r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 381442da2a14cb93770f4c8f6e19d35b
31c48467751e2450a63004c57eea0c7872023eaf
61b0985f47033bd7020ab3b8cdcbc6c17be6ab9b6feba69e006088b78e21c0f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61B0985F47033BD7020AB3B8CDCBC6C17BE6AB9B6FEBA69E006088B78E21C0F0"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6577
Expires: Thu, 15 Dec 2022 13:38:41 GMT
Date: Thu, 15 Dec 2022 11:49:04 GMT
Connection: keep-alive
www.haimar.co.uk/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.haimar.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 15 Dec 2022 11:49:04 GMT
Location: https://www.haimar.co.uk/
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4a5e9bc8b7891ac5f4552c29bcbaedb0
39735081eeb64eae477c61c1147daeb68fb37b22
c465efaf205ff2992af02c16187ca14a658cd5335b892903374f3adab32a8cd9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C465EFAF205FF2992AF02C16187CA14A658CD5335B892903374F3ADAB32A8CD9"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2547
Expires: Thu, 15 Dec 2022 12:31:31 GMT
Date: Thu, 15 Dec 2022 11:49:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51bd0cc75ed746fd33c950eb12936b7e
4a1007ea6c6e4f5e8b4a7d1f85f7a3e329dc8f50
188d4a0d544f40048dc7476cb4f5e478f1eb49a8ef1d51699fb155d2ae258655
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "188D4A0D544F40048DC7476CB4F5E478F1EB49A8EF1D51699FB155D2AE258655"
Last-Modified: Tue, 13 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7688
Expires: Thu, 15 Dec 2022 13:57:12 GMT
Date: Thu, 15 Dec 2022 11:49:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 15 Dec 2022 11:08:59 GMT
content-type: application/json
age: 2405
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DQAKYjB80qZHvVcJ9/xgztGHylDHxrGH57szL1ajfFL6+7V+k5CgqhWaxHmHL+4WVjP9tMrAzoU=
x-amz-request-id: VK09T78W4BA1D8H0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 15 Dec 2022 10:50:53 GMT
age: 3491
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 11:49:04 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/66sCo4g9cE8
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/66sCo4g9cE8
IP
Hash 3df9b4890dce68882541cf10c1aebae3
edab0b2716381ff4e38ddd029b60bf6e4a819a7d
2595a315c8fad7899927bab902243491912e4ee9f96b14f1225b7cba4bdcfeda
POST /s/gts1d4/66sCo4g9cE8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 15 Dec 2022 11:08:00 GMT
age: 2465
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b9f0adeb27a19629aeff6f34de67f3ad
3876d1b871d7da6d18de23c2edb301eb30728066
c5744a90c8f66629aa2331465a32afe0d430b36d16fd98bc821e370f1b24463c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2785
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Last-Modified: Thu, 15 Dec 2022 11:02:40 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7554f75e4959d216038e95962579e741
10f237248a234544391eb351e97515d385a372b3
cb2bc78887ed330dee49076c04ba87723fdc2a869a124dba2a475cac174480da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7554f75e4959d216038e95962579e741
10f237248a234544391eb351e97515d385a372b3
cb2bc78887ed330dee49076c04ba87723fdc2a869a124dba2a475cac174480da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e709a04ea80113c435ca4f9d37e93e7
053f34d74eded192d698bb20956897ec3e3ad23b
2535554bd9d9004c7888cde496278d847002218fb1d35a3d4bacdd98c8a92ff9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/_/atari/_/ss/k=atari.vw.r6fdONUztA4.L.F4.O/d=1/rs=AGEqA5mw57ioKo-jnQHNCm4V__tFuj1xXQ
200 OK 136 kB URL HTTP/2 www.gstatic.com/_/atari/_/ss/k=atari.vw.r6fdONUztA4.L.F4.O/d=1/rs=AGEqA5mw57ioKo-jnQHNCm4V__tFuj1xXQ
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 136 kB (135811 bytes)
Hash 021264d50e4f7df80e53e6eefedf37fb
23d8e1c6a07686aaa027c5273c3800c4a9efc524
b669e455ffdcf2fcac68310e72ab629e14a39a7361eb56aaa2a5535026089fca
GET /_/atari/_/ss/k=atari.vw.r6fdONUztA4.L.F4.O/d=1/rs=AGEqA5mw57ioKo-jnQHNCm4V__tFuj1xXQ HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-sites"
report-to: {"group":"apps-sites","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-sites"}]}
content-length: 135811
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Dec 2022 21:30:24 GMT
expires: Tue, 12 Dec 2023 21:30:24 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 16:44:36 GMT
content-type: text/css; charset=UTF-8
age: 224321
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e709a04ea80113c435ca4f9d37e93e7
053f34d74eded192d698bb20956897ec3e3ad23b
2535554bd9d9004c7888cde496278d847002218fb1d35a3d4bacdd98c8a92ff9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Lato%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&display=swap
200 OK 957 B URL HTTP/2 fonts.googleapis.com/css?family=Lato%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&display=swap
IP
Hash 9d50a83861b9a6838d04bfb74e74f066
8fdae03592aab4b28f2687edf7da328780d0225b
2642c7369c1683016d2a8008d517893b324b0877671ab01565c8e646adcfb2c3
GET /css?family=Lato%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Dec 2022 11:49:05 GMT
date: Thu, 15 Dec 2022 11:49:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: q7RUj07YvHOYXKIzlWgTgw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: s2AMn7hfHnn2GV4tD1bbuS+Uyr4=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ffd9494d7b15d0c02e09f86eb695397
0650b890aa6e1d7651089bfc3b298d5b8d88650d
ac0d60d80fcd6577aefe03b46683d3f087cbada34717a3e53ec31cfeb0ed11e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/client.js?onload=gapiLoaded
200 OK 6.9 kB URL HTTP/2 apis.google.com/js/client.js?onload=gapiLoaded
IP
File type ASCII text, with very long lines (2054)
Hash 6522f3e96bb63666902e67d897064b84
4ef40dd1590a7e8fd8a04226865397aab7a17da4
302af74c7a06c1d733e0b82b7580da16d551bc311091127d055c73526778c802
GET /js/client.js?onload=gapiLoaded HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 6895
date: Thu, 15 Dec 2022 11:49:05 GMT
expires: Thu, 15 Dec 2022 11:49:05 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "1e102293481e69ec"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 500d7838b7582b456b8025ffe03ac9a8
ba64ec0d9ae36361848bc1be73a99e7c38575271
0da1844c4988d6497821f944b47dd19158be73f10deac19945ebdd9c18927485
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Google+Sans:400,500|Roboto:300,400,500,700|Source+Code+Pro:400,700&display=swap
200 OK 1.8 kB URL HTTP/2 fonts.googleapis.com/css?family=Google+Sans:400,500|Roboto:300,400,500,700|Source+Code+Pro:400,700&display=swap
IP
Hash 488a896723f04cd0badb1e51f67bed54
e8489fa7f9821a38926113f9668e838db1e226ae
3139179f5b531ac2920eb6ce7eeda5f0011d6fce7461988b6638f766e94bfa2e
GET /css?family=Google+Sans:400,500|Roboto:300,400,500,700|Source+Code+Pro:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Dec 2022 11:49:05 GMT
date: Thu, 15 Dec 2022 11:49:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 215b076267525eee2fadb8d889e5f351
28d0a048b68627916191262fee89a8db4b1614b2
44da07142c9aad7201a7ccb38b4bf03c82f1a66b730a953c0306fe09e3025ad5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 215b076267525eee2fadb8d889e5f351
