: image/jpeg
age: 77749
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/640x640_vp9_280624/s_0.webm
192.229.220.49200 OK 138 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/640x640_vp9_280624/s_0.webm
IP 192.229.220.49:0
Size 138 kB (138294 bytes)
Hash 845a0feb0837167c6682c729b31858cb
a0b543bfbcd29d15a2699e0991ec0422c81ce809
d775a12bca59ba82dfa96b813ddce7911d1b97bb02bd48ef3e66584826ddd0f2
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/640x640_vp9_280624/s_0.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18592774
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:29 GMT
etag: "845a0feb0837167c6682c729b31858cb"
expires: Thu, 07 Sep 2023 19:31:29 GMT
last-modified: Mon, 07 Feb 2022 15:19:22 GMT
server: ECAcc (ska/F68B)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247162610204
x-goog-hash: crc32c=+rwptQ==, md5=hFoP6wg3FnxmgscpsxhYyw==
x-goog-metageneration: 3
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 138294
x-guploader-uploadid: ADPycdtYdg6j3GDx9PseHNAkDdi6pjhOlfrX9r28rS8_MbRgqTwNZN7RyRGpJf0ssaSuR9KbVnBcuUaB1o0cB0lX-4i-zJ7nIA
content-length: 138294
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/init.mp4
192.229.220.49200 OK 459 B URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/init.mp4
IP 192.229.220.49:0
File type WebM\012- EBML file, creator webmB\20\012- data
Hash b9018e8eaad0134a8f805ade9afd6717
2ef784c7ce8d1b21ce2e8cdbdc4383bb0b89a792
5da684b4cc3d08e64bc6f8935bcf14f0c2b74a0e95509ac57728d3b96571e9e2
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/init.mp4 HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761282
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:29 GMT
etag: "b9018e8eaad0134a8f805ade9afd6717"
expires: Thu, 07 Sep 2023 19:31:29 GMT
last-modified: Mon, 07 Feb 2022 15:19:29 GMT
server: ECAcc (ska/F6A9)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247169271957
x-goog-hash: crc32c=LuCmSw==, md5=uQGOjqrQE0qPgFremv1nFw==
x-goog-metageneration: 3
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 459
x-guploader-uploadid: ADPycdvcs_IO64m5ZtkbBTsoNB2DN3h-Blhr2RyOaxwpy9M3wENqylCWxNo75O7S56fmbTJDTPaFId5rJd1xjHcuD14
content-length: 459
X-Firefox-Spdy: h2
licensing.bitmovin.com/impression
35.227.229.24204 No Content 0 B URL HTTP/2 licensing.bitmovin.com/impression
IP 35.227.229.24:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /impression HTTP/1.1
Host: licensing.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 116
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
content-type: application/json
date: Mon, 12 Sep 2022 19:31:29 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/7ZQOjSoIsHk
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/7ZQOjSoIsHk
IP 142.250.74.3:0
Hash 7c0652d464d4255ff56e4067ea66140c
9f61fe403e7ed113bc5abd7e632560e0d61abdf9
9830353587334aa24806a8a76ffe18e905c328fcffe34cfd7c3435e9f6eb242b
POST /s/gts1d4/7ZQOjSoIsHk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 19:31:29 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 10fd4512a399d46daed91968e476438f
5756e8ad0df6b98779606b1e325b71cc3e8760c3
c130d4b1a415528060712e45854b8397fffb588686c13ce8b89a6e12d2ce95e3
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 12 Sep 2022 19:31:30 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 12 Sep 2022 07:37:00 GMT
Expires: Tue, 13 Sep 2022 07:37:00 GMT
ETag: "5756e8ad0df6b98779606b1e325b71cc3e8760c3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
region1.google-analytics.com/g/collect?v=2&tid=G-2SBYK8C9KH>m=2oe970&_p=1642486796&cid=336398453.1663011077&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663011077&sct=1&seg=0&dl=https%3A%2F%2Fnat.ceraliftskin.com%2F&dt=Get%20CeraLift&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-2SBYK8C9KH>m=2oe970&_p=1642486796&cid=336398453.1663011077&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663011077&sct=1&seg=0&dl=https%3A%2F%2Fnat.ceraliftskin.com%2F&dt=Get%20CeraLift&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-2SBYK8C9KH>m=2oe970&_p=1642486796&cid=336398453.1663011077&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663011077&sct=1&seg=0&dl=https%3A%2F%2Fnat.ceraliftskin.com%2F&dt=Get%20CeraLift&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://nat.ceraliftskin.com
