r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19105
Expires: Tue, 15 Nov 2022 13:24:04 GMT
Date: Tue, 15 Nov 2022 08:05:39 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 832aecaba9f06ee2d39d4d4bea65f13c
7195d6ffadfdbc6fc8e92c63ae28d4a3038a72dc
a437509314a97065de6c7b9e5e2b4b61f0234b45f5f5bf2649cbdf499577bfd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3602
Cache-Control: max-age=98740
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:39 GMT
Etag: "637218f5-1d7"
Expires: Wed, 16 Nov 2022 11:31:19 GMT
Last-Modified: Mon, 14 Nov 2022 10:31:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 15 Nov 2022 07:44:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1276
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c15cef160d1514fc977ed4c4e97086c
ffe4ce3199658a1fc7a45d1607df40ef3911621d
db1a82d8a2bacc0257b87efec0c365c1b769700fa27ce928321e082505f1d72a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB1A82D8A2BACC0257B87EFEC0C365C1B769700FA27CE928321E082505F1D72A"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7887
Expires: Tue, 15 Nov 2022 10:17:07 GMT
Date: Tue, 15 Nov 2022 08:05:40 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ynwxYm///9BSf4LmE3mDFXk6hmtJL71ZNBKBHXqJ8NFLYR6GyL7vTPfGe0G5XFLuXb2nHLOmj0Q=
x-amz-request-id: 3TD0K6VG5SFERPPV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 15 Nov 2022 07:14:10 GMT
age: 3090
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
colleprimavera.com/
200 OK 8.8 kB IP
ASN #39729 Register S.p.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1945), with CRLF, LF line terminators
Hash c37ec34494d1553e5b01a333d97c2e91
bc379a189d155e93e097b092e8c9cc9934caacee
c051d1ab9345e727673e74e0dc1b6415e34e0ec57c0e9110baef7d3a20ff3f65
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:39 GMT
Server: Apache
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:39 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=90
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
Content-Language: it
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 08:05:40 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
colleprimavera.com/common_solswv1/css/photogallery.css
200 OK 1.5 kB URL HTTP/1.1 colleprimavera.com/common_solswv1/css/photogallery.css
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (5672), with no line terminators
Hash 540e1e7c5398e97f5aed9895833fff5f
d0d3dfc02e1d4c678847faafd19b540273d04189
c4d023fa4360bff6cce4d12a442fb63ff171b2ea3c515dd7ca18c9244baa12f0
GET /common_solswv1/css/photogallery.css HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Wed, 23 Nov 2016 11:00:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1470
Keep-Alive: timeout=2, max=90
Connection: Keep-Alive
Content-Type: text/css
Content-Language: it
colleprimavera.com/common_solswv1/js/swfobject.js
200 OK 3.9 kB URL HTTP/1.1 colleprimavera.com/common_solswv1/js/swfobject.js
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (10071)
Hash be82faf5f64b79488d7c3fe9b195344e
40c79774a1d8cf05afab0f20526d99539b1f132c
143e1627cb74f60210c12201bfdc3ad5ae3724dadf0f202060d3a42945685c25
Analyzer Verdict Alert fortinet Phishing
GET /common_solswv1/js/swfobject.js HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 08 Sep 2015 13:06:45 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Content-Type: application/javascript
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3944
Keep-Alive: timeout=2, max=89
Connection: Keep-Alive
colleprimavera.com/common_solswv1/css/framework_old_tmpl.css
200 OK 965 B URL HTTP/1.1 colleprimavera.com/common_solswv1/css/framework_old_tmpl.css
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (2672), with no line terminators
Hash 31f1071ab761eeb8b9ce951d6f5b6803
9a923e07bdb458071f5e89fb30a857fa73ac3e7f
ffd08db2c0ca63fa3170998d84ad01bb42ea4dac00201b23543014aed5253fea
GET /common_solswv1/css/framework_old_tmpl.css HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Thu, 28 Sep 2017 07:00:34 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 965
Keep-Alive: timeout=2, max=89
Connection: Keep-Alive
Content-Type: text/css
Content-Language: it
colleprimavera.com/common_solswv1/css/framework_global.css
200 OK 605 B URL HTTP/1.1 colleprimavera.com/common_solswv1/css/framework_global.css
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (1567), with no line terminators
Hash 75429fb06e5d6ff96df27570d7722ec6
2a12233cd6b689df4d8577126e81ba27047e177c
32aa0e64ae2bd3780d29d3e21cd58c0ed94d14678a637fd8b9644de4032e1dea
GET /common_solswv1/css/framework_global.css HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Wed, 23 Nov 2016 11:00:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 605
Keep-Alive: timeout=2, max=88
Connection: Keep-Alive
Content-Type: text/css
Content-Language: it
colleprimavera.com/common_solswv1/js/highslide_last/highslide.css
200 OK 2.8 kB URL HTTP/1.1 colleprimavera.com/common_solswv1/js/highslide_last/highslide.css
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (303)
Hash d39c90718103462f79d8cf1271d6d049
a6c857a1d90bc4fd59573f2b657e6a165652792f
01aae3e75fc76aa49a9447f6fc523ec7a838cdff3333f93686e9514ca156204b
GET /common_solswv1/js/highslide_last/highslide.css HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Wed, 28 Oct 2015 10:38:32 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Content-Type: text/css
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2809
Keep-Alive: timeout=2, max=90
Connection: Keep-Alive
colleprimavera.com/1/css/style.css
200 OK 4.2 kB URL HTTP/1.1 colleprimavera.com/1/css/style.css
IP
ASN #39729 Register S.p.A.
File type ASCII text, with CRLF line terminators
Hash 2cde5cf7fc5589c3557ab459f9f38ebb
1a1f4224737843bee0bea3b1127d1a699d732d31
b84925e7a4d607bcf1ee5a7cb7890ae760fb3961db0e23e5987831065a137f5b
GET /1/css/style.css HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:54:01 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4225
Keep-Alive: timeout=2, max=88
Connection: Keep-Alive
Content-Type: text/css
Content-Language: it
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
colleprimavera.com/common_solswv1/js/highslide_last/highslide-full.packed.js
200 OK 22 kB URL HTTP/1.1 colleprimavera.com/common_solswv1/js/highslide_last/highslide-full.packed.js
IP
ASN #39729 Register S.p.A.
File type Unicode text, UTF-8 text, with very long lines (47647), with CRLF, LF line terminators
Hash 9b35fa7e57c00a1b96f9e0a12968b52b
2966ee1b3106893de266372faa64a2b3300b8fd5
0eb1e6883ed825a636b258fa09c18798a5418fbc234b55e8acd263b2bde05a6f
Analyzer Verdict Alert fortinet Phishing
GET /common_solswv1/js/highslide_last/highslide-full.packed.js HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 08 Sep 2015 13:06:44 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Content-Type: application/javascript
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 21860
Keep-Alive: timeout=2, max=90
Connection: Keep-Alive
colleprimavera.com/common_solswv1/js/jquery.js
200 OK 33 kB URL HTTP/1.1 colleprimavera.com/common_solswv1/js/jquery.js
IP
ASN #39729 Register S.p.A.
File type Unicode text, UTF-8 text, with very long lines (65479), with CRLF line terminators
Hash 7a245e191b9e7a793f4456f06224ddaf
60a5c6217cfe4d588fdc3baa248be95588f9065a
02a3d67ed07cfbae05e6b0d16e37f53807672eac727519c0d256dcac871a8aef
Analyzer Verdict Alert fortinet Phishing
GET /common_solswv1/js/jquery.js HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 08 Sep 2015 13:06:44 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Content-Type: application/javascript
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33401
Keep-Alive: timeout=2, max=90
Connection: Keep-Alive
colleprimavera.com/common_solswv1/js/mootools-core.js
200 OK 33 kB URL HTTP/1.1 colleprimavera.com/common_solswv1/js/mootools-core.js
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 53978f4a7672e0dfc52de4a1e4af0a7b
ca2bba4f5947f1ec6f0b1626ec195b1f3bb9d0da
9d7c2833f43cd0cfbd94cccd126177527f6349d4f9f6ef4d74549c9b8583fc94
Analyzer Verdict Alert fortinet Phishing
GET /common_solswv1/js/mootools-core.js HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Wed, 28 Oct 2015 10:27:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Content-Type: application/javascript
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33087
Keep-Alive: timeout=2, max=90
Connection: Keep-Alive
colleprimavera.com/common_solswv1/js/slideshow/slideshow.js
200 OK 6.2 kB URL HTTP/1.1 colleprimavera.com/common_solswv1/js/slideshow/slideshow.js
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (12343)
Hash 60ac9bc9bcead1dcc298bba4c0cfeb40
87c7465fe6782ec717cbc805c2cd2ad292c38ec3
9ba7aceee76972717c2262242febb84e7403b96f379807c9c0f5fc3e6d71f454
Analyzer Verdict Alert fortinet Phishing
GET /common_solswv1/js/slideshow/slideshow.js HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Wed, 28 Oct 2015 10:21:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Content-Type: application/javascript
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6152
Keep-Alive: timeout=2, max=89
Connection: Keep-Alive
colleprimavera.com/common_solswv1/js/cart.js?v=201507
200 OK 648 B URL HTTP/1.1 colleprimavera.com/common_solswv1/js/cart.js?v=201507
IP
ASN #39729 Register S.p.A.
Hash a581934847553614f4c558a7f935f16c
1bd6be5bc06052d2506b28ea63ddaf05375f7c00
e50f4e1628fb809a32d98cfa38d80b9303e3ea5b32c820450bb2572917800f99
GET /common_solswv1/js/cart.js?v=201507 HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2016 13:21:38 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Content-Type: application/javascript
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 648
Keep-Alive: timeout=2, max=87
Connection: Keep-Alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
colleprimavera.com/common/css/1024_1.css
200 OK 122 B URL HTTP/1.1 colleprimavera.com/common/css/1024_1.css
IP
ASN #39729 Register S.p.A.
Hash 1f671f09b84f3339c5ad59543b7133ff
a5283f2763904a4d390601e00459be1862d6dd50
61c91a0af1eab8320173726747085d7dfb558fb561154228c3b3ccf22c883870
GET /common/css/1024_1.css HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 08 Sep 2015 13:06:43 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Content-Type: text/css
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 122
Keep-Alive: timeout=2, max=89
Connection: Keep-Alive
colleprimavera.com/common_solswv1/js/mootools-more.js
200 OK 45 kB URL HTTP/1.1 colleprimavera.com/common_solswv1/js/mootools-more.js
IP
ASN #39729 Register S.p.A.