28d0a048b68627916191262fee89a8db4b1614b2
44da07142c9aad7201a7ccb38b4bf03c82f1a66b730a953c0306fe09e3025ad5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-CQE927S36R
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-CQE927S36R
IP
File type ASCII text, with very long lines (20080)
Hash 56d63d3cbcd6a0d535d91e0a5841c443
5af6829c5885aa6eed60210dee2ab7fa5f28a6a5
3115b4ae005daa608409d777c3b4e5fe414a181b2dacc0f95ab3fb56797cea61
GET /gtag/js?id=G-CQE927S36R HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 Dec 2022 11:49:05 GMT
expires: Thu, 15 Dec 2022 11:49:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76258
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maps-api-ssl.google.com/maps?hl=en-US&ll=31.476408,74.305627&output=embed&q=Faisal+Town,+Lahore,+Punjab,+Pakistan+(Faisal+Town)&z=13
301 Moved Permanently 404 B URL HTTP/2 maps-api-ssl.google.com/maps?hl=en-US&ll=31.476408,74.305627&output=embed&q=Faisal+Town,+Lahore,+Punjab,+Pakistan+(Faisal+Town)&z=13
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash cbc70479047485e8241d607d336d0e81
84eea40d2e1b58c5a19300f5fd9c314f545e151e
b1e711674a1edd701e46b56a395f2798929ee6bc3348581f9a40507b744739af
GET /maps?hl=en-US&ll=31.476408,74.305627&output=embed&q=Faisal+Town,+Lahore,+Punjab,+Pakistan+(Faisal+Town)&z=13 HTTP/1.1
Host: maps-api-ssl.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 15 Dec 2022 11:49:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d54443.797464562289!2d74.305627!3d31.476408!3m2!1i1024!2i768!4f13.1!2m1!1sFaisal+Town,+Lahore,+Punjab,+Pakistan!6i13!3m1!1sen-US!5m1!1sen-US
content-type: text/html; charset=UTF-8
server: mafe
content-length: 404
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.haimar.co.uk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:33:56 GMT
expires: Thu, 14 Dec 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 58509
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.haimar.co.uk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:12 GMT
expires: Sat, 09 Dec 2023 13:33:12 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
age: 512153
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.haimar.co.uk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:12 GMT
expires: Sat, 09 Dec 2023 13:33:12 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
age: 512153
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
200 OK 28 kB URL HTTP/2 fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 28288, version 1.0\012- data
Hash 53b5e785dfdca21fa7adf7119fa1f8cc
a3a86dfd216ad29183ba5493ae39d45b62f9d8b8
4a6fab14bfe7b33fe5dc5349a2bb3720037e0ed7ebe621b352340f9514d83c08
GET /s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.haimar.co.uk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 20:35:00 GMT
expires: Thu, 14 Dec 2023 20:35:00 GMT
cache-control: public, max-age=31536000
age: 54845
last-modified: Wed, 01 Jun 2022 19:05:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maps-api-ssl.google.com/maps?hl=en-US&ll=51.431257,-3.189359&output=embed&q=Cedar+Way,+Penarth+CF64+3PX,+UK+(Cedar+Way)&z=16
301 Moved Permanently 398 B URL HTTP/2 maps-api-ssl.google.com/maps?hl=en-US&ll=51.431257,-3.189359&output=embed&q=Cedar+Way,+Penarth+CF64+3PX,+UK+(Cedar+Way)&z=16
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 52270c5cbcaa7edfc39c9800abdeaebc
59b7a1131c7367e0d9d4762516592289854e16a2
95256db575d25dc968b52043e32c3ae7a526b548ec58ed673bba921734b61a34
GET /maps?hl=en-US&ll=51.431257,-3.189359&output=embed&q=Cedar+Way,+Penarth+CF64+3PX,+UK+(Cedar+Way)&z=16 HTTP/1.1
Host: maps-api-ssl.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 15 Dec 2022 11:49:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d4974.9294941982653!2d-3.189359!3d51.431257!3m2!1i1024!2i768!4f13.1!2m1!1sCedar+Way,+Penarth+CF64+3PX,+UK!6i16!3m1!1sen-US!5m1!1sen-US
content-type: text/html; charset=UTF-8
server: mafe
content-length: 398
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24408, version 1.0\012- data
Hash efee2d080d7bebdd2e0aeb2e030813a0
f8d38f9f9584e48c2e469877ebd94232265585f1
bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.haimar.co.uk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 21:48:24 GMT
expires: Fri, 08 Dec 2023 21:48:24 GMT
cache-control: public, max-age=31536000
age: 568841
last-modified: Tue, 26 Apr 2022 15:50:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.haimar.co.uk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:33:54 GMT
expires: Thu, 14 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 58511
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Hash 716309aab2bca045f9627f63ad79d0bf
38804233a29aaf975d557fe14e762c627bef76e0
115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.haimar.co.uk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 17:11:14 GMT
expires: Wed, 13 Dec 2023 17:11:14 GMT
cache-control: public, max-age=31536000
age: 153471
last-modified: Tue, 26 Apr 2022 16:04:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maps-api-ssl.google.com/maps?hl=en-US&ll=53.454065,-2.21091&output=embed&q=173+Dickenson+Rd,+Longsight,+Manchester+M13+0YN,+UK+(173+Dickenson+Rd)&z=16
301 Moved Permanently 415 B URL HTTP/2 maps-api-ssl.google.com/maps?hl=en-US&ll=53.454065,-2.21091&output=embed&q=173+Dickenson+Rd,+Longsight,+Manchester+M13+0YN,+UK+(173+Dickenson+Rd)&z=16
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 42d71df5b2604fc00a47b24909406642
7c884d7bb50cab9487073a27cedb3f4553dfe7c9
835a338ccfff61197dbfa9ef6c5a1655b55cc35a13ef3e9bb97b3a1389a2e56f
GET /maps?hl=en-US&ll=53.454065,-2.21091&output=embed&q=173+Dickenson+Rd,+Longsight,+Manchester+M13+0YN,+UK+(173+Dickenson+Rd)&z=16 HTTP/1.1
Host: maps-api-ssl.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 15 Dec 2022 11:49:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d4751.61064049632!2d-2.21091!3d53.454065!3m2!1i1024!2i768!4f13.1!2m1!1s173+Dickenson+Rd,+Longsight,+Manchester+M13+0YN,+UK!6i16!3m1!1sen-US!5m1!1sen-US
content-type: text/html; charset=UTF-8
server: mafe
content-length: 415
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e30904bd9b57028f7ba1cc8e04ff08fd
9acb88374abef6387243ce8c5cf1149d73879ac1
be1ece2af7858ffc84e916d4554a805760c13a2eab346ac5a09a232b79116225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 215b076267525eee2fadb8d889e5f351
28d0a048b68627916191262fee89a8db4b1614b2
44da07142c9aad7201a7ccb38b4bf03c82f1a66b730a953c0306fe09e3025ad5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a29a4c6b4ba43b8d4b85a33b27279a06
a9177ccbe185ee26f4e92115a4bc5831b64d050b
c2409b47733ef77aeaf73719b0c5fd6294c50c5e579f6ab79f71503efad63e6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a29a4c6b4ba43b8d4b85a33b27279a06
a9177ccbe185ee26f4e92115a4bc5831b64d050b
c2409b47733ef77aeaf73719b0c5fd6294c50c5e579f6ab79f71503efad63e6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a29a4c6b4ba43b8d4b85a33b27279a06
a9177ccbe185ee26f4e92115a4bc5831b64d050b