date: Mon, 12 Sep 2022 19:31:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_1.webm
192.229.220.49200 OK 489 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_1.webm
IP 192.229.220.49:0
Size 489 kB (488618 bytes)
Hash 6508015ab282016e208698fb0e5bffcc
f41e210afa6951d1962b31dc464b410ac78a479b
1b86c1aa942fd03591e5d327cbbf2ca167d321b79804b5fec93d98d24689e6c6
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_1.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761282
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "6508015ab282016e208698fb0e5bffcc"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:19:43 GMT
server: ECAcc (ska/F6F5)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247183390576
x-goog-hash: crc32c=iiCQfA==, md5=ZQgBWrKCAW4ghpj7Dlv/zA==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 488618
x-guploader-uploadid: ADPycdse3nAscFBA6aWMeyiIHV6WmdJDvXIpmuycyb7D2VlaycLRDwe5sFozfsfHS_iVlMbCS97RhnLKLx48v7XazJc
content-length: 488618
X-Firefox-Spdy: h2
stream.ceraliftskin.com/g/collect?v=2&tid=G-2SBYK8C9KH>m=2oe970&_p=1642486796&cid=336398453.1663011077&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_z=ccd.v9B&sid=1663011077&sct=1&seg=1&dl=https%3A%2F%2Fnat.ceraliftskin.com%2F&dt=Get%20CeraLift&_s=2&richsstsse
216.239.36.21200 OK 90 B URL HTTP/2 stream.ceraliftskin.com/g/collect?v=2&tid=G-2SBYK8C9KH>m=2oe970&_p=1642486796&cid=336398453.1663011077&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_z=ccd.v9B&sid=1663011077&sct=1&seg=1&dl=https%3A%2F%2Fnat.ceraliftskin.com%2F&dt=Get%20CeraLift&_s=2&richsstsse
IP 216.239.36.21:0
Hash 169015d9a1c4742ef1b19ab13dfac200
5a31df9e8f8d370f893c6f087c5974cb3e4ddd7f
8dfbc19663da6a43557027f2e6d3e94066517ce50334a83f410e0a4853935d40
POST /g/collect?v=2&tid=G-2SBYK8C9KH>m=2oe970&_p=1642486796&cid=336398453.1663011077&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_z=ccd.v9B&sid=1663011077&sct=1&seg=1&dl=https%3A%2F%2Fnat.ceraliftskin.com%2F&dt=Get%20CeraLift&_s=2&richsstsse HTTP/1.1
Host: stream.ceraliftskin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 76
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Cookie: _ga_2SBYK8C9KH=GS1.1.1663011077.1.1.1663011077.0.0.0; _ga=GA1.1.336398453.1663011077
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/plain
vary: Accept-Encoding
set-cookie: FPLC=3WAHH4rlAiUWsIhs5%2F%2BMKDCSabguhQb4EIAxJ8GxreQEEoQ0Ase56dwxBOe8vBENF8ZtUhZdmaGFuUZhH%2BkRKLM26AggepzmWaTHglR2xBU36PW3gTLLexTv0LWnHQ%3D%3D; Max-Age=72000; Domain=ceraliftskin.com; Path=/; Secure
FPID=FPID2.2.Z98%2F5Pk5oAXQ6A6nPuoA4UBVn7h70CP53blFQL3GHbQ%3D.1663011077; Max-Age=63072000; Domain=ceraliftskin.com; Path=/; Secure; HttpOnly
cache-control: no-cache
x-content-type-options: nosniff
access-control-allow-origin: https://nat.ceraliftskin.com
access-control-allow-credentials: true
content-encoding: gzip
x-cloud-trace-context: c749a44f11d8851e7d3ae084b0c0826e;o=1
date: Mon, 12 Sep 2022 19:31:30 GMT
server: Google Frontend
content-length: 90
expires: Mon, 12 Sep 2022 19:31:30 GMT
X-Firefox-Spdy: h2
stats.vidalytics.com/awesome-log?cid=dmpsCGvb
34.107.158.93200 OK 43 B URL HTTP/2 stats.vidalytics.com/awesome-log?cid=dmpsCGvb
IP 34.107.158.93:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /awesome-log?cid=dmpsCGvb HTTP/1.1
Host: stats.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: istio-envoy
date: Mon, 12 Sep 2022 19:31:30 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, public, max-age=2592000
etag: "dmpsCGvb/3QFXJ7HNt0hfZchH"
access-control-expose-headers: Access-Control-Allow-Origin, Cache-Control, ETag, etag
access-control-allow-headers: Accept, Content-Type, Origin, Range, X-Requested-With
access-control-allow-methods: GET, POST, PUT, OPTIONS
x-envoy-upstream-service-time: 673
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_2.webm
192.229.220.49200 OK 499 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_2.webm
IP 192.229.220.49:0
Size 499 kB (499168 bytes)
Hash f97eb15cf5f2b1db81f40483814eb284
00d5e6a2887234ab1998ca52a1ba2d884c729d87
3869b5be17bb2aa9f919403e9b7eacbd03695c32d0945acf7c11282a949f596b
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_2.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761281
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "f97eb15cf5f2b1db81f40483814eb284"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:19:42 GMT