File type Unicode text, UTF-8 text, with very long lines (65417), with no line terminators
Hash da32ff6b6ff7607d1eea8ec0f482b43c
8c1646115ef5a9291f9e9ed591fdca3a610e9d64
71ddb534d6f602843159aa18c2aec7f9264576d7f4d8370392ff3e81df14e574
Analyzer Verdict Alert fortinet Phishing
GET /common_solswv1/js/mootools-more.js HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Wed, 28 Oct 2015 10:27:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Content-Type: application/javascript
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 45190
Keep-Alive: timeout=2, max=87
Connection: Keep-Alive
colleprimavera.com/1/images/140_0_5116193_134035.jpg
200 OK 14 kB URL HTTP/1.1 colleprimavera.com/1/images/140_0_5116193_134035.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 140x88, components 3\012- data
Hash 42366ae16680d5b8f070e7a93dcbdd5e
92e066050b0d86e3853864a31c0731a9eb789e29
9088fdd1c02ddb3b9b06eb3d08c3da8b8ab2b463cad162ffcc28d395469bb105
GET /1/images/140_0_5116193_134035.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Thu, 04 Jan 2018 18:39:12 GMT
Accept-Ranges: bytes
Content-Length: 13604
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=86
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/1/images/140_0_4698373_134035.jpg
200 OK 26 kB URL HTTP/1.1 colleprimavera.com/1/images/140_0_4698373_134035.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 140x140, components 3\012- data
Hash babbccdc109e33e2119b0840e34a46f7
1ffe9fef5d3d55ca2ee95a077af255f8a3f039e9
e7cbfb07a1eec2a609829c3ae0643d6d5cc2c93aa4421a6aeec617eea4a7bbf2
GET /1/images/140_0_4698373_134035.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2016 19:25:32 GMT
Accept-Ranges: bytes
Content-Length: 26385
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=89
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/1/images/140_0_4661093_134035.jpg
200 OK 25 kB URL HTTP/1.1 colleprimavera.com/1/images/140_0_4661093_134035.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 140x159, components 3\012- data
Hash c57b86270473829c98230eca3df477c3
0dcd176c1e28f39cc1b7273d63718a6eb5d241f0
369ea9c565aa1c1468aad74a3ec774d3690cfe26bea600bfb9191036d257e805
GET /1/images/140_0_4661093_134035.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Sat, 26 Nov 2016 16:19:02 GMT
Accept-Ranges: bytes
Content-Length: 24694
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=89
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/1/images/140_0_5116182_134035.jpg
200 OK 24 kB URL HTTP/1.1 colleprimavera.com/1/images/140_0_5116182_134035.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 140x140, components 3\012- data
Hash 858961db427e1889ce249adab86710a5
5c876cbf8b7a3fbb1db99df3e3bc981955a34a29
fc167287226139be41f0aff49776e42d1c04e84282bc9910c352da03890e68b3
GET /1/images/140_0_5116182_134035.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Thu, 04 Jan 2018 18:24:21 GMT
Accept-Ranges: bytes
Content-Length: 23949
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=86
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 15 Nov 2022 07:44:48 GMT
cache-control: public,max-age=3600
age: 1252
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
colleprimavera.com/common_solswv1/css/style_print.css
200 OK 628 B URL HTTP/1.1 colleprimavera.com/common_solswv1/css/style_print.css
IP
ASN #39729 Register S.p.A.
Hash 2dbb483b6f4f0df40eaf663cb1eea296
d08ecb3b3153212940e5db0b80f59bd688f6f2ba
4098f5280fdcb9415c1b4b7f229876d9ce585821b3b680ac3f423568f22851a9
GET /common_solswv1/css/style_print.css HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 08 Sep 2015 13:06:43 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 628
Keep-Alive: timeout=2, max=88
Connection: Keep-Alive
Content-Type: text/css
Content-Language: it
colleprimavera.com/1/images/280_0_5116193_134035.jpg
200 OK 41 kB URL HTTP/1.1 colleprimavera.com/1/images/280_0_5116193_134035.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 280x177, components 3\012- data
Hash b89205ced755fe93ef4de562e6521500
c7aac60a9947117560694601d67eb9e5e017a8ac
54b2b7da81f4255e6564a89e4063301a7c59b53a861cf8536ab7cbd71b6c26e8
GET /1/images/280_0_5116193_134035.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Thu, 04 Jan 2018 18:37:42 GMT
Accept-Ranges: bytes
Content-Length: 40747
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=88
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/tmpl_images/bg_sfum01_1-025.jpg
200 OK 1.7 kB URL HTTP/1.1 colleprimavera.com/tmpl_images/bg_sfum01_1-025.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 10x1139, components 3\012- data
Hash 205baf9e9457c0d342711b5aa3b5abfc
46023fec957bb43f0395b81158249abbe149cbe1
fdbfb8990262cb9ad76a10e70d9ee820b38d979906cdc8a4904e80d2ceefe4ef
GET /tmpl_images/bg_sfum01_1-025.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:52:32 GMT
Accept-Ranges: bytes
Content-Length: 1718
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=88
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/1/images/280_0_5050151_134035.jpg
200 OK 48 kB URL HTTP/1.1 colleprimavera.com/1/images/280_0_5050151_134035.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 280x157, components 3\012- data
Hash fecac9b37f897ad878e28356687adbe3
4e58ec37eb82dd41bf6bcfbc16b3d55b18a75170
00d457338724a8d0f21d9479ffd1765b94e5d1f853969ead78d876cd8dfeb110
GET /1/images/280_0_5050151_134035.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Thu, 26 Oct 2017 21:27:52 GMT
Accept-Ranges: bytes
Content-Length: 47975
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=88
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/1/images/140_27_1385209_0.jpg
200 OK 6.0 kB URL HTTP/1.1 colleprimavera.com/1/images/140_27_1385209_0.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 140x92, components 3\012- data
Hash c8547a5828711c1cfce0c55418415935
f4de30dc8ccbb0c50f51b70cf73d2a64af1867c8
cb9fef32ebf0dfb46aeee9926fc495297e5b3ac341e5220c339dce9ad54f197e
GET /1/images/140_27_1385209_0.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Sat, 26 Nov 2016 16:12:22 GMT
Accept-Ranges: bytes
Content-Length: 5972
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=85
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/1/images/140_0_5050172_134035.jpg
200 OK 28 kB URL HTTP/1.1 colleprimavera.com/1/images/140_0_5050172_134035.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 140x140, components 3\012- data
Hash 5204a8b0ce78d2d9032e6aa4dc1a62d9
b5f846371c9f7ea99531c4f0fe435f9737abd377
cb7703e41d58601e972c609502bca0ff252c0754d88702b4d863463d2b173224
GET /1/images/140_0_5050172_134035.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Thu, 26 Oct 2017 21:40:22 GMT
Accept-Ranges: bytes
Content-Length: 28412
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=85
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/tmpl_images/extra01-deco_1-025.gif
200 OK 121 B URL HTTP/1.1 colleprimavera.com/tmpl_images/extra01-deco_1-025.gif
IP
ASN #39729 Register S.p.A.
File type GIF image data, version 89a, 10 x 31\012- data
Hash 8930bb606721e95581fafcbab425b6d1
4cf80ddcda28a321fc043effdd7cd77792c80162
97b028ea2010196f11228e935105a6034ed81ac9bc1a231ae4a78bbcbdcbc3f8
GET /tmpl_images/extra01-deco_1-025.gif HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:52:32 GMT
Accept-Ranges: bytes
Content-Length: 121
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=87
Connection: Keep-Alive
Content-Type: image/gif
Content-Language: it
colleprimavera.com/tmpl_images/search-deco_1-025.png
200 OK 844 B URL HTTP/1.1 colleprimavera.com/tmpl_images/search-deco_1-025.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 200 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash ccc1bfa25a1e85d282cd1d279e1decef
293b005266a924884fc8bbe6b2a23a671327c111
c00977633c85853d6bd40cb6f3bf3dffdb690af5c1ec5382d0e0d5b46e4530bf
GET /tmpl_images/search-deco_1-025.png HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:52:32 GMT
Accept-Ranges: bytes
Content-Length: 844
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=87
Connection: Keep-Alive
Content-Type: image/png
Content-Language: it
colleprimavera.com/tmpl_images/headerflash-deco02_1-025.png
200 OK 126 B URL HTTP/1.1 colleprimavera.com/tmpl_images/headerflash-deco02_1-025.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 6 x 6, 8-bit colormap, non-interlaced\012- data
Hash 861ca862f8182e1562196e7d11d2d63a
87f155764b1461a00f02b9a4559d68c81500a929
82f792023dcfc0ddfaee6494dbb569f0950cc2b3c9f298b62910adb8729cac67
GET /tmpl_images/headerflash-deco02_1-025.png HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:52:32 GMT
Accept-Ranges: bytes
Content-Length: 126
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=84
Connection: Keep-Alive
Content-Type: image/png
Content-Language: it
colleprimavera.com/images/header1.jpg
200 OK 26 kB URL HTTP/1.1 colleprimavera.com/images/header1.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 740x240, components 3\012- data
Hash 077b7cc894e129075245efe32723604c
6ae7742688a1d34dc9e2dc2a5e175386a0d57c98
b0e1675422c90f3d85e16f49bba0d4f8ad9ed9b1f31ec763732b59af83ac5c95
GET /images/header1.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Thu, 04 Jan 2018 18:56:33 GMT
Accept-Ranges: bytes
Content-Length: 26293
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=87
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/tmpl_images/headerflash-deco03_1-025.png
200 OK 142 B URL HTTP/1.1 colleprimavera.com/tmpl_images/headerflash-deco03_1-025.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 746 x 6, 8-bit colormap, non-interlaced\012- data
Hash a6359eaee1231344018ce15fc70c6d0d
3dc0c38b5f789432501170945f4841a71c216a91
edeb03b4345e8cf6fb5948c668703254727dd1b8b996c9e745f211eaef1e8aec
GET /tmpl_images/headerflash-deco03_1-025.png HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:52:32 GMT
Accept-Ranges: bytes
Content-Length: 142
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=84
Connection: Keep-Alive
Content-Type: image/png
Content-Language: it
colleprimavera.com/tmpl_images/bg_sfum02_1-025.jpg
200 OK 41 kB URL HTTP/1.1 colleprimavera.com/tmpl_images/bg_sfum02_1-025.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1600x1139, components 3\012- data
Hash 4a001819933f564a84ae3d7a3c6db59f
2503429e90979a9dee7659c8723ed5020188247b
de4ba2c30ee35030a73df35217d80272aae2c5fdd1dd61c4c297be6c53799036
GET /tmpl_images/bg_sfum02_1-025.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:52:32 GMT