c2409b47733ef77aeaf73719b0c5fd6294c50c5e579f6ab79f71503efad63e6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d4974.9294941982653!2d-3.189359!3d51.431257!3m2!1i1024!2i768!4f13.1!2m1!1sCedar+Way,+Penarth+CF64+3PX,+UK!6i16!3m1!1sen-US!5m1!1sen-US
200 OK 987 B URL HTTP/2 www.google.com/maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d4974.9294941982653!2d-3.189359!3d51.431257!3m2!1i1024!2i768!4f13.1!2m1!1sCedar+Way,+Penarth+CF64+3PX,+UK!6i16!3m1!1sen-US!5m1!1sen-US
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1606)
Hash 00c017897abf43c006681f4e729b7522
76282926d5f9b3d51f32624d7bf4b4872344327e
acfc514d97238ca5989c1dfe1ffc6ba5325b8c704fc365a08197130f04aed312
GET /maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d4974.9294941982653!2d-3.189359!3d51.431257!3m2!1i1024!2i768!4f13.1!2m1!1sCedar+Way,+Penarth+CF64+3PX,+UK!6i16!3m1!1sen-US!5m1!1sen-US HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 15 Dec 2022 11:49:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-58RWuDBxcgdryCWxZGSOZg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 987
x-xss-protection: 0
server-timing: gfet4t7; dur=228
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d54443.797464562289!2d74.305627!3d31.476408!3m2!1i1024!2i768!4f13.1!2m1!1sFaisal+Town,+Lahore,+Punjab,+Pakistan!6i13!3m1!1sen-US!5m1!1sen-US
200 OK 945 B URL HTTP/2 www.google.com/maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d54443.797464562289!2d74.305627!3d31.476408!3m2!1i1024!2i768!4f13.1!2m1!1sFaisal+Town,+Lahore,+Punjab,+Pakistan!6i13!3m1!1sen-US!5m1!1sen-US
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1510)
Hash 9721c8b326eb2212c4a7450056b5af5a
06497a0cb9a06eef64b9b99586d02e46d7c559a6
a10d920dec8712ee379e828ef281cfddf9bf51dd017016bc5e39a0244bf5933c
GET /maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d54443.797464562289!2d74.305627!3d31.476408!3m2!1i1024!2i768!4f13.1!2m1!1sFaisal+Town,+Lahore,+Punjab,+Pakistan!6i13!3m1!1sen-US!5m1!1sen-US HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 15 Dec 2022 11:49:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-dYkSnugvrYCx9UdmV-z_-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 945
x-xss-protection: 0
server-timing: gfet4t7; dur=262
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb84e6a011a9528eb9a80989e38b9273
0dfd05338986086205c7c7cc834710ecd977c595
7ef7ceaad733fe6d750d693f372ad861326524ee9c8c332b02728d85ae98e5e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb84e6a011a9528eb9a80989e38b9273
0dfd05338986086205c7c7cc834710ecd977c595
7ef7ceaad733fe6d750d693f372ad861326524ee9c8c332b02728d85ae98e5e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb84e6a011a9528eb9a80989e38b9273
0dfd05338986086205c7c7cc834710ecd977c595
7ef7ceaad733fe6d750d693f372ad861326524ee9c8c332b02728d85ae98e5e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d4751.61064049632!2d-2.21091!3d53.454065!3m2!1i1024!2i768!4f13.1!2m1!1s173+Dickenson+Rd,+Longsight,+Manchester+M13+0YN,+UK!6i16!3m1!1sen-US!5m1!1sen-US
200 OK 964 B URL HTTP/2 www.google.com/maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d4751.61064049632!2d-2.21091!3d53.454065!3m2!1i1024!2i768!4f13.1!2m1!1s173+Dickenson+Rd,+Longsight,+Manchester+M13+0YN,+UK!6i16!3m1!1sen-US!5m1!1sen-US
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1707)
Hash 6ca8f438572c1cf4fde3dacbbdf56807
f24c146feb29b78a34204f6d73172195d7d93e89
00b20bf4949e52511eca5472e21ff6bd9ebfb897d8524311fcf74dbf0f8994f4
GET /maps/embed?origin=mfe&pb=!1m12!1m8!1m3!1d4751.61064049632!2d-2.21091!3d53.454065!3m2!1i1024!2i768!4f13.1!2m1!1s173+Dickenson+Rd,+Longsight,+Manchester+M13+0YN,+UK!6i16!3m1!1sen-US!5m1!1sen-US HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 15 Dec 2022 11:49:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-eyiPNW1UqdUqwIHpOl922A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 964
x-xss-protection: 0
server-timing: gfet4t7; dur=272
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb84e6a011a9528eb9a80989e38b9273
0dfd05338986086205c7c7cc834710ecd977c595
7ef7ceaad733fe6d750d693f372ad861326524ee9c8c332b02728d85ae98e5e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb84e6a011a9528eb9a80989e38b9273
0dfd05338986086205c7c7cc834710ecd977c595
7ef7ceaad733fe6d750d693f372ad861326524ee9c8c332b02728d85ae98e5e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/Ygp9YKfTlq_iFfhVvKKixuvY0S7WyM0OJU2HNftejSgKL-5A1uvyB_gYLW72A23pKAvKJmpxFBrkkP3MJjkxV9U=w16383
200 OK 100 kB URL HTTP/2 lh3.googleusercontent.com/Ygp9YKfTlq_iFfhVvKKixuvY0S7WyM0OJU2HNftejSgKL-5A1uvyB_gYLW72A23pKAvKJmpxFBrkkP3MJjkxV9U=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "*", progressive, precision 8, 717x960, components 3\012- data
Size 100 kB (100274 bytes)
Hash 6cc728827c222ede9a6312f278054985
3633f91650e8b8c74eadb27743f74aa5a0452a7c
a60d2d51d169791bbeaea3d9f3d668b1073049b134f26667bf2e9fe1de64d889
GET /Ygp9YKfTlq_iFfhVvKKixuvY0S7WyM0OJU2HNftejSgKL-5A1uvyB_gYLW72A23pKAvKJmpxFBrkkP3MJjkxV9U=w16383 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="0B8reheyJa5sWVEZ6YXFVaU9sQUE=s2048.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 100274
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/WSTDKfY5FaxUjW3jGLpFsYrmL_ls_kFg7YlhtQLehynJ6zn9mhxhVPCunQd5Naeer74aiAdHhs1fczzTLk5aj7gMOHr7OAnwBYvlX4-UieBHzDT-PZrFZ1DUXE2lD6BvDLRMyO58v0w=w16383
200 OK 184 kB URL HTTP/2 lh4.googleusercontent.com/WSTDKfY5FaxUjW3jGLpFsYrmL_ls_kFg7YlhtQLehynJ6zn9mhxhVPCunQd5Naeer74aiAdHhs1fczzTLk5aj7gMOHr7OAnwBYvlX4-UieBHzDT-PZrFZ1DUXE2lD6BvDLRMyO58v0w=w16383
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2021:09:07 22:45:56], baseline, precision 8, 1366x768, components 3\012- data
Size 184 kB (183632 bytes)
Hash 0572b0689177624ebdd2614b1cefab38
c429e2232b14c8e73a172342136aabcc87d4008b
6733fbdf281512e67fb2b7dc4efca7622d9485f362becc75a15c8da8ab920cb1
GET /WSTDKfY5FaxUjW3jGLpFsYrmL_ls_kFg7YlhtQLehynJ6zn9mhxhVPCunQd5Naeer74aiAdHhs1fczzTLk5aj7gMOHr7OAnwBYvlX4-UieBHzDT-PZrFZ1DUXE2lD6BvDLRMyO58v0w=w16383 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="HM BUSINESS CARD-1 copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 183632
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/boahpy86TS9KPYkmLYP6IkX2_kIgj1qHzIWxi0T3KXUzifnSQSJyuFiG8oe9I7qUYvGAyyoMt_JLEwT_W3bC_mcbQ0B8JYnDTTEmENkc3N-xmBfx4YS-MWqUZxWR8wYeU9O3N7ozyFY=w16383
200 OK 152 kB URL HTTP/2 lh5.googleusercontent.com/boahpy86TS9KPYkmLYP6IkX2_kIgj1qHzIWxi0T3KXUzifnSQSJyuFiG8oe9I7qUYvGAyyoMt_JLEwT_W3bC_mcbQ0B8JYnDTTEmENkc3N-xmBfx4YS-MWqUZxWR8wYeU9O3N7ozyFY=w16383
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2021:09:16 13:09:00], baseline, precision 8, 563x704, components 3\012- data
Size 152 kB (152219 bytes)
Hash c95fde0c76f26dada8911514b6f91388
6bf0c58f7af110120bca662bef587761e685ca21
b3bd6aa4dfdadca821f2737c488190966b61c3bce23d78e7c5bdc4ba4c7e0e44
GET /boahpy86TS9KPYkmLYP6IkX2_kIgj1qHzIWxi0T3KXUzifnSQSJyuFiG8oe9I7qUYvGAyyoMt_JLEwT_W3bC_mcbQ0B8JYnDTTEmENkc3N-xmBfx4YS-MWqUZxWR8wYeU9O3N7ozyFY=w16383 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Business Strategy Transformation2 copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 152219