server: ECAcc (ska/F6BC)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247182808872
x-goog-hash: crc32c=TI5DJw==, md5=+X6xXPXysduB9ASDgU6yhA==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 499168
x-guploader-uploadid: ADPycdtpPMHs8VApYJ-Vjy017aToXxW-Ikyo5Z63zDjAEwF-awfzJhtkjnYQCLZOyWksNPLErO5kIvEqWXxANy0ANr0
content-length: 499168
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 48edf2e08784806dfe70f3f972c5e0c7
07ab5052df19a2f509c5f188ab674533fa9838a3
7f1e3c903d2792e7ff18d66e78201627cd0488ea24fddbe6e449598eb11c354e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 19:31:30 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 12 Sep 2022 12:14:57 GMT
Expires: Mon, 19 Sep 2022 12:14:56 GMT
Etag: "07ab5052df19a2f509c5f188ab674533fa9838a3"
Cache-Control: max-age=578005,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 749b10514d69b4e8-OSL
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_3.webm
192.229.220.49200 OK 499 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_3.webm
IP 192.229.220.49:0
Size 499 kB (498882 bytes)
Hash 029054a4286a960afe15613fbcf867ec
a7f72a97b5b29f64fc7807643e60fc36f6a9b7b3
1b03fd62e47c3043eca8d9c97758c6267d644c5b19295fef2708adf059befd84
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_3.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761280
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "029054a4286a960afe15613fbcf867ec"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:19:44 GMT
server: ECAcc (ska/F6BB)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247184219748
x-goog-hash: crc32c=qE7CPQ==, md5=ApBUpChqlgr+FWE/vPhn7A==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 498882
x-guploader-uploadid: ADPycdtuXXAkPMV_oC2ZSKv4pEAtvN9Q1Lu0Nw7zkjS9gheG36vXW7Xx5Aa9kRs-qY3qaVHVldjZAfq74i69P9PviPA
content-length: 498882
X-Firefox-Spdy: h2
stats.vidalytics.com/scribe
34.107.158.93200 OK 16 B URL HTTP/2 stats.vidalytics.com/scribe
IP 34.107.158.93:0
File type JSON data\012- , ASCII text, with no line terminators
Hash a1cbd35d4488ac8cc6f959d4c633dc37
11844023759429ec785ae1c18e6a9c69803ee2bd
707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c
POST /scribe HTTP/1.1
Host: stats.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 336
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: POST,OPTIONS
content-type: application/json
date: Mon, 12 Sep 2022 19:31:30 GMT
content-length: 16
x-envoy-upstream-service-time: 1
server: istio-envoy
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_4.webm
192.229.220.49200 OK 499 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_4.webm
IP 192.229.220.49:0
Size 499 kB (499278 bytes)
Hash 43aa733e50badcb0f3b5501f66718003
744b6ff909fc07b62c5a79dd13b4deb007aab4bb
5d8152f126f3f5838ce4225433b49d7ca549862445d67723a726d50764cded3b
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_4.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761279
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "43aa733e50badcb0f3b5501f66718003"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:19:44 GMT
server: ECAcc (ska/F6E8)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247184736993
x-goog-hash: crc32c=RFyaIQ==, md5=Q6pzPlC63LDztVAfZnGAAw==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 499278
x-guploader-uploadid: ADPycdsE6kaAjBrrgB8nfTMAi9PBKBRfhQ7kO_MNZZsMewG7Q7VIybsSVNvnnbz82cGHRORre33ojN5wORbGH8Ub1gk9kPw42Q
content-length: 499278
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
35.190.27.197204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP 35.190.27.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1825
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Mon, 12 Sep 2022 19:31:29 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_5.webm
192.229.220.49200 OK 501 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_5.webm
IP 192.229.220.49:0
Size 501 kB (501006 bytes)
Hash 1f0ca21c0cc66cf137a23dd7a35c54d8
315b656a7db26a6d907cc2ba6134f2a1e0277b20
a55a733fee5f90dc49fea0f68166c172938df2ae55e5a584f6256ebffa8fecff
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_5.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761278