Accept-Ranges: bytes
Content-Length: 40809
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=87
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9d9493125a22b98bd2ac3a1b11cc0a12
8334175b79551b1e0592f63eb606543c915983a2
a583076207a416f2ccbb70821bc5185bb6b8e86180221014638af5af3b34a7fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
colleprimavera.com/images/graphic_title_1.png
200 OK 5.5 kB URL HTTP/1.1 colleprimavera.com/images/graphic_title_1.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 550 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 2f2aef95c935eda6c07a461895f1f785
cef72726b2165eaba12cefc681d6d98768497aef
6b9b3ba9ced25b2b83ec5253658e6c4bb46d2345e433568230c692de3b1f7b5e
GET /images/graphic_title_1.png HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:54:01 GMT
Accept-Ranges: bytes
Content-Length: 5523
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=86
Connection: Keep-Alive
Content-Type: image/png
Content-Language: it
colleprimavera.com/tmpl_images/red-box01-deco_1-025.png
200 OK 17 kB URL HTTP/1.1 colleprimavera.com/tmpl_images/red-box01-deco_1-025.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 740 x 65, 8-bit/color RGBA, non-interlaced\012- data
Hash b4d8054eef6440fd5e31db4f71beaeee
9551197b5ab8291de8351bbee4e21b6e55d2a225
e6b5105afe60f7d0ecb33e131dd7850f7d8e30ec515e32668a25540c2fa2bd5c
GET /tmpl_images/red-box01-deco_1-025.png HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:52:32 GMT
Accept-Ranges: bytes
Content-Length: 17033
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=86
Connection: Keep-Alive
Content-Type: image/png
Content-Language: it
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9d9493125a22b98bd2ac3a1b11cc0a12
8334175b79551b1e0592f63eb606543c915983a2
a583076207a416f2ccbb70821bc5185bb6b8e86180221014638af5af3b34a7fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
colleprimavera.com/1/images/140_0_5116180_134035.jpg
200 OK 17 kB URL HTTP/1.1 colleprimavera.com/1/images/140_0_5116180_134035.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 140x96, components 3\012- data
Hash d15717490f1467a811cea13c055188cf
a7fe411aaab722c4b5e32015b74c8d13e77a8b94
b15aec7745572e349bbbc3d91755ce6906680831656a5d8f9925669bdcd6a088
GET /1/images/140_0_5116180_134035.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Thu, 04 Jan 2018 18:20:01 GMT
Accept-Ranges: bytes
Content-Length: 17314
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=83
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
ocsp.digicert.com/
200 OK 471 B IP
Hash 39ed54d118ae43c615b5efd6cf46ac6f
05484ec9c0b28f3f662897b85f5a0d61ae0387f3
81f3958a1abfdd416fe8d78ab4b377d680aa9c957e1435a1f8b481883bad7f96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4848
Cache-Control: max-age=165127
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:40 GMT
Etag: "6373176b-1d7"
Expires: Thu, 17 Nov 2022 05:57:47 GMT
Last-Modified: Tue, 15 Nov 2022 04:36:59 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
colleprimavera.com/tmpl_images/main-menu_deco_2.png
200 OK 417 B URL HTTP/1.1 colleprimavera.com/tmpl_images/main-menu_deco_2.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 200 x 148, 8-bit/color RGBA, non-interlaced\012- data
Hash e1446aa4a3a40bd8e135272f0b946ac8
2fe3b9143e84a1d015051aecc53cc9ce246c936d
e55900b8d78c537573b4c37651594fb5ca66f70a0f81f7c1f8ef9a045bae82ec
GET /tmpl_images/main-menu_deco_2.png HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:52:32 GMT
Accept-Ranges: bytes
Content-Length: 417
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=86
Connection: Keep-Alive
Content-Type: image/png
Content-Language: it
colleprimavera.com/tmpl_images/footer-deco_1-025.png
200 OK 17 kB URL HTTP/1.1 colleprimavera.com/tmpl_images/footer-deco_1-025.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 740 x 54, 8-bit/color RGBA, non-interlaced\012- data
Hash 22936f8d21969cc936bb9eac4c6439a3
fae9796cbd21f0e8b13f741adc1db7c95ff2f774
312018e57113aa01c9ed15474723e55146bc821ba6a9b8d50cf6ada2d3bbf367
GET /tmpl_images/footer-deco_1-025.png HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/1/css/style.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:52:32 GMT
Accept-Ranges: bytes
Content-Length: 16580
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=86
Connection: Keep-Alive
Content-Type: image/png
Content-Language: it
colleprimavera.com/favicon.ico
200 OK 524 B URL HTTP/1.1 colleprimavera.com/favicon.ico
IP
ASN #39729 Register S.p.A.
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash e31290ada1124da79f3b13255cfee97f
a825ce95e25347ce672c3dbf8c21d1d9470c12de
f6a7a9451cf5fb95f686917aead19e9a5b5da57296ce9e0da447e11c388de66e
GET /favicon.ico HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:40 GMT
Server: Apache
Last-Modified: Tue, 15 Jan 2019 20:54:02 GMT
Accept-Ranges: bytes
Content-Length: 524
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:40 GMT
Keep-Alive: timeout=2, max=85
Connection: Keep-Alive
Content-Type: image/x-icon
Content-Language: it
www.youtube.com/s/player/b50b69c9/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/b50b69c9/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 761b19f8796fec7f10467dcc598b5236
77c5983a2669fce078e7cf89eb3343fc46e67d00
43000048eb17880ad3a86adbade0f08b2d81ed863b501bca737a53157d48a840
GET /s/player/b50b69c9/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/6fJVo19lnfg?rel=0&border=0&autoplay=false&loop=false
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49806
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 16:57:20 GMT
expires: Tue, 14 Nov 2023 16:57:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 01:17:55 GMT
content-type: text/css
age: 54500
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/b50b69c9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL HTTP/2 www.youtube.com/s/player/b50b69c9/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (679)
Hash b41e05b3446a7f3c2ba64504e38a0af5
78f5476e77ea9b75ace36ce16af14053b1afa018
1cbccbc4f1d9324aa0baea4165e28e684961be9d50c81020dfdc71fae864c319
GET /s/player/b50b69c9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/6fJVo19lnfg?rel=0&border=0&autoplay=false&loop=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98457
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 16:57:20 GMT
expires: Tue, 14 Nov 2023 16:57:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 01:17:55 GMT
content-type: text/javascript
age: 54500
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3200044057cb585f1a435c0efece61c8
8305d5b5891288aa9996b4b4ca6fce2265413194
df45704534a24928e7659a6d8cd1b5ac9ffa9b224b02b34a2d6aed5ef69fd586
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4892
Cache-Control: max-age=94973
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:40 GMT
Etag: "63720535-1d7"
Expires: Wed, 16 Nov 2022 10:28:33 GMT
Last-Modified: Mon, 14 Nov 2022 09:07:01 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
www.youtube.com/s/player/b50b69c9/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/b50b69c9/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/b50b69c9/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/6fJVo19lnfg?rel=0&border=0&autoplay=false&loop=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 16:57:20 GMT
expires: Tue, 14 Nov 2023 16:57:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 01:17:55 GMT
content-type: text/javascript
age: 54500
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9d9493125a22b98bd2ac3a1b11cc0a12
8334175b79551b1e0592f63eb606543c915983a2
a583076207a416f2ccbb70821bc5185bb6b8e86180221014638af5af3b34a7fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ea606a3c83b6b14b9375c84e37870d8
d73a898c2f3eba8e71d6d4f675c47107df0a5795
0dc0268899f946356be887d4ee84b411136f373200ce90464b331697b6cd9487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/embed/TxDy2optYOY?rel=0&border=0&autoplay=false&loop=false
200 OK 28 kB URL HTTP/2 www.youtube.com/embed/TxDy2optYOY?rel=0&border=0&autoplay=false&loop=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash f0b1a547865cb0c496acd397cf3ba7eb
8345250689fbca10987d3b02099af45fdfc15188
717e4512f785b6fa1cdf1f68049cefb25eb914dcd534311c037c970b6fe9fc1b
GET /embed/TxDy2optYOY?rel=0&border=0&autoplay=false&loop=false HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://colleprimavera.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 15 Nov 2022 08:05:40 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=kfIbjRjOtJg; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=CbcTnv9HSgk; Domain=.youtube.com; Expires=Sun, 14-May-2023 08:05:40 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+921; expires=Thu, 14-Nov-2024 08:05:40 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 21:46:16 GMT
expires: Fri, 10 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 382764
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Nov 2022 12:31:58 GMT
expires: Sun, 12 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 243222
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ea606a3c83b6b14b9375c84e37870d8
d73a898c2f3eba8e71d6d4f675c47107df0a5795
0dc0268899f946356be887d4ee84b411136f373200ce90464b331697b6cd9487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: L6lb0WmC2OWTMaBLvdmoLw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wed8TgJvjt2rzgf/l6hqHxfG5J4=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7c6a6db24d1ff3ffe787a8a5f78ef812
d9b2d385df52929ea7c6080b7c2e10c38df51572
3950ecddae384c36f9fb092dd5d27d3aa20c1197a37ff465d0bd350952dd9774
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/embed/6fJVo19lnfg?rel=0&border=0&autoplay=false&loop=false
200 OK 28 kB URL HTTP/2 www.youtube.com/embed/6fJVo19lnfg?rel=0&border=0&autoplay=false&loop=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash 5bcdd6bfac9083c3404cf5e569b92298
9de16737f86614ec26aa013aef635134b88dfa33
e147091c1e6963df8a5783484a23c351833b4ded902d8aef8e4317cb9a84ecb3
GET /embed/6fJVo19lnfg?rel=0&border=0&autoplay=false&loop=false HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://colleprimavera.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 15 Nov 2022 08:05:40 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=J68gJvP-j2M; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=5ZcyTzI2oBw; Domain=.youtube.com; Expires=Sun, 14-May-2023 08:05:40 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+377; expires=Thu, 14-Nov-2024 08:05:40 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/0yIpRdiS6YA?rel=0&border=0&autoplay=false&loop=false