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/mJaHfcjdt8Swc3gg9OlDltOjRbtUfYIhL1szQ1aJGRPjVorhdUq6sv1tpnWojvF6m7byQb157ViBB23zbo2HQ8aJUxMjpOPjjOfO7DzEvvVn6nN_DcR4TNiSnn8xB3g7ifcq-JLiv4f8cOkTKKTv6FAwHqYK8gRvAoca6xBP996oXStErkpMWQ=w1280
200 OK 1.1 kB URL HTTP/2 lh3.googleusercontent.com/mJaHfcjdt8Swc3gg9OlDltOjRbtUfYIhL1szQ1aJGRPjVorhdUq6sv1tpnWojvF6m7byQb157ViBB23zbo2HQ8aJUxMjpOPjjOfO7DzEvvVn6nN_DcR4TNiSnn8xB3g7ifcq-JLiv4f8cOkTKKTv6FAwHqYK8gRvAoca6xBP996oXStErkpMWQ=w1280
IP
File type PNG image data, 225 x 191, 8-bit colormap, non-interlaced\012- data
Hash ff97792cc7a5c2b5cf50ab33e178382c
d298d2eb984bdf7d25d451822d3cebbb016b5594
7063b0843d10e1d63b24cca7a4a2ada2cb1cca6508196fd071f23222714ef9cb
GET /mJaHfcjdt8Swc3gg9OlDltOjRbtUfYIhL1szQ1aJGRPjVorhdUq6sv1tpnWojvF6m7byQb157ViBB23zbo2HQ8aJUxMjpOPjjOfO7DzEvvVn6nN_DcR4TNiSnn8xB3g7ifcq-JLiv4f8cOkTKKTv6FAwHqYK8gRvAoca6xBP996oXStErkpMWQ=w1280 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 1121
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/_C2SsaoSVnWANVtVSGFQCkQwvFCfiBylqYRhp5e1r4rDk5eq7p-M6I7OMq_wwfW5Lc3qgWIhn_PlSiS4JtqSWiQHIXOjWoy-podGRekK_fgyf_HAZZIr3hwOqZkI_9yI4AorNPJgyco=w16383
200 OK 89 kB URL HTTP/2 lh6.googleusercontent.com/_C2SsaoSVnWANVtVSGFQCkQwvFCfiBylqYRhp5e1r4rDk5eq7p-M6I7OMq_wwfW5Lc3qgWIhn_PlSiS4JtqSWiQHIXOjWoy-podGRekK_fgyf_HAZZIr3hwOqZkI_9yI4AorNPJgyco=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x688, components 3\012- data
Hash a9d76b157a6de74aa648c8003a37cb08
9ad4ef5751fa81ac008ed7be686fb018a675bf15
1fdb4529d53c78f015527855855d58f472f1611931981336f85a403bd3f17458
GET /_C2SsaoSVnWANVtVSGFQCkQwvFCfiBylqYRhp5e1r4rDk5eq7p-M6I7OMq_wwfW5Lc3qgWIhn_PlSiS4JtqSWiQHIXOjWoy-podGRekK_fgyf_HAZZIr3hwOqZkI_9yI4AorNPJgyco=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="56225970_2296546220568720_2845841782686613504_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 88633
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/8lopaXnSLY7OVv74kWC4QuvyWXEtkrYY8D_tx-fCDawFloAJWjPysibTzivD9ncF-c2EHJSsEtHG8Wzkp0_IFBnioExVHBh9sVAgupAI8l5Xeg_1SFfGStsLEYl7itQN09xJpxSr0hg=w16383
200 OK 175 kB URL HTTP/2 lh3.googleusercontent.com/8lopaXnSLY7OVv74kWC4QuvyWXEtkrYY8D_tx-fCDawFloAJWjPysibTzivD9ncF-c2EHJSsEtHG8Wzkp0_IFBnioExVHBh9sVAgupAI8l5Xeg_1SFfGStsLEYl7itQN09xJpxSr0hg=w16383
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2022:01:27 14:38:38], baseline, precision 8, 1100x700, components 3\012- data
Size 175 kB (174706 bytes)
Hash a68eef452d2387e973d5e616f780fc15
cf1dfa722e8ffe3c5ea15ee35a8a162898ce1fae
2de365f7b0584512f1a9ae93e93c43a34e0df98c38c5fe8b1688834b5afa364d
GET /8lopaXnSLY7OVv74kWC4QuvyWXEtkrYY8D_tx-fCDawFloAJWjPysibTzivD9ncF-c2EHJSsEtHG8Wzkp0_IFBnioExVHBh9sVAgupAI8l5Xeg_1SFfGStsLEYl7itQN09xJpxSr0hg=w16383 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="3web copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 174706
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/S21J5nI0rsO5i7XvjySxEBPHiZf_-3ndcAbj3Z7gDtrMRPb4YblYGBvWnjiHLgef5RNb6EPXMFK_ipW3hNprzfRhjbtvzlRbvJ3OaSAu3lKZnj_p_b_OAW9StTbVFoUZdwQ94M7RC7M=w16383
200 OK 67 kB URL HTTP/2 lh6.googleusercontent.com/S21J5nI0rsO5i7XvjySxEBPHiZf_-3ndcAbj3Z7gDtrMRPb4YblYGBvWnjiHLgef5RNb6EPXMFK_ipW3hNprzfRhjbtvzlRbvJ3OaSAu3lKZnj_p_b_OAW9StTbVFoUZdwQ94M7RC7M=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x720, components 3\012- data
Hash b503b6d236bf0f164268a316df059e2b
4c02b037ff84e96512705f6edd3e7a6bd02679d7
66d5fb68d4d9448818f25cbec394e90e26d8ce49d4206a864f9c14c77e0c6985
GET /S21J5nI0rsO5i7XvjySxEBPHiZf_-3ndcAbj3Z7gDtrMRPb4YblYGBvWnjiHLgef5RNb6EPXMFK_ipW3hNprzfRhjbtvzlRbvJ3OaSAu3lKZnj_p_b_OAW9StTbVFoUZdwQ94M7RC7M=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="60137466_2321879288035413_5348858223539519488_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 67161
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/V8I8dKR0kwc4faQB7HecTmSjjXSmJC14zmh3CJ-BCqMw2J4AxKgsxBn9Aob_oNeVAyWLlVuACVC71N_yby8FBm5AubX5X91tF_epJ5cwVkGVhjwj6lOOEp2ooW2O5hb_oXwEl6RqIPM=w16383
200 OK 45 kB URL HTTP/2 lh4.googleusercontent.com/V8I8dKR0kwc4faQB7HecTmSjjXSmJC14zmh3CJ-BCqMw2J4AxKgsxBn9Aob_oNeVAyWLlVuACVC71N_yby8FBm5AubX5X91tF_epJ5cwVkGVhjwj6lOOEp2ooW2O5hb_oXwEl6RqIPM=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x562, components 3\012- data
Hash fdf4295458590657c50ef8160b0d8c4c
80a9ec927a759c55c27fb9537321ff97ba069d74
bd9d55591d9e35ad09ed7bf2b1624e4478a2030572dcefb6ca24d123718fc8a6
GET /V8I8dKR0kwc4faQB7HecTmSjjXSmJC14zmh3CJ-BCqMw2J4AxKgsxBn9Aob_oNeVAyWLlVuACVC71N_yby8FBm5AubX5X91tF_epJ5cwVkGVhjwj6lOOEp2ooW2O5hb_oXwEl6RqIPM=w16383 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="60012363_2321879144702094_8100628733406216192_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 45005
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb84e6a011a9528eb9a80989e38b9273
0dfd05338986086205c7c7cc834710ecd977c595
7ef7ceaad733fe6d750d693f372ad861326524ee9c8c332b02728d85ae98e5e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh6.googleusercontent.com/ov5rxQVif5wAa7tGK0uLaGB-Hsdkw1sucLpgWfCELcZ4yMhtPIseh9RT8rIYixws579y-EcupyQq7ieD-VzZYFMGvjYLv-lzzYtwXApktkTSM74mddD5MtqrxzA-rsXSELUktwYh0g4=w16383
200 OK 70 kB URL HTTP/2 lh6.googleusercontent.com/ov5rxQVif5wAa7tGK0uLaGB-Hsdkw1sucLpgWfCELcZ4yMhtPIseh9RT8rIYixws579y-EcupyQq7ieD-VzZYFMGvjYLv-lzzYtwXApktkTSM74mddD5MtqrxzA-rsXSELUktwYh0g4=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x720, components 3\012- data
Hash dcf499462affc396286721281dd6db33
acd1a8d51e22a3a812d9cd08dcf482ebd8c30d09
673040932cb6e87ee01a6ea83b46d306b7579d5d20bf551129b278048abb2ed9
GET /ov5rxQVif5wAa7tGK0uLaGB-Hsdkw1sucLpgWfCELcZ4yMhtPIseh9RT8rIYixws579y-EcupyQq7ieD-VzZYFMGvjYLv-lzzYtwXApktkTSM74mddD5MtqrxzA-rsXSELUktwYh0g4=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="60251493_2321879391368736_5260772223869779968_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 69661
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/wMM5Xqfa4YYKeIrsFrPOAOzNSJ2SOscyJ2IYz9E9U11OriGVv7Zu0vWHHar069yivQ20TUb2d38pJ_7jnCiEMRc=w16383
200 OK 316 kB URL HTTP/2 lh4.googleusercontent.com/wMM5Xqfa4YYKeIrsFrPOAOzNSJ2SOscyJ2IYz9E9U11OriGVv7Zu0vWHHar069yivQ20TUb2d38pJ_7jnCiEMRc=w16383
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2021:09:30 13:29:34], baseline, precision 8, 1366x768, components 3\012- data
Size 316 kB (316472 bytes)
Hash a8e2a7aa9c7ab712be2550bc6f391b6d
9f095224a5f3653e72be4d0ba11499c15c98f2e7
5665dbfefca63b1bfdcdc5b6049843abcdc5dbf7151c1782bef0c0e9a07cdc49
GET /wMM5Xqfa4YYKeIrsFrPOAOzNSJ2SOscyJ2IYz9E9U11OriGVv7Zu0vWHHar069yivQ20TUb2d38pJ_7jnCiEMRc=w16383 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="digital Transformation parthways-1.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 316472
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/LlKJtUa5aCNz-9v5KU03BC4ONput-DdLDwC7BAX8DST1kCANbx45SH2SfpxhBqS-o9iwpUi9XQwdj-rhKeVTuTA=w16383