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "1f0ca21c0cc66cf137a23dd7a35c54d8"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:20:26 GMT
server: ECAcc (ska/F6C1)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247226689123
x-goog-hash: crc32c=YcjE/A==, md5=HwyiHAzGbPE3oj3Xo1xU2A==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 501006
x-guploader-uploadid: ADPycduyMrIMD1Q7rbc1Jp7Lvo5sgpNx2iVYufoM7o14FvYlf-DZ--Aag1Y8fJe91gyqsMc2hg7DjtTNPi2WsRl-nuY
content-length: 501006
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
35.190.27.197204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP 35.190.27.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1779
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Mon, 12 Sep 2022 19:31:29 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
35.190.27.197204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP 35.190.27.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1787
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Mon, 12 Sep 2022 19:31:29 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_6.webm
192.229.220.49200 OK 495 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_6.webm
IP 192.229.220.49:0
Size 495 kB (494989 bytes)
Hash 3039a1dbc80997796b9ef5fe38d8aa5b
b16bb9f09240b5487d5866acac958cf940ab9b6c
cb1691d6ed4b6bc3a70f0b6f5b63902ee647a540ccac3f0daa0d63460a94b26f
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_6.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761278
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "3039a1dbc80997796b9ef5fe38d8aa5b"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:20:23 GMT
server: ECAcc (ska/F699)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247223712656
x-goog-hash: crc32c=WWhmUA==, md5=MDmh28gJl3lrnvX+ONiqWw==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 494989
x-guploader-uploadid: ADPycduA41vYYbGyvkCn88Nwnf1BNyhq8wKqDBZOIe6RHsbp4-BRps-i_DjJPt88z-JgZhIkhBayI-wHjXcq-YLteL0
content-length: 494989
X-Firefox-Spdy: h2
stats.vidalytics.com/scribe
34.107.158.93200 OK 16 B URL HTTP/2 stats.vidalytics.com/scribe
IP 34.107.158.93:0
File type JSON data\012- , ASCII text, with no line terminators
Hash a1cbd35d4488ac8cc6f959d4c633dc37
11844023759429ec785ae1c18e6a9c69803ee2bd
707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c
POST /scribe HTTP/1.1
Host: stats.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 469
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: POST,OPTIONS
content-type: application/json
date: Mon, 12 Sep 2022 19:31:30 GMT
content-length: 16
x-envoy-upstream-service-time: 1
server: istio-envoy
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_7.webm
192.229.220.49200 OK 496 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_7.webm
IP 192.229.220.49:0
Size 496 kB (495775 bytes)
Hash 10224529b047d2cb410903d72077809f
a9bc73579a5ca671cd105e7504577466de8df3ad
ef2e65dd012a27d7cba3407abd0e685f942976d9bdbf7f8cad524eda3830378c
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_7.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761277
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "10224529b047d2cb410903d72077809f"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:20:32 GMT
server: ECAcc (ska/F751)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247232192328
x-goog-hash: crc32c=MMzu3Q==, md5=ECJFKbBH0stBCQPXIHeAnw==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 495775
x-guploader-uploadid: ADPycduSUu1mvagnbACXMnRZLhHbpz8bFWTvSh5x2Mbn0pBUfCVzHsCMeGuKiG4QClGL3Y7XM_Dr6a0WqXViHuWwpHw
content-length: 495775
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_8.webm
192.229.220.49200 OK 500 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_8.webm
IP 192.229.220.49:0
Size 500 kB (499604 bytes)
Hash f57ecaa22e7ce488d84418f7d5665767
e49cc53bbd792a943feab35eff09a275a3d84000
75031275dfce9fe1eeb6c2828e19e89b19df2e83fd24c1b0ab61ad2c90e5d97f
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_8.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761276
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "f57ecaa22e7ce488d84418f7d5665767"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:20:24 GMT
server: ECAcc (ska/F7B9)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247224054393
x-goog-hash: crc32c=j1wxtA==, md5=9X7Koi585IjYRBj31WZXZw==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 499604