200 OK 28 kB URL HTTP/2 www.youtube.com/embed/0yIpRdiS6YA?rel=0&border=0&autoplay=false&loop=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash 382bd6b37f4c30c3f09f986e6a6e04de
95918d7e8a864c77da1b0ea5542f8008a0afcf32
f84367d26d01b5a452ecc7bab94b96d606fa248e566f5672b7ade17feffc1e08
GET /embed/0yIpRdiS6YA?rel=0&border=0&autoplay=false&loop=false HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://colleprimavera.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 15 Nov 2022 08:05:40 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=btfjJtz167U; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=iP9KNaZXiWw; Domain=.youtube.com; Expires=Sun, 14-May-2023 08:05:40 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+038; expires=Thu, 14-Nov-2024 08:05:40 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 68a04663a52ab4272c25f5afcc09a92d
48b0722227353d06cb1dfd4480b644be6e6fc030
892ba18611f372b6bf390d3628b66efc4a721f0f2bde61ae22546a0948935b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Nov 2022 07:59:05 GMT
expires: Tue, 15 Nov 2022 08:14:05 GMT
cache-control: public, max-age=900
age: 396
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 15 Nov 2022 08:05:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 15 Nov 2022 08:05:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7c6a6db24d1ff3ffe787a8a5f78ef812
d9b2d385df52929ea7c6080b7c2e10c38df51572
3950ecddae384c36f9fb092dd5d27d3aa20c1197a37ff465d0bd350952dd9774
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 68a04663a52ab4272c25f5afcc09a92d
48b0722227353d06cb1dfd4480b644be6e6fc030
892ba18611f372b6bf390d3628b66efc4a721f0f2bde61ae22546a0948935b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 15 Nov 2022 08:05:42 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8094f6d66cd067b92b99cc3c1ec916c6
cdb6d27ace38846e7a770dafce189f90a30db886
f07248933eddbab19c1153daaece5a2c3bcb421598bfab2c4b0f4c547d75e817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/8pIlkOV6aaQ_U_dVJi5sF10SPlVOIqQZF0ddbZJO4DQ.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/8pIlkOV6aaQ_U_dVJi5sF10SPlVOIqQZF0ddbZJO4DQ.js
IP
File type ASCII text, with very long lines (36157)
Hash 2d6e1ff16c529ae3564994a6a1e7b47c
e6441e96c9505a87bcffccf4aa7f4daaad92b050
1bb1a2288e7a8ea7cd780e22060c099b76659713965c5b16221ea818f4e2d403
GET /js/th/8pIlkOV6aaQ_U_dVJi5sF10SPlVOIqQZF0ddbZJO4DQ.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14411
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 15:12:58 GMT
expires: Fri, 10 Nov 2023 15:12:58 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 20 Oct 2022 10:30:00 GMT
content-type: text/javascript
age: 406364
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 227ef7e6a7624ee4f937053f9b3c0c6e
6f480288e52139193e8199b1dfd199eda3e7197c
c17da301b7f7b3b609876fa2a6ceb41013c3786d5fa95d9207ac814600b977b4
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 15 Nov 2022 08:05:42 GMT
server: ESF
cache-control: private
content-length: 30920
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 8b79c67eab7d4f01bf75f1669f65a2ae
d3ae6c965df1e170e6589d12d6757d3c6cb14f01
8b9a60b9c2486572df046915931d6339f7d1ecabd192121c1b874d2a480ed98e
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 15 Nov 2022 08:05:42 GMT
server: ESF
cache-control: private
content-length: 30858
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/_mW_2QmsfiHfHQzuwJJjeV3lvrJQS7bChqYqZLie29Q.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/_mW_2QmsfiHfHQzuwJJjeV3lvrJQS7bChqYqZLie29Q.js
IP
File type ASCII text, with very long lines (36106)
Hash 7fc7e22ecccb0cfd0ae897bb40a58efe
5d46470a711120793c362235105836fe49e699a4
1907005cab41fbd6d1d67df3b25586f3232e053a261c9e2b2503459f4980b1c5
GET /js/th/_mW_2QmsfiHfHQzuwJJjeV3lvrJQS7bChqYqZLie29Q.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14302
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 13 Nov 2022 10:09:03 GMT
expires: Mon, 13 Nov 2023 10:09:03 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
age: 165399
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c3304327b77a6a8e6b9ee69f63c5c81f
20f2dc91fc2fbd013d9fa40806c2061b50262cd0
7e069ab5b61bfec87f840bf474e68373b749c3bd1d514cd2ade049efd9129d46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 188acd4738d46f1bef7b2b553064fc64
f2d738d64c7cd5cd10a831be218b6128df380631
3cdf0097c134e71b4949a613f50c295b7c67df69ec09ac7978f7be0884c19e74
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 188acd4738d46f1bef7b2b553064fc64
f2d738d64c7cd5cd10a831be218b6128df380631
3cdf0097c134e71b4949a613f50c295b7c67df69ec09ac7978f7be0884c19e74
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash c8f0f2d99ae306de9ffba4f2938cd89e
9dec108a2f96acd9847c26cd6796ec0579875eac
81097db518bb748b885a74d9875d4acd95a421aeb534be095273cdf89f9ed913
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 15 Nov 2022 08:05:42 GMT
server: ESF
cache-control: private
content-length: 31048
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 188acd4738d46f1bef7b2b553064fc64
f2d738d64c7cd5cd10a831be218b6128df380631
3cdf0097c134e71b4949a613f50c295b7c67df69ec09ac7978f7be0884c19e74
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/6fJVo19lnfg/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgWShSMA8=&rs=AOn4CLASjZawQQCdFj0Exve3ILxfoijt9A
200 OK 96 kB URL HTTP/2 i.ytimg.com/vi/6fJVo19lnfg/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgWShSMA8=&rs=AOn4CLASjZawQQCdFj0Exve3ILxfoijt9A
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash b550c1cdb3f3d90af3b61126edb04c5e
2cadd46375f7d47a934edbc0819cbfaf90da35c6
db301cff9476f4c4509992f5fb574cc1442c7bcc5ddaab78cf07d7fd23e450f2
GET /vi/6fJVo19lnfg/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgWShSMA8=&rs=AOn4CLASjZawQQCdFj0Exve3ILxfoijt9A HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 95603
date: Tue, 15 Nov 2022 08:05:42 GMT
expires: Tue, 15 Nov 2022 10:05:42 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/0yIpRdiS6YA/maxresdefault.webp
200 OK 255 kB URL HTTP/2 i.ytimg.com/vi_webp/0yIpRdiS6YA/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 255 kB (255098 bytes)
Hash 9f2b78d8da6e9fd508a72f8590e638d0
c4b8a2ab979ced1cddf6b8341bf18ff5c8125b47
0820e7f3e408b431c4dbc9082f60b1b93721c4da7d180f8b9fe3f39d1ade7aad
GET /vi_webp/0yIpRdiS6YA/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 255098
date: Tue, 15 Nov 2022 08:05:42 GMT
expires: Tue, 15 Nov 2022 10:05:42 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16436
Expires: Tue, 15 Nov 2022 12:39:38 GMT
Date: Tue, 15 Nov 2022 08:05:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16436
Expires: Tue, 15 Nov 2022 12:39:38 GMT
Date: Tue, 15 Nov 2022 08:05:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16436
Expires: Tue, 15 Nov 2022 12:39:38 GMT
Date: Tue, 15 Nov 2022 08:05:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16436
Expires: Tue, 15 Nov 2022 12:39:38 GMT
Date: Tue, 15 Nov 2022 08:05:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16436
Expires: Tue, 15 Nov 2022 12:39:38 GMT
Date: Tue, 15 Nov 2022 08:05:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07797f-dd0a-4d91-86dd-362bcde1053e.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07797f-dd0a-4d91-86dd-362bcde1053e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14d5eaa5fe940564f077ca611f6e3fbe
032b8bfc63294a55ff49ee7186768bd9728ce103
7bed85f8f78ba7e1fad560d0ea311a65bff33aaf5f3226bef392ddc10f52d620
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07797f-dd0a-4d91-86dd-362bcde1053e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12942
x-amzn-requestid: fd589c13-7784-4e3a-b928-908fd2b8f98a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bd8hgHQvIAMFmfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f0e09-29db9a7832efa131593951f2;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 03:07:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lXz-TMhQewc6QT-NkFor90WG90GBJKPQVRVc2UjO8Z2FpFWVde2zsA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 07:49:51 GMT
age: 951
etag: "032b8bfc63294a55ff49ee7186768bd9728ce103"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 032386e5c9dffff1ba1ee5e8a322d438
dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: 4778d1bd-28c3-4665-89da-046e356087f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyD1HE-oAMF0QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-53c7330c5fd36d3c4d9e6aed;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CHi9V7-WaWmG6Y0249CZJnhe_RjvleaGFVXoOnJ62cjrcXoLLKwzgw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 00:41:48 GMT
age: 26634
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd11e6547-de5b-41d6-a923-9194b88afaba.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd11e6547-de5b-41d6-a923-9194b88afaba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b891dd714ee24b92f59f0697dd45c2b4
8b54f502df3eb318b87ff8a3313007876752e181
d50396bc97a46452ed3af30dbfffc9fe75cf7d4ec347c0a8460d99a6affd1fb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd11e6547-de5b-41d6-a923-9194b88afaba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5856
x-amzn-requestid: 5261109d-ca5e-4b77-b0a2-17b634a51fd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bhPtpFvRoAMFfZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63705ff0-570bdfbd329fe34b47d8c7a4;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 03:09:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8XeCtd88wwfynTV2w67E7r__KCAAIAsfv7sg67o_HSehIsIBae_SkQ==
via: 1.1 ba55932f4947672586f0865cea81e028.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 04:01:21 GMT
age: 14661
etag: "8b54f502df3eb318b87ff8a3313007876752e181"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c3081d3-ef42-45da-adea-67bbc90bf9a6.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c3081d3-ef42-45da-adea-67bbc90bf9a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b18dc101656c2e449e5f54ff7b7fb10b
d5ba3b6a069a74b5db3560a265728e627f6fe18d
53a73577e37651a936a5841fe06e40475e06ce6fa9e14fc0590ddc7aba421dd2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c3081d3-ef42-45da-adea-67bbc90bf9a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4394