200 OK 66 kB URL HTTP/2 lh6.googleusercontent.com/LlKJtUa5aCNz-9v5KU03BC4ONput-DdLDwC7BAX8DST1kCANbx45SH2SfpxhBqS-o9iwpUi9XQwdj-rhKeVTuTA=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x720, components 3\012- data
Hash e5837f93ce67f06fbc427bb0ed2f8131
49a8f3de4a39525c949f43fe333403068165c4b6
efbbac55c472c13873a0481a09d5b23dfea87aa50bbfdecdd90a6803cc1f64b8
GET /LlKJtUa5aCNz-9v5KU03BC4ONput-DdLDwC7BAX8DST1kCANbx45SH2SfpxhBqS-o9iwpUi9XQwdj-rhKeVTuTA=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="60071315_2321879211368754_544945918667915264_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 66543
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/fIUwK-SmIYfv_-b3-f_i1s1Z2XUOpWPKE-2b9ozQEAhPJWWh_CZv1m2lTcS3da81rQD_NA68Rqjli12rO60zfW3DFGSh6af8NwonG4jjlzRJheYsluha07xtq7oVbC4jjfqvFlM4ylA=w16383
200 OK 184 kB URL HTTP/2 lh3.googleusercontent.com/fIUwK-SmIYfv_-b3-f_i1s1Z2XUOpWPKE-2b9ozQEAhPJWWh_CZv1m2lTcS3da81rQD_NA68Rqjli12rO60zfW3DFGSh6af8NwonG4jjlzRJheYsluha07xtq7oVbC4jjfqvFlM4ylA=w16383
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2021:09:07 22:45:56], baseline, precision 8, 1366x768, components 3\012- data
Size 184 kB (183632 bytes)
Hash 0572b0689177624ebdd2614b1cefab38
c429e2232b14c8e73a172342136aabcc87d4008b
6733fbdf281512e67fb2b7dc4efca7622d9485f362becc75a15c8da8ab920cb1
GET /fIUwK-SmIYfv_-b3-f_i1s1Z2XUOpWPKE-2b9ozQEAhPJWWh_CZv1m2lTcS3da81rQD_NA68Rqjli12rO60zfW3DFGSh6af8NwonG4jjlzRJheYsluha07xtq7oVbC4jjfqvFlM4ylA=w16383 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="HM BUSINESS CARD-1 copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 183632
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/hr6WAffNiY05MeocgfE7yZsXQvf5Dd37nN_D4MgdO0YWpHsUHwND0xvsZQgjHeMZ1MCLO6gOGcMB4PGITmHalovjAOHflqsoE_UqkU0SjEE9XY7XfBd62Bbdi9gDI-b0QywkFbXEB2U=w16383
200 OK 80 kB URL HTTP/2 lh5.googleusercontent.com/hr6WAffNiY05MeocgfE7yZsXQvf5Dd37nN_D4MgdO0YWpHsUHwND0xvsZQgjHeMZ1MCLO6gOGcMB4PGITmHalovjAOHflqsoE_UqkU0SjEE9XY7XfBd62Bbdi9gDI-b0QywkFbXEB2U=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x720, components 3\012- data
Hash 6c522a9b4e346c6b1ac5650e67ac9ed3
70b6da689774820a1634090bf3c7d49bc8a6402f
baf69ad64123c6885eb4302552fd6cf46516f98d1f00253b94b05f134c46ad2e
GET /hr6WAffNiY05MeocgfE7yZsXQvf5Dd37nN_D4MgdO0YWpHsUHwND0xvsZQgjHeMZ1MCLO6gOGcMB4PGITmHalovjAOHflqsoE_UqkU0SjEE9XY7XfBd62Bbdi9gDI-b0QywkFbXEB2U=w16383 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="31290698_2069839856572692_4565602724443324416_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 80538
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/PUhxZMBbbK2gjV0a5bN4oG813yrpV-wazqGi8W8J3PJqnDr8crKhpQGQHBjW3ZdtP4dsoYLAHw9x6rzA9RQJYNk_IkWf40K5SrgTfDKjfwK1mArxZtclVx0P2h2GqzH4dTLUqpmT0hc=w16383
200 OK 60 kB URL HTTP/2 lh6.googleusercontent.com/PUhxZMBbbK2gjV0a5bN4oG813yrpV-wazqGi8W8J3PJqnDr8crKhpQGQHBjW3ZdtP4dsoYLAHw9x6rzA9RQJYNk_IkWf40K5SrgTfDKjfwK1mArxZtclVx0P2h2GqzH4dTLUqpmT0hc=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x720, components 3\012- data
Hash d1dc9fcaa221a25854d78517e01db5c8
443ecc1011e317eb5d1fdbe9324ece4e4d6263cd
6a23565efff01c9dba53ff6a86c420198155fe1c1e519451c2f15e8671348d4f
GET /PUhxZMBbbK2gjV0a5bN4oG813yrpV-wazqGi8W8J3PJqnDr8crKhpQGQHBjW3ZdtP4dsoYLAHw9x6rzA9RQJYNk_IkWf40K5SrgTfDKjfwK1mArxZtclVx0P2h2GqzH4dTLUqpmT0hc=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="60345207_2321879201368755_2117886878039408640_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 59808
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb84e6a011a9528eb9a80989e38b9273
0dfd05338986086205c7c7cc834710ecd977c595
7ef7ceaad733fe6d750d693f372ad861326524ee9c8c332b02728d85ae98e5e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.haimar.co.uk/_/view/logImpressions?authuser=0
200 OK 65 B URL HTTP/2 www.haimar.co.uk/_/view/logImpressions?authuser=0
IP
Hash 2e412aa88c463b77f277fd02699d2163
1528bc8a2c205f7ff107f35168f71fe99230100d
0a1c722178f0f8ff79c95a6bd15aa455a6a48bc9fe88b429e48b84dddc61b219
POST /_/view/logImpressions?authuser=0 HTTP/1.1
Host: www.haimar.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 3202
Origin: https://www.haimar.co.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 Dec 2022 11:49:06 GMT
content-disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin
x-content-type-options: nosniff
cross-origin-opener-policy: same-origin-allow-popups
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
content-encoding: gzip
X-Firefox-Spdy: h2
lh6.googleusercontent.com/Q1c2wuwNnkmzgR47nEmF3pRlEUUqyh2H9zQrNBIwdlUdXhKhREQpzHlo09oexH4M1pAPLhNur9tYFWoFRi09GLTT4Zm0CXxBnE2c6v4xAIugkE039ezpxTgzSb_dXHDDAl_kopAVJOXKmVvSw537BzCxVw8eMpcYSodSzS3b5j3-jc-8GRns7g=w1280
200 OK 79 kB URL HTTP/2 lh6.googleusercontent.com/Q1c2wuwNnkmzgR47nEmF3pRlEUUqyh2H9zQrNBIwdlUdXhKhREQpzHlo09oexH4M1pAPLhNur9tYFWoFRi09GLTT4Zm0CXxBnE2c6v4xAIugkE039ezpxTgzSb_dXHDDAl_kopAVJOXKmVvSw537BzCxVw8eMpcYSodSzS3b5j3-jc-8GRns7g=w1280
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 800x850, components 3\012- data
Hash 3469db27ef94fbef30bc7fe362dd77b8
c15d4d3897d5298ff213c2c5feb421ff342d2767
3b31e4a511ec271ecc23885128f77efb8ad2ef7284526ab5d35a2b77c40eedb8
GET /Q1c2wuwNnkmzgR47nEmF3pRlEUUqyh2H9zQrNBIwdlUdXhKhREQpzHlo09oexH4M1pAPLhNur9tYFWoFRi09GLTT4Zm0CXxBnE2c6v4xAIugkE039ezpxTgzSb_dXHDDAl_kopAVJOXKmVvSw537BzCxVw8eMpcYSodSzS3b5j3-jc-8GRns7g=w1280 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 79002
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/MPlarzwedVZX2Kk81HA7HFrFuxjYVlPx0Rhkd5Fm6GDNVRtthqVO-K9WXBZ_WMfgSe9R-sUa0nPKSsGXK6rVAcYj-s0JwjXz2BxpyBre_9003f-eptywH3NjkwETanyhgz0zrU9vjDU=w16383
200 OK 95 kB URL HTTP/2 lh4.googleusercontent.com/MPlarzwedVZX2Kk81HA7HFrFuxjYVlPx0Rhkd5Fm6GDNVRtthqVO-K9WXBZ_WMfgSe9R-sUa0nPKSsGXK6rVAcYj-s0JwjXz2BxpyBre_9003f-eptywH3NjkwETanyhgz0zrU9vjDU=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "*", progressive, precision 8, 960x716, components 3\012- data
Hash 3c79d5a11da25eccbaa345602325311b
e4ba17c01a584f9f18cfece9d8bd457e89e0bf2a
a90dc8f91042328ed3cf97084152e6c7adf41a10b6f49f65df0b47a218184e96
GET /MPlarzwedVZX2Kk81HA7HFrFuxjYVlPx0Rhkd5Fm6GDNVRtthqVO-K9WXBZ_WMfgSe9R-sUa0nPKSsGXK6rVAcYj-s0JwjXz2BxpyBre_9003f-eptywH3NjkwETanyhgz0zrU9vjDU=w16383 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="0B8reheyJa5sWSWMySzRxWW8yLW8=s2048.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 95398
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/9TH2gbl8CUO0iRI47FPieSvbPXwivgWnkcHljYo_jgdFEScszx-n9utj7yosovB72tVuGgbLzM4aKiXSeV7MjDWLWHeUaRJy6n0FbaZQ5WvXVkNm1cKg8_8REN7-wr6nTWajTeTf5lk=w16383
200 OK 61 kB URL HTTP/2 lh6.googleusercontent.com/9TH2gbl8CUO0iRI47FPieSvbPXwivgWnkcHljYo_jgdFEScszx-n9utj7yosovB72tVuGgbLzM4aKiXSeV7MjDWLWHeUaRJy6n0FbaZQ5WvXVkNm1cKg8_8REN7-wr6nTWajTeTf5lk=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x720, components 3\012- data
Hash 32f28554b6aee6c911fefed9ba7d680b
f5bc3207faa61eb64baab04bf9c637a4adcbe433
011e63536e66e0e033a88c44a3d9e1abdd47e7aa1816ece09f4ab95aff875a4e