x-guploader-uploadid: ADPycdtx50Jvtu5LK1cAMiPv386HBhswWBrh4yxxlAh9yq_fpe391-H5QjI-lFdaUWCqVLDD067_7DJ4wdXpS7eBW5g
content-length: 499604
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_9.webm
192.229.220.49200 OK 500 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_9.webm
IP 192.229.220.49:0
Size 500 kB (500428 bytes)
Hash 18d35b13621dbc732f34a566d1c8c0a3
3cf2513ed237e87a280361d5bb566cb33ed571c9
285eb1975327396360be35f60d295c050d8db29204fb2497bd15ed31de67b60e
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_9.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761275
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "18d35b13621dbc732f34a566d1c8c0a3"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:20:27 GMT
server: ECAcc (ska/F6F3)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247227842591
x-goog-hash: crc32c=FIMzSA==, md5=GNNbE2IdvHMvNKVm0cjAow==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 500428
x-guploader-uploadid: ADPycdsZciwDMP39cKRi7HpqlSXBV6RLtGgAYccyPJzor9-vvyXTqqB5_FUmgJD3sFAnMMtpvLd3BheOuebmCGAuvYE
content-length: 500428
X-Firefox-Spdy: h2
licensing.bitmovin.com/licensing
35.227.229.24200 OK 165 B URL HTTP/2 licensing.bitmovin.com/licensing
IP 35.227.229.24:0
File type JSON data\012- , ASCII text, with no line terminators
Hash bad32d07dc1ad9e3d334785067afbf34
653f8f612c6646daae0122b3b27e2c11486f86a4
41d9103b84690ae5330f1de907c91f6964d58cbb449887cf1bb0e13475dc0638
POST /licensing HTTP/1.1
Host: licensing.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 151
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
content-type: application/json
date: Mon, 12 Sep 2022 19:31:30 GMT
content-length: 165
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_10.webm
192.229.220.49200 OK 499 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_10.webm
IP 192.229.220.49:0
Size 499 kB (498824 bytes)
Hash 77c544bb230d3066b38449482842c826
6a9ff0b6f3ff6f80746b174a719ed60a6961b9d4
67273c6ac41313bb61bd51bced5d0846c73a548d4b2ce1beba24ad8295f1e898
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_10.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761274
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:30 GMT
etag: "77c544bb230d3066b38449482842c826"
expires: Thu, 07 Sep 2023 19:31:30 GMT
last-modified: Mon, 07 Feb 2022 15:19:47 GMT
server: ECAcc (ska/F79B)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247187003169
x-goog-hash: crc32c=5S+3Wg==, md5=d8VEuyMNMGazhElIKELIJg==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 498824
x-guploader-uploadid: ADPycduNpyMks4hMGQx4kKl3BitILtjUB_yo7Hgrg3TXfs_QSDM4ivo4Ger-6EblJU58G9nn_EyaxNggPr2wdGFySGU
content-length: 498824
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 10fd4512a399d46daed91968e476438f
5756e8ad0df6b98779606b1e325b71cc3e8760c3
c130d4b1a415528060712e45854b8397fffb588686c13ce8b89a6e12d2ce95e3
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 12 Sep 2022 19:31:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 12 Sep 2022 07:37:00 GMT
Expires: Tue, 13 Sep 2022 07:37:00 GMT
ETag: "5756e8ad0df6b98779606b1e325b71cc3e8760c3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_11.webm
192.229.220.49200 OK 498 kB URL HTTP/2 quick.vidalytics.com/video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_11.webm
IP 192.229.220.49:0
Size 498 kB (498338 bytes)
Hash aff9b3ed3ed1b524c8d0cfa80acc8964
2db1d0bd8b15ebcbd82250c7c138095460ad3c34
40ee3bbbd4268b46841a5fe5ba5c9ff3ec919b685c474f15acdff217d36bff5e
GET /video/dmpsCGvb/HvDVXT9QvX8kytJv/56996/48265/webm/video/1080x1080_vp9_1000000/s_11.webm HTTP/1.1
Host: quick.vidalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type, x-cdn, x-cdn-info
age: 18761272
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: public, max-age=31104000
content-type: video/mp4
date: Mon, 12 Sep 2022 19:31:34 GMT
etag: "aff9b3ed3ed1b524c8d0cfa80acc8964"
expires: Thu, 07 Sep 2023 19:31:34 GMT
last-modified: Mon, 07 Feb 2022 15:19:42 GMT
server: ECAcc (ska/F6CD)
x-cache: HIT
x-cdn: 3
x-goog-generation: 1644247182527988
x-goog-hash: crc32c=Hmfmaw==, md5=r/mz7T7RtSTI0M+oCsyJZA==
x-goog-metageneration: 2
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 498338