x-amzn-requestid: fd389a5e-b816-4bd8-a073-2f52fea5bfab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bnEhtFfnIAMF1rQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6372b471-133a3285137912af436daffd;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 21:34:41 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6i-blK0B05DT_CvizlmYpcDTpDV8IZLOIrukIQPW6FISAuXa1T0FdQ==
via: 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:45:53 GMT
age: 37189
etag: "d5ba3b6a069a74b5db3560a265728e627f6fe18d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd744cf1f-bbfc-4306-bf3d-5e1e6b8b1c90.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd744cf1f-bbfc-4306-bf3d-5e1e6b8b1c90.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edc9d97a2396dfc326736cb9b2b3b474
2c5a98ad27133575ef4fa48a8ff379ee5ad51490
a89e1e9a13b72b0a826ed77a71ec92ac5548a996f6c17b11a4c002480a429333
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd744cf1f-bbfc-4306-bf3d-5e1e6b8b1c90.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7873
x-amzn-requestid: 4a968a3c-c6ca-4d18-83b4-6a1d42e85fee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bef9SFIMoAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f46bb-2cd01e7d191b3eda7d743866;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 07:09:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jjir5UM8aqq3T3akiZx_aAcsWL5GDKBnaPA_cDlM2e9Ce6oi-wGEQA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 08:21:23 GMT
age: 85459
etag: "2c5a98ad27133575ef4fa48a8ff379ee5ad51490"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F594089c3-0cc3-4e41-b8df-290b4d9aa986.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F594089c3-0cc3-4e41-b8df-290b4d9aa986.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c5f45accbd2d3551103631fa77deee8f
7295ef4c52bcea1be24b963d7ff170ef5bacf713
495e2cef9d9ebec66f1ddcf478512af7e37a301b562d7b75e5d28bb7753d2290
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F594089c3-0cc3-4e41-b8df-290b4d9aa986.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9311
x-amzn-requestid: 32874a50-bbc5-4246-a819-cd65fe918bd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKuFsG5IIAMF7zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63675d57-64c21f6448b29b4710c8c638;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 07:08:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wLkQgLmUk7U5jQPXEljFQpuwHVgHUKHHA63UwzEicdLPMMo1decu3g==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 05:54:08 GMT
age: 7894
etag: "7295ef4c52bcea1be24b963d7ff170ef5bacf713"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/AMLnZu8AVBIf7GifABRAJt6FwgxkDPUSmvkok-DFYB4T1A=s68-c-k-c0x00ffffff-no-rj
200 OK 3.0 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu8AVBIf7GifABRAJt6FwgxkDPUSmvkok-DFYB4T1A=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 1031739aafad69217ac9e9e809a4c498
35e2c08608251230ee61ec4406f198ddcc278f30
ca4881a5804ad9f0fff5e3e8ec2c4f68def1a0b811075997ac65d62fe4b12990
GET /ytc/AMLnZu8AVBIf7GifABRAJt6FwgxkDPUSmvkok-DFYB4T1A=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3508"
expires: Wed, 16 Nov 2022 08:05:42 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 15 Nov 2022 08:05:42 GMT
server: fife
content-length: 2980
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4a57291a56e0d7ffa0b4888b59a422b8
7a748cb78b21bbb7c4eb1ddc331ffa9d12d33248
9cc42b59af0f988712634b9430c4a0be52e5575d7e3458ddd872a751484612a1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 39ed54d118ae43c615b5efd6cf46ac6f
05484ec9c0b28f3f662897b85f5a0d61ae0387f3
81f3958a1abfdd416fe8d78ab4b377d680aa9c957e1435a1f8b481883bad7f96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4850
Cache-Control: max-age=165127
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 08:05:42 GMT
Etag: "6373176b-1d7"
Expires: Thu, 17 Nov 2022 05:57:49 GMT
Last-Modified: Tue, 15 Nov 2022 04:36:59 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
static.xx.fbcdn.net/rsrc.php/v3/y7/l/0,cross/XhLcFEqE8E_.css?_nc_x=Ij3Wp8lg5Kz
200 OK 4.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y7/l/0,cross/XhLcFEqE8E_.css?_nc_x=Ij3Wp8lg5Kz
IP
File type assembler source, ASCII text, with very long lines (2642)
Hash c7916a2005360f2e905afce8fbf07e8f
7a32683070a012da34c4fb48401a591436bbf667
d2e3590e4227f66267033166bc65aa90bf49ebb6915bd2102bc0b7431940791a
GET /rsrc.php/v3/y7/l/0,cross/XhLcFEqE8E_.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 17:28:46 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: x5FqIAU2Dy6QWvzo+/B+jw==
x-fb-debug: Lf944ByAM+xapnd9Fpi6PaKrbm3E/UYRNvw2/A3YmZF16wjmWLXFngG7iLbV72ziCa3s39tC6tP+lfBBoT7tuA==
content-length: 4736
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y-/l/0,cross/Q7h0KYt1mBV.css?_nc_x=Ij3Wp8lg5Kz
200 OK 4.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y-/l/0,cross/Q7h0KYt1mBV.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4583)
Hash 1078d36e188ce56c663fe6e611f6b4fe
6dc856fb662c8fb4ef79313100eae909dca01288
ba3bd23d4fd82691f58c347bebc16e57ce16532b32f3c95853a49c85d3aaccc0
GET /rsrc.php/v3/y-/l/0,cross/Q7h0KYt1mBV.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 17:28:59 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: EHjTbhiM5WxmP+bmEfa0/g==
x-fb-debug: OeiGOhO/k/c2bcnRqw8JMmODBNN8v9wNrNh4IbfK83BolKlZY2xFD30B4DfpYUOQflPGFSJr4897Yx8mLd87gQ==
priority: u=2
content-length: 4395
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yW/r/0aTHA2C1d6g.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yW/r/0aTHA2C1d6g.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4057)
Hash 571700b5a1e8db88d5d79007a910b962
07102cc5f2b19f190830664e1ec6718efb33c011
ecccefedaf39e094079b22880aba987993015fbf1b70fd3c63bc57dc10685f11
GET /rsrc.php/v3/yW/r/0aTHA2C1d6g.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:02:57 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: VxcAtaHo24jV15AHqRC5Yg==
x-fb-debug: V5xxkCFKnoaec7lYpkJhm2KApFh6VZ+elPIKuqBXYQ42HBC3BnCmuXjVx5Jgb6+ZBsuhXauZDjshZ9Bujw5AlA==
priority: u=3,i
content-length: 7238
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yE/r/PdOG-9jxBRT.js?_nc_x=Ij3Wp8lg5Kz
200 OK 10 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yE/r/PdOG-9jxBRT.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (10494)
Hash 49995b2771629d4702348ab5a764d9b4
49127b99c14871692efd5d7cc9bc1fee767c113a
9e3afadca3415b0bcee9cc9ac780a46dbf55b21f3c192ad5d36cbadee37d89c0
GET /rsrc.php/v3/yE/r/PdOG-9jxBRT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 17:21:44 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: SZlbJ3FinUcCNIq1p2TZtA==
x-fb-debug: tUQGT3g1dEqca6AyEf/j9deNxT0LFvcqyn/9gbnu5DM55qdqN9km0gu7fijqKVgWoGujslNsQ0gjo67T8V5ZZA==
priority: u=3,i
content-length: 10375
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5542)
Hash 0765d76d746716156d53d36ee6f80836
17e1546f87cc6417615caa10dcbbcb699c59471a
f1e6af63ae9ff0385126b72a492b0d34709514dd4c00074a1be28272c253d4f8
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:03:07 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: B2XXbXRnFhVtU9Nu5vgINg==
x-fb-debug: 0xPHDYvZge8swk7JhsZ5ELIEYcud4qPBQV2E2zQxSjSHT+wOY2wY+EXO4Me6uhdgl3HPef3XHIK9yshvgmDJ/Q==
priority: u=3,i
content-length: 12369
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iEpO4/yt/l/en_US/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz
200 OK 24 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iEpO4/yt/l/en_US/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (42048)
Hash 3051900d03a657ddbbc9afa8ac11cdbd
557f26734897e137a6678f6d2a81672fc6a34ad2
038035ce01be57324c7e251c8834229b4910f27e3a042912fd7276947e5750df
GET /rsrc.php/v3iEpO4/yt/l/en_US/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 04:19:31 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: MFGQDQOmV927ya+orBHNvQ==
x-fb-debug: /0Pz55NIiUn/cvYU+yfhqdIUstVvGBjhB3o6xBCg6YLbu5z3E4bj/phElq/tOEXBC1yT2SO31t4LXKWfL41W7A==
content-length: 23455
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yS/r/DEaHQMKxWBP.js?_nc_x=Ij3Wp8lg5Kz
200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yS/r/DEaHQMKxWBP.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18622)
Hash e939eadda5d7c9dd60450eb6fd816eb0
fd1b642357823cb1b21ae46e5c61a7488e203c1c
4c96ac797fe700732ccba8775a5a630eaafa1f03d81b2a2d48700fb29c3083a6
GET /rsrc.php/v3/yS/r/DEaHQMKxWBP.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 04:37:43 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 6Tnq3aXXyd1gRQ62/YFusA==
x-fb-debug: 7TdI8jhhqQoVsxciNzMu80GSUmNc/uvyt9Jz+UPwyzqFdzFE9DtXJYN/i0lg53jxBZaciWxa5a64NOC1wB03jQ==
content-length: 91128
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1984)
Hash 16f083b23b565db9d2f20d1ad75933c1
6d74ad139c96b1e3fc9d541419788b5b4893ec9a
36b909cd9132a8996a1bbb221d05217c31506a6951bb408deeea6aa612dc4200
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:06:27 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FvCDsjtWXbnS8g0a11kzwQ==
x-fb-debug: I/O4m6DwKidRohClNeExXv562wGzq8r+kdmkQ1jobwoPlsNFi0Yt0OvnZBjRb2KPEYSXWwX3xhdvgshSs7pAww==
priority: u=3,i
content-length: 1657
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
200 OK 338 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (327)
Hash 76f593e842677f73cd0a06232874b2c3
25a13f79478d5a0e286a2299dca2f3b296463079
74dcbe026002f10b703960a500b50dabe518862e568a9e689dec7afa243fa44d
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:34:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dvWT6EJnf3PNCgYjKHSyww==
x-fb-debug: YoNVPdJ/NoaRQ/I05gP78lWwEqNqqrdckmR1PHSbkBXRxPpebgQSDPo9w9KQDiHgDPxF7XOHeLx63iFakPHZyg==
priority: u=3,i
content-length: 338
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/s/player/b50b69c9/player_ias.vflset/en_US/base.js
200 OK 1.3 kB URL HTTP/2 www.youtube.com/s/player/b50b69c9/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (1491)
Hash e0e53f8b49bf0ffb37c775b9c288a5c2
ade21104d506e6c9d4946e1afc9b88d80da7333c
5aa28d70ec74ee4b45e03fb453bb4adc23da65fbeb93c581411f0076b1444eb0
GET /s/player/b50b69c9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/6fJVo19lnfg?rel=0&border=0&autoplay=false&loop=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 590019
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 17:04:08 GMT
expires: Tue, 14 Nov 2023 17:04:08 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 01:17:55 GMT
content-type: text/javascript
age: 54092
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yB/r/lsNkUynfXlo.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yB/r/lsNkUynfXlo.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (9258)
Hash f4e1cfd4a3ce4f9b1fe2cd9fe4bb2cb4