GET /9TH2gbl8CUO0iRI47FPieSvbPXwivgWnkcHljYo_jgdFEScszx-n9utj7yosovB72tVuGgbLzM4aKiXSeV7MjDWLWHeUaRJy6n0FbaZQ5WvXVkNm1cKg8_8REN7-wr6nTWajTeTf5lk=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="59918433_2321879154702093_7095065727069061120_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 60872
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/kBG1l-rfhQ9W58xEQnBIPX2Ls9yFCiQIhuoUNmps3lfWvM9BTeFbya9h__ITAaJrN6UC_rj7DktqFBQCTLrdy0M=w16383
200 OK 73 kB URL HTTP/2 lh4.googleusercontent.com/kBG1l-rfhQ9W58xEQnBIPX2Ls9yFCiQIhuoUNmps3lfWvM9BTeFbya9h__ITAaJrN6UC_rj7DktqFBQCTLrdy0M=w16383
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x652, components 3\012- data
Hash 2ceef1a44aaf5ba800de0307da12f00a
9029cdcd300dece8898dfc2ebe1a1848c50b5d7f
7aa766ed026ff479042a8d693fb695fcc738546a8477afd0121b6304d67aa1d5
GET /kBG1l-rfhQ9W58xEQnBIPX2Ls9yFCiQIhuoUNmps3lfWvM9BTeFbya9h__ITAaJrN6UC_rj7DktqFBQCTLrdy0M=w16383 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="29790120_2058460604377284_3439404516578106225_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 73376
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/UpU6UsoMbjCtjlPSO0m0AcMk8mp0L0WdgFfRAH6sR9irfKmNdZ2gxpLVdrn3f1S23MPDlYytDZm2yoCGcxS_PMY=w16383
200 OK 306 kB URL HTTP/2 lh6.googleusercontent.com/UpU6UsoMbjCtjlPSO0m0AcMk8mp0L0WdgFfRAH6sR9irfKmNdZ2gxpLVdrn3f1S23MPDlYytDZm2yoCGcxS_PMY=w16383
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2021:09:15 22:00:45], baseline, precision 8, 960x540, components 3\012- data
Size 306 kB (306436 bytes)
Hash 8a4d24a036ca36a79de39463bc3000aa
7efe185962772a5f613b43cae3fadce6ccb95e42
1a5a67e91ce770bc99f4f8371248692890a850d82fe395893add4323c11dc690
GET /UpU6UsoMbjCtjlPSO0m0AcMk8mp0L0WdgFfRAH6sR9irfKmNdZ2gxpLVdrn3f1S23MPDlYytDZm2yoCGcxS_PMY=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Education HM1 copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 306436
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/O5KeWD_AT0SrgYBmmqQwG5KxO7gj_0CzudfmxYIzU6JWyB5_YzOCIvStoT5kGXjKrSxwZAcMTbvw5RMP9hO9UbirAvTGnk3OJmCL9sp6piXaMO0jQLZ9DjTqt4ji9raHhDkxu6qZW4M=w16383
200 OK 191 kB URL HTTP/2 lh4.googleusercontent.com/O5KeWD_AT0SrgYBmmqQwG5KxO7gj_0CzudfmxYIzU6JWyB5_YzOCIvStoT5kGXjKrSxwZAcMTbvw5RMP9hO9UbirAvTGnk3OJmCL9sp6piXaMO0jQLZ9DjTqt4ji9raHhDkxu6qZW4M=w16383
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2022:01:27 14:41:49], baseline, precision 8, 1100x700, components 3\012- data
Size 191 kB (191108 bytes)
Hash 1769d3d3590f42cc61ecbf59d841eb91
9eecc0eb7e734e25095dc40fc4a4cf00ed749d26
d736ee929de3c6f5a5941c2c80235a7140cb4bef6221d557bd73304fe48d5c49
GET /O5KeWD_AT0SrgYBmmqQwG5KxO7gj_0CzudfmxYIzU6JWyB5_YzOCIvStoT5kGXjKrSxwZAcMTbvw5RMP9hO9UbirAvTGnk3OJmCL9sp6piXaMO0jQLZ9DjTqt4ji9raHhDkxu6qZW4M=w16383 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="4web copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 191108
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 088037aa3cd3f678776d4443ee3feec3
4e8c2c84585e93acaeaba3c4a5704a98a315b33d
5f6edbe6d09f7efebc225ecb6d07c98f1ec12fa127febec52a4194130affdc88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh6.googleusercontent.com/qp-kXtELt5VSX75lUpWdAJue7PDbY0GkWX-6awNd_B0ubOJPGO84TtNCnwpoOzD8YYw5ydCzC7oHpOf8MPiRveEq7m3-QRNdcMeVoAfCT_VHFXxt_TALlf5Lxd6QBfO0qlJUFBbJuDKnxmcIAz5oirh6-XSsuLeB9fdUhJTTucj-ttpK2Be-wg=w1280
200 OK 76 kB URL HTTP/2 lh6.googleusercontent.com/qp-kXtELt5VSX75lUpWdAJue7PDbY0GkWX-6awNd_B0ubOJPGO84TtNCnwpoOzD8YYw5ydCzC7oHpOf8MPiRveEq7m3-QRNdcMeVoAfCT_VHFXxt_TALlf5Lxd6QBfO0qlJUFBbJuDKnxmcIAz5oirh6-XSsuLeB9fdUhJTTucj-ttpK2Be-wg=w1280
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 800x850, components 3\012- data
Hash 9fd8e07c1850ddc4942d986ce060144e
638f6314c040bec0a046d3cc58f7d8d3e359ef56
ba13140f20141dd67797ac75e06de5ec56da71413f4bc4ff555f468c01d18fe9
GET /qp-kXtELt5VSX75lUpWdAJue7PDbY0GkWX-6awNd_B0ubOJPGO84TtNCnwpoOzD8YYw5ydCzC7oHpOf8MPiRveEq7m3-QRNdcMeVoAfCT_VHFXxt_TALlf5Lxd6QBfO0qlJUFBbJuDKnxmcIAz5oirh6-XSsuLeB9fdUhJTTucj-ttpK2Be-wg=w1280 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 75814
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/OwDayZ2rtK8QPyWrzHjmt9-mqsytvxpUEHVENIZtFdZMF2BaF5XgOXxvKdL9ogRm7wHwTKBIhz_-LfT-fi70dg=w16383
200 OK 77 kB URL HTTP/2 lh5.googleusercontent.com/OwDayZ2rtK8QPyWrzHjmt9-mqsytvxpUEHVENIZtFdZMF2BaF5XgOXxvKdL9ogRm7wHwTKBIhz_-LfT-fi70dg=w16383
IP
File type JPEG image data, progressive, precision 8, 960x720, components 3\012- data
Hash bd4aaea0f8eb7188c7dfad2f17bfb116
b6878ee9b84ba7a8953e0ef5c39e48c037eafc8a
474d3b11cf910427c4b25f44b2f6d9d90e00da9949df49dbe68f6639ccd38637
GET /OwDayZ2rtK8QPyWrzHjmt9-mqsytvxpUEHVENIZtFdZMF2BaF5XgOXxvKdL9ogRm7wHwTKBIhz_-LfT-fi70dg=w16383 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="31936030_2073033069586704_4676471013062475776_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 77374
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/X6PpkJJwL34-gAl6t2a2kHT7ApIRXglzYfpScCezA6CebqQRZQaa8pnyZPpVsUR38t7jqi2qMsStmJZOzC-6CTYXHQUGSAJ2LtrU5AJfwOa7DCW5TpuRUTHfTH516UyE2w=w1280
200 OK 30 kB URL HTTP/2 lh4.googleusercontent.com/X6PpkJJwL34-gAl6t2a2kHT7ApIRXglzYfpScCezA6CebqQRZQaa8pnyZPpVsUR38t7jqi2qMsStmJZOzC-6CTYXHQUGSAJ2LtrU5AJfwOa7DCW5TpuRUTHfTH516UyE2w=w1280
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 880x749, components 3\012- data
Hash 6f76fba7fd99140e92645549963ebf67
64dbf09977805a4f993c0c181742706793bc6c0f
be9dd4aa4cb2f9141d194d2b3ef500c9c50e0ba62e5174ece15d21c4dfb05384
GET /X6PpkJJwL34-gAl6t2a2kHT7ApIRXglzYfpScCezA6CebqQRZQaa8pnyZPpVsUR38t7jqi2qMsStmJZOzC-6CTYXHQUGSAJ2LtrU5AJfwOa7DCW5TpuRUTHfTH516UyE2w=w1280 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 30381
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/lFrhMRdCdFDBi0_23Ab-67GOukwPQvRzUSBHs1AzSOI38LX11h74UU3nBXNKIV7tYvTpJnHkyP2ypBHZ-9ah-SOgyLRgiRh-3nqHiL2w-cNEsh-Avmf4pS9Liv6eu_kYOba-6MWD5jakV75gRhV3aaqGPrgf9dM-nVPGfF_xLNTvrIdtkUxL=w1280
200 OK 66 kB URL HTTP/2 lh5.googleusercontent.com/lFrhMRdCdFDBi0_23Ab-67GOukwPQvRzUSBHs1AzSOI38LX11h74UU3nBXNKIV7tYvTpJnHkyP2ypBHZ-9ah-SOgyLRgiRh-3nqHiL2w-cNEsh-Avmf4pS9Liv6eu_kYOba-6MWD5jakV75gRhV3aaqGPrgf9dM-nVPGfF_xLNTvrIdtkUxL=w1280
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 800x850, components 3\012- data
Hash 0eb6749582ed254870176cf955e1bd5d
5973003912f39dae79fa819f5b852088951ad149
9d33ff489bf6c72a2a29649d0bb03d83b4e93ebcb9ff2ce9b7383a8032f41c7f
GET /lFrhMRdCdFDBi0_23Ab-67GOukwPQvRzUSBHs1AzSOI38LX11h74UU3nBXNKIV7tYvTpJnHkyP2ypBHZ-9ah-SOgyLRgiRh-3nqHiL2w-cNEsh-Avmf4pS9Liv6eu_kYOba-6MWD5jakV75gRhV3aaqGPrgf9dM-nVPGfF_xLNTvrIdtkUxL=w1280 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Business Strategy Transformation2 copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 65511
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/pQfu_IromblUDS_TWsAe6NE6mLAWQzbhXYZ5JLzws_20CiKtHuB5nsI4T461w2ma5XtePqo7eeIBAt0yeYWia9TqCxfC0VQJhvbYP53EncVaiMy_2MRzzhbxeQYKE5k1iMVrzHCVh7XvNond0uQ5jYiJ4cRGX10XWwCZbKykArFh9SPSCeS7BQ=w1280