x-guploader-uploadid: ADPycdt6OiC-f_2dGZGus1TKw7uEs8kjXRxdZC0WVaHmSYUQxL-mIdTZbdYGOyh0n2Z7FthTqDMCrhnaXSMgKR4COcM
content-length: 498338
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
35.190.27.197204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP 35.190.27.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1894
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Mon, 12 Sep 2022 19:31:33 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
35.190.27.197204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP 35.190.27.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1803
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Mon, 12 Sep 2022 19:31:33 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7b5d084-5c6a-4cec-9577-bb8c3a155234.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7b5d084-5c6a-4cec-9577-bb8c3a155234.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5bdaf9b909a8b8fd2f02eeb8930e2d19
3df316da4ed46403a50a0cdc688613cb1334da0b
177e68bddbfdafe455c5aa1aad9c0654c83ab91500043cbc366d1397aea53e22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7b5d084-5c6a-4cec-9577-bb8c3a155234.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10363
x-amzn-requestid: ce8239d7-9838-4fd9-9a2a-d788b2d4205b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUKcpGepIAMFvuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e5783-38cb8ddf79347e4e7fbb1041;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:47:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cms2j1USzEq1FpNcXq9W_i3WirZXI0ElxYjQYEznccjmNhGDblVVbw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:55:55 GMT
age: 77741
etag: "3df316da4ed46403a50a0cdc688613cb1334da0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
35.190.27.197204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP 35.190.27.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1837
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Mon, 12 Sep 2022 19:31:36 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
analytics-ingress-global.bitmovin.com/analytics
35.190.27.197204 No Content 0 B URL HTTP/2 analytics-ingress-global.bitmovin.com/analytics
IP 35.190.27.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics HTTP/1.1
Host: analytics-ingress-global.bitmovin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1796
Origin: https://nat.ceraliftskin.com
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: v1.53.0
date: Mon, 12 Sep 2022 19:31:35 GMT
content-type: application/json
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
nat.ceraliftskin.com/?r=9a8c35d0e61441d48b271f05977aedbe&a=193692&o=122&s1=3451&s2=015b644ddd70457f8aead113da3b3f4b&s3=&s4=
3.101.115.243302 Found 0 B URL HTTP/1.1 nat.ceraliftskin.com/?r=9a8c35d0e61441d48b271f05977aedbe&a=193692&o=122&s1=3451&s2=015b644ddd70457f8aead113da3b3f4b&s3=&s4=
IP 3.101.115.243:0
GET /?r=9a8c35d0e61441d48b271f05977aedbe&a=193692&o=122&s1=3451&s2=015b644ddd70457f8aead113da3b3f4b&s3=&s4= HTTP/1.1
Host: nat.ceraliftskin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
X-DNS-Prefetch-Control: off
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP 8.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Location: https://nat.ceraliftskin.com/
Vary: Accept, Accept-Encoding
Content-Type: text/html; charset=utf-8
Content-Length: 102
Set-Cookie: esid=s%3AhHhysZRiST-AaPY-cvBu5GbO-3BLqt1N.WXx8yA3By6SQBDWuN5oEPm5EWbeb2mwu1L7iQMKXHDI; Path=/; HttpOnly
Date: Mon, 12 Sep 2022 19:31:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5
fonts.googleapis.com/css2?family=PT+Sans:wght@400;700&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=PT+Sans:wght@400;700&display=swap
IP 142.250.74.10:0
GET /css2?family=PT+Sans:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Sep 2022 19:31:28 GMT
date: Mon, 12 Sep 2022 19:31:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;1,100;1,300;1,400;1,700&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;1,100;1,300;1,400;1,700&display=swap
IP 142.250.74.10:0
GET /css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;1,100;1,300;1,400;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nat.ceraliftskin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Sep 2022 19:31:28 GMT
date: Mon, 12 Sep 2022 19:31:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2