792fbf2a0ced88cebf3f7ff8450c4eef85f7731e
14c80102c127cea57d49a13228152b5b0e34720e6f8f43398e84da19dd5b4993
GET /rsrc.php/v3/yB/r/lsNkUynfXlo.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 05:12:53 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 9OHP1KPOT5sf4s2f5LsstA==
x-fb-debug: f5gmro0BIDwJ6ZSd8KYtcdnKJZgftVwoEGpnjtNtr0n11hZPQbF7xa25STqpltUqStxHUmJXoltGIZUixvucQg==
priority: u=3,i
content-length: 7724
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yJ/r/wXhbxYJbfst.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.9 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yJ/r/wXhbxYJbfst.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4643)
Hash 4263902f08d4299c6bad0aa8c901bb85
47867a84b33903997793c2d6089774d47a266faf
61d1b58a7f92df7ada14a899e3c72bea0b8d6b5fdefe94c42848da6af4b33002
GET /rsrc.php/v3/yJ/r/wXhbxYJbfst.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 01:40:21 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: QmOQLwjUKZxrrQqoyQG7hQ==
x-fb-debug: JqhJj/bvAxUsOKUmx3CiaFP/qnyKl+697no31BNYk0yEkExY/3R1VF1x5e/20IvZCEaRxNilSvjacCLZqhC5Tg==
content-length: 7865
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz
200 OK 8.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (9885)
Hash 71e8e93b5e55f2010013b0814f4e3ae5
4732ba3acc539a0e9ff12d08c1b5a16f535bd594
b710ea52f812ac39c5195f0c170142bfcfcc274aa6b250a29a1ed1c59ea58556
GET /rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:13:42 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: cejpO15V8gEAE7CBT0465Q==
x-fb-debug: m5Vzh7AbzqaIg88nvgv1kHN9BxZLStjnFWv6K5PYqsyG0Gc+5NLE+jogH4RgRuAJlF1lHc02faF6hgpC9bBSZA==
content-length: 8748
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (8741)
Hash dfb29285817fca7b068ba0ec98aa2392
78cd49585da28a245a096781c8e0fada59cf2b72
2c4a3a46d7dfaf97bbc16a2b93470d1b3382c0da3f44dca0c987a3384cee43d3
GET /rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 04:54:20 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 37KShYF/ynsGi6DsmKojkg==
x-fb-debug: 1OJX/K81m7XImTplLGw/7ANit8XayK5qe73Ffg7JAY5pCZTbd+j9zpsVmjKxIE8dfQCm3VZyVLLkqeUvbScSuA==
content-length: 16262
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yt/r/Svz6e73QqZ7.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yt/r/Svz6e73QqZ7.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (15785)
Hash 90bdda53fc4aa76a1783f0ea94ba4d14
b2907eaca453bf82c67cbf8af80c084565288f96
431a56da8e8aacf4bc4bec1a9f51bc08309f110b770a59e725d6eba568c0956c
GET /rsrc.php/v3/yt/r/Svz6e73QqZ7.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 04:45:23 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: kL3aU/xKp2oXg/DqlLpNFA==
x-fb-debug: WR5jlJyIr+VEyRQDZpQ4dcvK2r2MznjnHNJjyu6UvMXZySoj3kXeOFl3gvRfEF/9g9zXi0FrD2hLDyDul0Fdag==
priority: u=3,i
content-length: 16295
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
200 OK 827 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (724)
Hash 29973cf3b0ef9f16fe31ed981b2f6573
f22eb80b89b5e0ae9ace854aab6676d56eaef6a1
476822c80e0a0ee078edb7a74db59378f8b1d43d2de844e28a9e9c2f68a4c8d8
GET /rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 03 Nov 2023 20:06:17 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KZc887Dvnxb+Me2YGy9lcw==
x-fb-debug: U8RJgKUtHGLUiQk9HHpA+IRcULT5qX+DuwPkFrA1TVl4/mz6+76fzZ9YDejeZlR7UxuiL1amRZ0p3hU19KekzQ==
priority: u=3,i
content-length: 827
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/l/0,cross/LyYhZs_ZT4W.css?_nc_x=Ij3Wp8lg5Kz
200 OK 1.0 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/l/0,cross/LyYhZs_ZT4W.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1367)
Hash cfc894f6c294b1178175d651328cb09e
4cffc4c1b799d6f32bef01d876736be5f598503c
104864171c81f375ff2a983b8055c0205f472a09de825d8168395d17399e2412
GET /rsrc.php/v3/yR/l/0,cross/LyYhZs_ZT4W.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 17:31:53 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: z8iU9sKUsReBddZRMoywng==
x-fb-debug: Im0hArPSpxFeKi7U5eb8za1UYAXgrFV64TkG+jV9AqvQOmU6wwiAwDPlTPf+C76uSuLc262kjz3A8gTP1vHiVQ==
priority: u=3,i
content-length: 1018
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yE/l/0,cross/eqAiCx-Uqtj.css?_nc_x=Ij3Wp8lg5Kz
200 OK 3.8 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yE/l/0,cross/eqAiCx-Uqtj.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (10262)
Hash 22c52e0a0bbda3b03b678f7cc4d0d077
f27cc2373a1ae30f3daeae94af1b86a87a8bf5a1
969e476ec39bf47b6f955d6dc891e433b3d849977d5d76165a1ed6936a4a528b
GET /rsrc.php/v3/yE/l/0,cross/eqAiCx-Uqtj.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 04:48:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: IsUuCgu9o7A7Z498xNDQdw==
x-fb-debug: 06NN0Pjb/7Zlyq0Vp1bkhLWBFI0JzmBOH59eYxGLw3WhOUBsJpF4C3hXCbmGEw4Fbxht3AJJNyTen2Sf2Ofb1Q==
content-length: 3795
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y8/l/0,cross/I25-2d8evgh.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y8/l/0,cross/I25-2d8evgh.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4431)
Hash a6aaf3625a4ea71fefe5acbc591b8114
7a9a1d0339ef6bf94586964aff811649dad143c2
df8f88c942eae50212a9c8f891d25e07cd8f390093f855c0ba17422343e1b060
GET /rsrc.php/v3/y8/l/0,cross/I25-2d8evgh.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 17:21:22 GMT
cache-control: public,max-age=31536000,immutable
timing-allow-origin: *
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-fb-rlafr: 0
content-md5: pqrzYlpOpx/v5ay8WRuBFA==
x-fb-debug: tb4PEjxyHVw5arWggnS7pC1Us4RrVYOXZDn1RKZsQEhqUVjcq/bLyKYYnzjh6xEJRa5YoNb058eT28mMWZp5Lg==
priority: u=2
content-length: 5321
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/Lc30SJd8cg0.css?_nc_x=Ij3Wp8lg5Kz
200 OK 8.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/Lc30SJd8cg0.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (14181)
Hash 86f62f8bcc034e4c2427de1c137d785a
49008630a7a71a1c92d173b0325d6f49736a3fbc
1e88707caeacfec22228615e15e3099bffca8135e1297ffe082c10c09f45931c
GET /rsrc.php/v3/yP/l/0,cross/Lc30SJd8cg0.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:29:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: hvYvi8wDTkwkJ94cE314Wg==
x-fb-debug: foMvqcdf+7S9qpT92XZmJX84bOybV+NfgQaaCYE3TuKsaAaHGSkOGuIG0NvFv6eHsQKBny9xYnHhRCusOKHuHQ==
content-length: 8387
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iLl54/yh/l/en_US/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz
200 OK 114 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iLl54/yh/l/en_US/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz
IP
Hash 65f16ca567d48ab341f9f4c64c5941f7
fd3ee3169c23014887a29450e5e93dc6ea777eae
5ba43f3c477789225b4c01537b9cca4b727ddad0acd1b9b3a2f86e54c7b389e8
GET /rsrc.php/v3iLl54/yh/l/en_US/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 04:56:53 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dzRxGBVHgZIJak35Crv6AQ==
x-fb-debug: l73CNUzO1kdOfLU/Z+pfpiy2ZQQgCKq/hajM2/jYyyXkZIAMPsN80ntRJPAON5ElmP8u6pdeBFiv1QaWBQXazQ==
priority: u=3,i
content-length: 8360
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yi/r/KwpEYRsE-q0.js?_nc_x=Ij3Wp8lg5Kz
200 OK 2.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yi/r/KwpEYRsE-q0.js?_nc_x=Ij3Wp8lg5Kz
IP
Hash 8bb456647dce20d407811b3ddcae0999
c4df3fb38a35fd018a2f0f7a7009fa9aacac40db
fcdaa4a9116d5ab88233e3349fea2428f2a4c46b3538900117cef9c8c1d31f0c
GET /rsrc.php/v3/yi/r/KwpEYRsE-q0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 02:59:46 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: qh/lmGqaWKhNpS76Xtnz5g==
x-fb-debug: nZVfXQwVrim6a5+J8E53d0gLq6mMZEdueQvDGcuez6xHgCZC3kilPycZAOAIbhZDmqkR25tBv0HeChUc6P413A==
content-length: 48178
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iEBX4/yg/l/en_US/L3rRYxmZ_M5.js?_nc_x=Ij3Wp8lg5Kz
200 OK 48 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iEBX4/yg/l/en_US/L3rRYxmZ_M5.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (65319)
Hash 1146bb346eda759bb21697da90e3d2c1
6007fd31ffea56f88608e8b05b4b8e75d99171e3
c68c4775bfaefbe7cc789e7a685fdf4449270a91071d1528b59cd8d5067a7a2d
GET /rsrc.php/v3iEBX4/yg/l/en_US/L3rRYxmZ_M5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:29:03 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: uh4Yt5cklE+UbFWh3J1Ggg==
x-fb-debug: nBRA8ZPkvztdoHMmSMEaIbC3ylqvA7kB6eCdebPnI8UBMlHe8e1bVMacTssF6Py7uMurV20VSaXAp57Fvc+zEA==
content-length: 6746
x-fb-trip-id: 1904183273
date: Tue, 15 Nov 2022 08:05:42 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fasdcolleprimavera%2F&width=184&connections=6&stream=true&header=true&height=587
200 OK 104 kB URL HTTP/2 www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fasdcolleprimavera%2F&width=184&connections=6&stream=true&header=true&height=587
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (57025)
Size 104 kB (104235 bytes)
Hash a7a1e2591f1155f1965ff37d79fe46f3
bb2ac35d91480f4f85c52472bee6c2261e027988
0727cfc94bf0306d921c530f7a741ee60eb2d195fb7525512e1475b57e4b2224
GET /plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fasdcolleprimavera%2F&width=184&connections=6&stream=true&header=true&height=587 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://colleprimavera.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: 0vi3SThYSA9lLW3uPQJTJIdaszC1MJT5DiscwauC1s7pBnF9F1ck33iQOZUVS4h8mWDZixgDUCcxw1uKjVIjng==
date: Tue, 15 Nov 2022 08:05:42 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t39.25447-2/310833325_1452156195282167_4064078586845756820_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTgwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=3_Wmptx1aCUAX9vvnDq&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfA4p7dm2QQk8vd1d--XOdHt0BlhW5rRLVeGO8FWLhQZ2A&oe=6378F7E2&bytestart=840&byteend=907
200 OK 68 B URL HTTP/2 video.xx.fbcdn.net/v/t39.25447-2/310833325_1452156195282167_4064078586845756820_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTgwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=3_Wmptx1aCUAX9vvnDq&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfA4p7dm2QQk8vd1d--XOdHt0BlhW5rRLVeGO8FWLhQZ2A&oe=6378F7E2&bytestart=840&byteend=907
IP
Hash 32b2f883d2539a9e80d3583aa25ce10b
d6a9b91cd9403d01c2511625f885ecfe5e47766b
4505dd6bf8ea6aa9d410c87032afef04e633929d68ee05a5afa9de0ba2b1911c
GET /v/t39.25447-2/310833325_1452156195282167_4064078586845756820_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTgwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=3_Wmptx1aCUAX9vvnDq&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfA4p7dm2QQk8vd1d--XOdHt0BlhW5rRLVeGO8FWLhQZ2A&oe=6378F7E2&bytestart=840&byteend=907 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 07:24:29 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 3798777283