200 OK 6.6 kB URL HTTP/2 lh3.googleusercontent.com/pQfu_IromblUDS_TWsAe6NE6mLAWQzbhXYZ5JLzws_20CiKtHuB5nsI4T461w2ma5XtePqo7eeIBAt0yeYWia9TqCxfC0VQJhvbYP53EncVaiMy_2MRzzhbxeQYKE5k1iMVrzHCVh7XvNond0uQ5jYiJ4cRGX10XWwCZbKykArFh9SPSCeS7BQ=w1280
IP
File type PNG image data, 320 x 272, 8-bit/color RGBA, non-interlaced\012- data
Hash 0dff74ebd446fd4a7e9f2177ca96c355
800488fb74d1c9adaf0bb738e366c621f3596222
eecbf749f9bdc849c0da184b1866ba09cc655a7d36470878db305451b8e2a8f8
GET /pQfu_IromblUDS_TWsAe6NE6mLAWQzbhXYZ5JLzws_20CiKtHuB5nsI4T461w2ma5XtePqo7eeIBAt0yeYWia9TqCxfC0VQJhvbYP53EncVaiMy_2MRzzhbxeQYKE5k1iMVrzHCVh7XvNond0uQ5jYiJ4cRGX10XWwCZbKykArFh9SPSCeS7BQ=w1280 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 6560
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7817
Expires: Thu, 15 Dec 2022 13:59:23 GMT
Date: Thu, 15 Dec 2022 11:49:06 GMT
Connection: keep-alive
lh5.googleusercontent.com/MhwSH-Lh_N5juPm2lBks1Bi7VzUOh7QQZz6lOW4DTYchtZUcL6ISj-2gkXBagfAj6N9LREqTBwIr4W5qVJajsGHCvjv8Z0zfLR3k_x1mTl2r0DXt2t1gF-G5VocPxYO0fzprrmTqFUo=w16383
200 OK 325 kB URL HTTP/2 lh5.googleusercontent.com/MhwSH-Lh_N5juPm2lBks1Bi7VzUOh7QQZz6lOW4DTYchtZUcL6ISj-2gkXBagfAj6N9LREqTBwIr4W5qVJajsGHCvjv8Z0zfLR3k_x1mTl2r0DXt2t1gF-G5VocPxYO0fzprrmTqFUo=w16383
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2021:09:01 07:52:57], baseline, precision 8, 960x540, components 3\012- data
Size 325 kB (325072 bytes)
Hash c7219e76ac6d724e6bf4dc3256c133ac
f4e44f45ebe6cd143b3a0873871a379a8678c85e
e8c82a81f27183bdef701c07c0377a149b97ffadf90036173bd679ff15768978
GET /MhwSH-Lh_N5juPm2lBks1Bi7VzUOh7QQZz6lOW4DTYchtZUcL6ISj-2gkXBagfAj6N9LREqTBwIr4W5qVJajsGHCvjv8Z0zfLR3k_x1mTl2r0DXt2t1gF-G5VocPxYO0fzprrmTqFUo=w16383 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Poster HM4.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 325072
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/2ENqCSA2QhrOJ6uWPRji4b9fGtwcEYnQ6IsvwYh1Sp-JygEft55fGohUEwchyWoqyUBm6pFWQoaGs3u5zXoNXuPqzmEXpyCNW4dhLUOzunzqG5Bqyl9OLGOYYpJKPFopmSKw7YJj6-s=w16383
200 OK 161 kB URL HTTP/2 lh4.googleusercontent.com/2ENqCSA2QhrOJ6uWPRji4b9fGtwcEYnQ6IsvwYh1Sp-JygEft55fGohUEwchyWoqyUBm6pFWQoaGs3u5zXoNXuPqzmEXpyCNW4dhLUOzunzqG5Bqyl9OLGOYYpJKPFopmSKw7YJj6-s=w16383
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2022:01:27 14:40:57], baseline, precision 8, 1100x700, components 3\012- data
Size 161 kB (161060 bytes)
Hash 583513c7fd38f17852c9b11d3a961562
49bb0e4a67729a5a0bddb48d1aeb1b3111544109
d1d0e9c205fb561f0bfafa42ffb3fc49e22860e694b702e196eaced88ed7a2e4
GET /2ENqCSA2QhrOJ6uWPRji4b9fGtwcEYnQ6IsvwYh1Sp-JygEft55fGohUEwchyWoqyUBm6pFWQoaGs3u5zXoNXuPqzmEXpyCNW4dhLUOzunzqG5Bqyl9OLGOYYpJKPFopmSKw7YJj6-s=w16383 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1web copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 161060
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maps.gstatic.com/maps-api-v3/embed/js/51/3/init_embed.js
200 OK 69 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/51/3/init_embed.js
IP
File type ASCII text, with very long lines (2669)
Hash 670da89542ecf04a8bbff2049748654f
2fcd2c31427edfd9b3180e233a009677b0d88973
d1bdcacb4973ce7c60a0f59144bf6fb699eea4fc016ca1780cdf61dbd9efb3bc
GET /maps-api-v3/embed/js/51/3/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 69327
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 20:12:31 GMT
expires: Thu, 14 Dec 2023 20:12:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 18:55:12 GMT
content-type: text/javascript
age: 56195
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/Ns8fFv8qiVIQ6dJowDqQfyfEJJbWcj1i1PKV1Yyq5zU4a4IFytXfvWtFsr-d8AiNG5pwlIplThbsKT_9LmfJ1SNKQRz_1QneJQkk98CyG1ZY7AjlCRt3sqtfCelLSmRrtl8rWoZcqwc=w16383
200 OK 534 kB URL HTTP/2 lh4.googleusercontent.com/Ns8fFv8qiVIQ6dJowDqQfyfEJJbWcj1i1PKV1Yyq5zU4a4IFytXfvWtFsr-d8AiNG5pwlIplThbsKT_9LmfJ1SNKQRz_1QneJQkk98CyG1ZY7AjlCRt3sqtfCelLSmRrtl8rWoZcqwc=w16383
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Macintosh), datetime=2022:01:24 11:33:50], baseline, precision 8, 1366x768, components 3\012- data
Size 534 kB (534197 bytes)
Hash 4fa8d327810ac066d0cbf9f7b94faae5
6e907680307b51be8e2403cdbd25ba50ab8e472e
d4db9d0be51a49b57a74051661c7577726ebe90deef9079ed3d3fa010d526533
GET /Ns8fFv8qiVIQ6dJowDqQfyfEJJbWcj1i1PKV1Yyq5zU4a4IFytXfvWtFsr-d8AiNG5pwlIplThbsKT_9LmfJ1SNKQRz_1QneJQkk98CyG1ZY7AjlCRt3sqtfCelLSmRrtl8rWoZcqwc=w16383 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="4_HM_online media.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 534197
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7816
Expires: Thu, 15 Dec 2022 13:59:23 GMT
Date: Thu, 15 Dec 2022 11:49:07 GMT
Connection: keep-alive
lh3.googleusercontent.com/p2gm2tQU0ndow7FBqP5QAy_s5SorJrEFfVcPFICbILNKj_GWCVs8LxqwQ57opI8OIeTpBDT0T4BMYAmFFK0mXdpuZ4-ueVwPIljREdmvXfEkaDQuIPRvNHC9Gw9Jkrv9a92thHbTpPI=w16383
200 OK 18 kB URL HTTP/2 lh3.googleusercontent.com/p2gm2tQU0ndow7FBqP5QAy_s5SorJrEFfVcPFICbILNKj_GWCVs8LxqwQ57opI8OIeTpBDT0T4BMYAmFFK0mXdpuZ4-ueVwPIljREdmvXfEkaDQuIPRvNHC9Gw9Jkrv9a92thHbTpPI=w16383
IP
File type PNG image data, 1003 x 728, 8-bit/color RGBA, non-interlaced\012- data
Hash 1bd90f9231d6de292596d6ced1022f91
0f34359807bde6d0d804bfbae4de27b6c15bb958
85f0b56cbbb5f0d599b9b7e4c0ad0ea0cb320bd63642d4d759c1aadb702e1128
GET /p2gm2tQU0ndow7FBqP5QAy_s5SorJrEFfVcPFICbILNKj_GWCVs8LxqwQ57opI8OIeTpBDT0T4BMYAmFFK0mXdpuZ4-ueVwPIljREdmvXfEkaDQuIPRvNHC9Gw9Jkrv9a92thHbTpPI=w16383 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Haimar Logo_2.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 18107
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7816
Expires: Thu, 15 Dec 2022 13:59:23 GMT
Date: Thu, 15 Dec 2022 11:49:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7816
Expires: Thu, 15 Dec 2022 13:59:23 GMT
Date: Thu, 15 Dec 2022 11:49:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F874ce85e-7786-4e92-aea7-1c22181143e6.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F874ce85e-7786-4e92-aea7-1c22181143e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 389fe7dd5f3f80351a97fe4106be49b5
a91f474e6d320797c2ea32ecaf7a341f5f77fe82
11957edbfb3dc06abbe8ee6aa9dac0a25f84ba909a6404030c9f081343384513
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F874ce85e-7786-4e92-aea7-1c22181143e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9108
x-amzn-requestid: ce72b199-1b81-4257-bcf0-3c9dc144b5d7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6s3rHhDoAMFZxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63942830-0751237e7103e2b9615db079;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 06:33:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3p17v7Bynhh_3E58b5uEpjmNfZ-bSee-_jhauzs3LtWRV9GJoT0Evg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 09:02:49 GMT
age: 9978
etag: "a91f474e6d320797c2ea32ecaf7a341f5f77fe82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57e1af37-0e83-424f-98c5-a8245b583871.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57e1af37-0e83-424f-98c5-a8245b583871.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a4e12af6d9653a205bf7314349bdea4