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3798777283
content-length: 68
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/311074969_773757377035253_8725797693741942089_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=At1sS4SlVDIAX_hvSzB&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfBUaHB1Nnnz7PIgDKYzaZIq3kQcz_mNqQiTD8hjt2CcEA&oe=6373711C&bytestart=0&byteend=782
200 OK 783 B URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/311074969_773757377035253_8725797693741942089_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=At1sS4SlVDIAX_hvSzB&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfBUaHB1Nnnz7PIgDKYzaZIq3kQcz_mNqQiTD8hjt2CcEA&oe=6373711C&bytestart=0&byteend=782
IP
File type ISO Media, MP4 Base Media v5 \012- data
Hash 63b1b8d1d9a53e810d4c5c36391fbd57
477b6670f23ee9f7c97e6f169a399f2978c3cc9f
0a791e8a729d9cf80b81c1ab0807de75977cafa070c3eb8fc27ad3bbcf30991e
GET /v/t42.1790-2/311074969_773757377035253_8725797693741942089_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=At1sS4SlVDIAX_hvSzB&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfBUaHB1Nnnz7PIgDKYzaZIq3kQcz_mNqQiTD8hjt2CcEA&oe=6373711C&bytestart=0&byteend=782 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 06:46:18 GMT
content-type: video/mp4
x-haystack-needlechecksum: 1502301510
x-needle-checksum: 1922985795
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1922985795
content-length: 783
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: ScPbSAyMdqUolPMqyPGMP5VE6fG1bMcY4m1TU83BRQldnW-Fo41u3FAbqzcbbVuHpmIUbcNc0HBn52FkkQ7a9kFk1GBN0wOcfjvUo6TrBzY
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/311074969_773757377035253_8725797693741942089_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=At1sS4SlVDIAX_hvSzB&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfBUaHB1Nnnz7PIgDKYzaZIq3kQcz_mNqQiTD8hjt2CcEA&oe=6373711C&bytestart=911&byteend=17644
200 OK 17 kB URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/311074969_773757377035253_8725797693741942089_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=At1sS4SlVDIAX_hvSzB&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfBUaHB1Nnnz7PIgDKYzaZIq3kQcz_mNqQiTD8hjt2CcEA&oe=6373711C&bytestart=911&byteend=17644
IP
File type Maple something\012- data
Hash 956998751bc2798836db060f66076401
5bfaf53826a9d139f85641a6fa48b1589b2fcaa3
6294499456f3ccd73944e31c3517bdd44ba1e8e153a7c6533b0362087075cb69
GET /v/t42.1790-2/311074969_773757377035253_8725797693741942089_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=At1sS4SlVDIAX_hvSzB&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfBUaHB1Nnnz7PIgDKYzaZIq3kQcz_mNqQiTD8hjt2CcEA&oe=6373711C&bytestart=911&byteend=17644 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 06:46:18 GMT
content-type: video/mp4
x-haystack-needlechecksum: 1502301510
x-needle-checksum: 1922985795
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1922985795
content-length: 16734
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/311074969_773757377035253_8725797693741942089_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=At1sS4SlVDIAX_hvSzB&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfBUaHB1Nnnz7PIgDKYzaZIq3kQcz_mNqQiTD8hjt2CcEA&oe=6373711C&bytestart=783&byteend=910
200 OK 128 B URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/311074969_773757377035253_8725797693741942089_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=At1sS4SlVDIAX_hvSzB&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfBUaHB1Nnnz7PIgDKYzaZIq3kQcz_mNqQiTD8hjt2CcEA&oe=6373711C&bytestart=783&byteend=910
IP
Hash 258d69e872b72a952638d18377c06eca
1633f3afce1558a725b525020be23c9476befb2c
84e019881e137f32f3b04d4f6863850496d883b4a146cdf076562a8b13807e70
GET /v/t42.1790-2/311074969_773757377035253_8725797693741942089_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=At1sS4SlVDIAX_hvSzB&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfBUaHB1Nnnz7PIgDKYzaZIq3kQcz_mNqQiTD8hjt2CcEA&oe=6373711C&bytestart=783&byteend=910 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 06:46:18 GMT
content-type: video/mp4
x-haystack-needlechecksum: 1502301510
x-needle-checksum: 1922985795
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1922985795
content-length: 128
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/311574820_164226106210973_8029660095213654903_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=tL8k8vEYl10AX9zICYg&_nc_oc=AQkbsESTV9EdIGi7oZUkmY3Whsly3ouZikMMKVieA8znHQ6JspXZNSWvimbrAHZ2jbc&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB0xsFqD55c0y2RcbedjfZ9k2ZdW4QD4EF68no6qqcOMA&oe=6373651F&bytestart=783&byteend=1066
200 OK 284 B URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/311574820_164226106210973_8029660095213654903_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=tL8k8vEYl10AX9zICYg&_nc_oc=AQkbsESTV9EdIGi7oZUkmY3Whsly3ouZikMMKVieA8znHQ6JspXZNSWvimbrAHZ2jbc&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB0xsFqD55c0y2RcbedjfZ9k2ZdW4QD4EF68no6qqcOMA&oe=6373651F&bytestart=783&byteend=1066
IP
Hash ef5764f8796d5b3c6bcba854682f4b19
632e9419d4638c7002a9fa65a2400ce8b9accf65
1d7a8fa39ed64f361d310a72c1473a360c87b2883a190c4dee1b2c4d82bdb29d
GET /v/t42.1790-2/311574820_164226106210973_8029660095213654903_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=tL8k8vEYl10AX9zICYg&_nc_oc=AQkbsESTV9EdIGi7oZUkmY3Whsly3ouZikMMKVieA8znHQ6JspXZNSWvimbrAHZ2jbc&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB0xsFqD55c0y2RcbedjfZ9k2ZdW4QD4EF68no6qqcOMA&oe=6373651F&bytestart=783&byteend=1066 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 10:16:34 GMT
content-type: video/mp4
x-haystack-needlechecksum: 1192061770
x-needle-checksum: 2896825576
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2896825576
content-length: 284
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: e7cIbytj5qzACjOSn3JuXbcIAhKTOUipDLxY5v441CmPgTFi0C4dFE6zY2PD1S-YdJ-8eDjv-UZ0xKBSqy-o3wL8aw598nH_u6xjK-9I9wI
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/311574820_164226106210973_8029660095213654903_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=tL8k8vEYl10AX9zICYg&_nc_oc=AQkbsESTV9EdIGi7oZUkmY3Whsly3ouZikMMKVieA8znHQ6JspXZNSWvimbrAHZ2jbc&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB0xsFqD55c0y2RcbedjfZ9k2ZdW4QD4EF68no6qqcOMA&oe=6373651F&bytestart=0&byteend=782
200 OK 783 B URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/311574820_164226106210973_8029660095213654903_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=tL8k8vEYl10AX9zICYg&_nc_oc=AQkbsESTV9EdIGi7oZUkmY3Whsly3ouZikMMKVieA8znHQ6JspXZNSWvimbrAHZ2jbc&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB0xsFqD55c0y2RcbedjfZ9k2ZdW4QD4EF68no6qqcOMA&oe=6373651F&bytestart=0&byteend=782
IP
File type ISO Media, MP4 Base Media v5 \012- data
Hash 895e21c0198fb8a902e7f737a03b877d
c66fcb33146dd918095568bd84d728d04cad098a
d4ff474ad8533149213d457e63e7de70a7090ab73fe00b609b4063b279894530
GET /v/t42.1790-2/311574820_164226106210973_8029660095213654903_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=tL8k8vEYl10AX9zICYg&_nc_oc=AQkbsESTV9EdIGi7oZUkmY3Whsly3ouZikMMKVieA8znHQ6JspXZNSWvimbrAHZ2jbc&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB0xsFqD55c0y2RcbedjfZ9k2ZdW4QD4EF68no6qqcOMA&oe=6373651F&bytestart=0&byteend=782 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 10:16:34 GMT
content-type: video/mp4
x-haystack-needlechecksum: 1192061770
x-needle-checksum: 2896825576
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2896825576
content-length: 783
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/311574820_164226106210973_8029660095213654903_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=tL8k8vEYl10AX9zICYg&_nc_oc=AQkbsESTV9EdIGi7oZUkmY3Whsly3ouZikMMKVieA8znHQ6JspXZNSWvimbrAHZ2jbc&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB0xsFqD55c0y2RcbedjfZ9k2ZdW4QD4EF68no6qqcOMA&oe=6373651F&bytestart=1067&byteend=17584
200 OK 16 kB URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/311574820_164226106210973_8029660095213654903_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=tL8k8vEYl10AX9zICYg&_nc_oc=AQkbsESTV9EdIGi7oZUkmY3Whsly3ouZikMMKVieA8znHQ6JspXZNSWvimbrAHZ2jbc&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB0xsFqD55c0y2RcbedjfZ9k2ZdW4QD4EF68no6qqcOMA&oe=6373651F&bytestart=1067&byteend=17584
IP
File type Maple something\012- data
Hash c1b1d6fd9ad8ee9fecc8a01cdda16676
eb552770c822d550d0920883019926d03182e0df
4782ba0e3084258372d7e8b493d6412f450ca5125251a515e975badbfe4fb3af
GET /v/t42.1790-2/311574820_164226106210973_8029660095213654903_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=tL8k8vEYl10AX9zICYg&_nc_oc=AQkbsESTV9EdIGi7oZUkmY3Whsly3ouZikMMKVieA8znHQ6JspXZNSWvimbrAHZ2jbc&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB0xsFqD55c0y2RcbedjfZ9k2ZdW4QD4EF68no6qqcOMA&oe=6373651F&bytestart=1067&byteend=17584 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 10:16:34 GMT
content-type: video/mp4
x-haystack-needlechecksum: 1192061770
x-needle-checksum: 2896825576
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2896825576
content-length: 16518
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t39.25447-2/311586760_503367121640696_2882014033134930600_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTcwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=XlC0XGBmbTwAX_GijdD&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB20-d_LveBxJE41nYy2_yfLltkWNpEZAycQy1SYG2eJg&oe=6378B759&bytestart=0&byteend=840
200 OK 841 B URL HTTP/2 video.xx.fbcdn.net/v/t39.25447-2/311586760_503367121640696_2882014033134930600_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTcwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=XlC0XGBmbTwAX_GijdD&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB20-d_LveBxJE41nYy2_yfLltkWNpEZAycQy1SYG2eJg&oe=6378B759&bytestart=0&byteend=840
IP
File type ISO Media, MP4 Base Media v5 \012- data
Hash 9a33119af32043002495d4e4d44bfcdb
c9622ab940056de87334b977312ead4d71e3f269
58db95ada2e2f7f2d3cea69e6bbeb8143efa3df5cc3e8de9e1790af967b59f57
GET /v/t39.25447-2/311586760_503367121640696_2882014033134930600_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTcwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=XlC0XGBmbTwAX_GijdD&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB20-d_LveBxJE41nYy2_yfLltkWNpEZAycQy1SYG2eJg&oe=6378B759&bytestart=0&byteend=840 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 10:21:51 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 1832076719
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1832076719
content-length: 841
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t39.25447-2/311586760_503367121640696_2882014033134930600_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTcwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=XlC0XGBmbTwAX_GijdD&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB20-d_LveBxJE41nYy2_yfLltkWNpEZAycQy1SYG2eJg&oe=6378B759&bytestart=969&byteend=618189
200 OK 617 kB URL HTTP/2 video.xx.fbcdn.net/v/t39.25447-2/311586760_503367121640696_2882014033134930600_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTcwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=XlC0XGBmbTwAX_GijdD&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB20-d_LveBxJE41nYy2_yfLltkWNpEZAycQy1SYG2eJg&oe=6378B759&bytestart=969&byteend=618189
IP
Size 617 kB (617221 bytes)
Hash 06f4026bbab12def6dd4b08300081be4
dd44a8cc328ead560a477a0a9523a76a48640d6c
c4d1cf50592d83848bb0649537428f30c552e767ba7b9b9a597c8ab62da64cd7
GET /v/t39.25447-2/311586760_503367121640696_2882014033134930600_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTcwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=XlC0XGBmbTwAX_GijdD&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB20-d_LveBxJE41nYy2_yfLltkWNpEZAycQy1SYG2eJg&oe=6378B759&bytestart=969&byteend=618189 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 10:21:51 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 1832076719
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1832076719
content-length: 617221
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: 06jhJgxmmU3FEusCOv0xY2pwI9sRkxsiJbPj_NLFFx8TcucL5M7kh-p7PMz5cnN0hyubW6pT-RWfVkp8fucjFAr5pIKyA_yvD7zu1ADXqU8
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t39.25447-2/311586760_503367121640696_2882014033134930600_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTcwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=XlC0XGBmbTwAX_GijdD&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB20-d_LveBxJE41nYy2_yfLltkWNpEZAycQy1SYG2eJg&oe=6378B759&bytestart=841&byteend=968
200 OK 128 B URL HTTP/2 video.xx.fbcdn.net/v/t39.25447-2/311586760_503367121640696_2882014033134930600_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTcwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=XlC0XGBmbTwAX_GijdD&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB20-d_LveBxJE41nYy2_yfLltkWNpEZAycQy1SYG2eJg&oe=6378B759&bytestart=841&byteend=968
IP
Hash ac44516993342f2cc695043b4c395384
2fb2f9ae383e391ffdc24a2c20eb24155a2e80dd
e851864f4ede64216b653a34e7e40e6d9cc09a4dbff83220b0f8a98690c19b01
GET /v/t39.25447-2/311586760_503367121640696_2882014033134930600_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTcwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=XlC0XGBmbTwAX_GijdD&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfB20-d_LveBxJE41nYy2_yfLltkWNpEZAycQy1SYG2eJg&oe=6378B759&bytestart=841&byteend=968 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 10:21:51 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 1832076719
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1832076719
content-length: 128
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: UBi0V2fh58bNzYKqE9ZddkUPI4U5H3rVjXDKmT_unyRkrzj1YlcYU75EqOi8mTRauxdrljE7PrkeX2nK7mwRGGO2zgPDVeK0Kobk8nLpWuY
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t39.25447-2/310833325_1452156195282167_4064078586845756820_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTgwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=3_Wmptx1aCUAX9vvnDq&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfA4p7dm2QQk8vd1d--XOdHt0BlhW5rRLVeGO8FWLhQZ2A&oe=6378F7E2&bytestart=908&byteend=1056234
200 OK 1.1 MB URL HTTP/2 video.xx.fbcdn.net/v/t39.25447-2/310833325_1452156195282167_4064078586845756820_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTgwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=3_Wmptx1aCUAX9vvnDq&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfA4p7dm2QQk8vd1d--XOdHt0BlhW5rRLVeGO8FWLhQZ2A&oe=6378F7E2&bytestart=908&byteend=1056234
IP
Size 1.1 MB (1055327 bytes)
Hash d04af271c67b2952940089afb7de85f1
a9262ad0be76e541c991cfee0168d7146663ae4c
0c0f94626f87998960233fb654eb01c47fe3dc10174cd5defe06e84bedb41ee0
GET /v/t39.25447-2/310833325_1452156195282167_4064078586845756820_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTgwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=3_Wmptx1aCUAX9vvnDq&_nc_ht=video.xx&edm=AEDRbFQEAAAA&oh=00_AfA4p7dm2QQk8vd1d--XOdHt0BlhW5rRLVeGO8FWLhQZ2A&oe=6378F7E2&bytestart=908&byteend=1056234 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Oct 2022 07:24:29 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 3798777283
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3798777283
content-length: 1055327
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 15 Nov 2022 08:05:43 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
colleprimavera.com/common_solswv1/js/highslide_last/graphics/loader.white.gif
200 OK 673 B URL HTTP/1.1 colleprimavera.com/common_solswv1/js/highslide_last/graphics/loader.white.gif
IP
ASN #39729 Register S.p.A.
File type GIF image data, version 89a, 16 x 16\012- data
Hash 2a6692973429d7a74513bfa8bcb5be20
f2af060f1cadbc9065c8c465c648dc01be67cc12
1eb9e7880f723999a4ed63eece6a6e4d4976833d3c16dc18b4ace3971728ab0d
GET /common_solswv1/js/highslide_last/graphics/loader.white.gif HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/common_solswv1/js/highslide_last/highslide.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:44 GMT
Server: Apache
Last-Modified: Tue, 08 Sep 2015 13:06:44 GMT
Accept-Ranges: bytes
Content-Length: 673
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:44 GMT
Content-Type: image/gif
Content-Language: it
Keep-Alive: timeout=2, max=90
Connection: Keep-Alive
colleprimavera.com/common_solswv1/js/highslide_last/graphics/zoomout.cur
200 OK 164 B URL HTTP/1.1 colleprimavera.com/common_solswv1/js/highslide_last/graphics/zoomout.cur
IP
ASN #39729 Register S.p.A.
File type MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @7x7\012- data
Hash 09b323e3edd22380e99daca86f87f3d3
76dd34d4d24c9c12fe22da39812057fa6d3c4997
1797884d6d6b517166b529d25f11b743942a2f6fbbaccd24abaa59b351866243
Analyzer Verdict Alert fortinet Phishing
GET /common_solswv1/js/highslide_last/graphics/zoomout.cur HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:44 GMT
Server: Apache
Last-Modified: Tue, 08 Sep 2015 13:06:44 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:44 GMT
Content-Type: text/plain
Content-Language: it
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 164
Keep-Alive: timeout=2, max=90
Connection: Keep-Alive
colleprimavera.com/common_solswv1/js/highslide_last/graphics/outlines/rounded-white.png
200 OK 2.1 kB URL HTTP/1.1 colleprimavera.com/common_solswv1/js/highslide_last/graphics/outlines/rounded-white.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 40 x 3000, 8-bit gray+alpha, non-interlaced\012- data
Hash ff904e99a0ecb32a27642d389adb91ba
c4ef235dcc34844e4050f845ff4ce22ce35fe0b8
e82d0547f662dc02f6d55c082758f5aac71937fee44bc0cb0f106f85b5fe2f81
GET /common_solswv1/js/highslide_last/graphics/outlines/rounded-white.png HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:44 GMT
Server: Apache
Last-Modified: Tue, 08 Sep 2015 13:06:44 GMT
Accept-Ranges: bytes
Content-Length: 2050
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:44 GMT
Content-Type: image/png
Content-Language: it
Keep-Alive: timeout=2, max=90
Connection: Keep-Alive
colleprimavera.com/images/header2.jpg
200 OK 54 kB URL HTTP/1.1 colleprimavera.com/images/header2.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 740x240, components 3\012- data
Hash d61d36249c72be931e9ff2f67edc6792
ba8f46f678cded21ff1da366819c71d874647601
a2a9c17b899aecd595d8240d62c7a5f428fb663cbedf719303906e60cb853b67
GET /images/header2.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:44 GMT
Server: Apache
Last-Modified: Thu, 04 Jan 2018 18:56:33 GMT
Accept-Ranges: bytes
Content-Length: 54473
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:44 GMT
Keep-Alive: timeout=2, max=89
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
colleprimavera.com/images/header3.jpg
200 OK 71 kB URL HTTP/1.1 colleprimavera.com/images/header3.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 740x240, components 3\012- data
Hash 6f36fe630fc4c033146579548e71586e
295f749c33b5ee2b589731cb03a1c2c1ebf90d6d
f34996aabb385683289cc6870fef3ea63d2f88636f1ed7892c40977c332b1e16
GET /images/header3.jpg HTTP/1.1
Host: colleprimavera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://colleprimavera.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 08:05:44 GMT
Server: Apache
Last-Modified: Thu, 04 Jan 2018 18:56:33 GMT
Accept-Ranges: bytes
Content-Length: 70733
Cache-Control: max-age=2592000
Expires: Thu, 15 Dec 2022 08:05:44 GMT
Keep-Alive: timeout=2, max=88
Connection: Keep-Alive
Content-Type: image/jpeg
Content-Language: it
www.youtube.com/embed/oI9dn0GjnAM?rel=0&border=0&autoplay=false&loop=false
200 OK 0 B URL HTTP/2 www.youtube.com/embed/oI9dn0GjnAM?rel=0&border=0&autoplay=false&loop=false
IP
GET /embed/oI9dn0GjnAM?rel=0&border=0&autoplay=false&loop=false HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://colleprimavera.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 15 Nov 2022 08:05:40 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=LffE4PfpPP0; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=KEf7iUG-oDo; Domain=.youtube.com; Expires=Sun, 14-May-2023 08:05:40 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+821; expires=Thu, 14-Nov-2024 08:05:40 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=PT+Sans+Narrow
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=PT+Sans+Narrow
IP
GET /css?family=PT+Sans+Narrow HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://colleprimavera.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 15 Nov 2022 08:05:40 GMT
date: Tue, 15 Nov 2022 08:05:40 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
81.88.57.80
142.250.74.3
31.13.72.36
93.184.220.29
23.36.76.226
0.0.0.0