b39aa5fdef821f3138df8909781027cd05428dc9
6a5e05f85d0066300935c250be1b36d8efe9a3c56cc2473a58c18ae9599c509e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57e1af37-0e83-424f-98c5-a8245b583871.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9148
x-amzn-requestid: 0ea26bac-f713-41b4-b98d-d8b059a9cd1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dGpcOFHvoAMF6-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6398ef81-348c18be1382b5762c952041;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 21:32:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GqIOMxqzRhR3CKOHQA8j1IpyoRODba6VcLVLyaLq_Y6QhCizxPEmBQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 22:25:27 GMT
age: 48220
etag: "b39aa5fdef821f3138df8909781027cd05428dc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f6337-b00d-4487-82ce-cbed5b4f3f4f.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f6337-b00d-4487-82ce-cbed5b4f3f4f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d2294cdacdc84b8b19874ba56035a6d
53009a81b15e464d5529d36b1e04b841b2ae034e
67d59aa026b43ed3f698f3853b986fc7c07e4e6e5f7b3551e59238f79978480a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f6337-b00d-4487-82ce-cbed5b4f3f4f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7616
x-amzn-requestid: 71bbe208-11e3-4280-bf09-bff8bd18fcb4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c82fXGmPoAMF3Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63950462-12393ca432808b7f0b2771dc;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 22:12:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7aqhogNxvIgQ_WqzVaVjsoulT568Lgsn_I-nLNpCi_rhcUs7AiCkkQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 17:01:37 GMT
age: 67650
etag: "53009a81b15e464d5529d36b1e04b841b2ae034e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lh5.googleusercontent.com/TNZutcSeVZAIpc6qdrONzfDfb0ocgdhP_zKYyxWLAw62WVj54L450f6iYndSAEb6UFCH4um7NVQPdh-29cdX8IEE6GUqp_yZx5nLTJc-Lsd7xMwrNDXKIXqwKqxYDxKQ5A=w1280
200 OK 158 kB URL HTTP/2 lh5.googleusercontent.com/TNZutcSeVZAIpc6qdrONzfDfb0ocgdhP_zKYyxWLAw62WVj54L450f6iYndSAEb6UFCH4um7NVQPdh-29cdX8IEE6GUqp_yZx5nLTJc-Lsd7xMwrNDXKIXqwKqxYDxKQ5A=w1280
IP
File type PNG image data, 1000 x 851, 8-bit colormap, non-interlaced\012- data
Size 158 kB (157888 bytes)
Hash 9c7b9f9a7e9730c63cb3db00da0c9650
d8d4de30615777e2ad17e499228d246fa9aa4272
37987cc14d6756ad3c5e0c5c39f4525553bc9b4b0e3a47c674284aa5df4ea459
GET /TNZutcSeVZAIpc6qdrONzfDfb0ocgdhP_zKYyxWLAw62WVj54L450f6iYndSAEb6UFCH4um7NVQPdh-29cdX8IEE6GUqp_yZx5nLTJc-Lsd7xMwrNDXKIXqwKqxYDxKQ5A=w1280 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 157888
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/8dx1SbY1EclAy616mx7Qc155jhW_EeauvD9ns6Jr5E2lpCZr8FSIdXIuUUNyvHefVcMZ0il2DejpKPV4LtnBsvEaYSCee_sray5_P-UuTLE7Iy9J
200 OK 18 kB URL HTTP/2 lh5.googleusercontent.com/8dx1SbY1EclAy616mx7Qc155jhW_EeauvD9ns6Jr5E2lpCZr8FSIdXIuUUNyvHefVcMZ0il2DejpKPV4LtnBsvEaYSCee_sray5_P-UuTLE7Iy9J
IP
File type PNG image data, 1003 x 1003, 8-bit/color RGBA, non-interlaced\012- data
Hash 0b290335d9696a08d478d7f097b1c210
9fa2a02daabed71d0a2fc878ec7115bb482888a2
691e7c2cb7834d3d22b8a5d057ff4435d8321484c47da88d99dabcbd49c136fa
GET /8dx1SbY1EclAy616mx7Qc155jhW_EeauvD9ns6Jr5E2lpCZr8FSIdXIuUUNyvHefVcMZ0il2DejpKPV4LtnBsvEaYSCee_sray5_P-UuTLE7Iy9J HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Haimar Logo_2.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 17653
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F206a2aa2-193a-45ee-9210-82fa22154882.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F206a2aa2-193a-45ee-9210-82fa22154882.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe33ecc20db57514c51c90694efebb16
e00b8b1bc1f98df439a264d1cd881e1021d7fdd5
9b0e56806a9f4e7458b58c29ec2050faebcded4ff1c4ef430733171ddae68cb7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F206a2aa2-193a-45ee-9210-82fa22154882.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7396
x-amzn-requestid: 075cd964-92ad-4ed1-9176-8445cf2971e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dJ96sFoIIAMFpww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639a4377-7fd3a8a52932265637d31ff7;Sampled=0
x-amzn-remapped-date: Wed, 14 Dec 2022 21:43:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: woNdh_5wZH4hgxO8r2xP3DwDOYVXPr9gVxaFZjP9CNn6vr6XSxFCNw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 21:49:13 GMT
etag: "e00b8b1bc1f98df439a264d1cd881e1021d7fdd5"
content-type: image/jpeg
age: 50394
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56f56798-4039-4a1a-9490-f61d1b1e77da.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56f56798-4039-4a1a-9490-f61d1b1e77da.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 672ae812012d060ba75fbb8cb9d6038c
2ab1016451432b6cd1d6b9756c6cc6a926ffa7ce
cd9c002af775a6ba6ff8902a67e19c2ed2663d23bf8a1c3fe763598a60ba8d69
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56f56798-4039-4a1a-9490-f61d1b1e77da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5259
x-amzn-requestid: 21c0e355-e696-4785-a162-5f96e02836f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c3fV1HHKIAMFsjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6392df58-608335604793d9f46939a81a;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 07:10:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BYwjCf0sQ3F2gNE6x5Q5K6D_PhMXV-T8kPGRpVHIdouM_I9sU7bMOw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 02:09:49 GMT
age: 34758
etag: "2ab1016451432b6cd1d6b9756c6cc6a926ffa7ce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cff467d-ce7f-4454-8f95-b9c6348a2347.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cff467d-ce7f-4454-8f95-b9c6348a2347.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 651b0f2569cf044585ce4f571cfd89fb
4c5e9db56536dd4145d63200d0fd74e2aa243fbf
c561267909b1e19768a2c11d78bab18faaa0de11d822e56324d7642daf798bf5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cff467d-ce7f-4454-8f95-b9c6348a2347.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5820
x-amzn-requestid: 096e8aca-b98f-4994-a084-888e9a03aa89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c0NT8HJFIAMFeBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63918f4c-59e8f13b176bb8ae43d2da3d;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 07:16:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QxPGQKNjwH47HMqTzZBBnXl_coIObq0sNoSs8sGA_uMb9O1_77SNIQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 03:16:51 GMT
age: 30736
etag: "4c5e9db56536dd4145d63200d0fd74e2aa243fbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lh4.googleusercontent.com/RWk2yh9J_b6peLFiyVbL9I6-yv7hGiKPS4siS0XCAlSFF56cTkSDBbEBvexkp39FZTo14ymEOmucPz3zUP9X6yrfe4hJ5CG-S2W8rb25XNNqISjPZx8PPpH1viSRnDRiNuoCz0u2b_dsZmV8sC1QpaG72KX0IQb_jFFE38G9SfGClzyIdwgBQw=w1280
200 OK 8.1 kB URL HTTP/2 lh4.googleusercontent.com/RWk2yh9J_b6peLFiyVbL9I6-yv7hGiKPS4siS0XCAlSFF56cTkSDBbEBvexkp39FZTo14ymEOmucPz3zUP9X6yrfe4hJ5CG-S2W8rb25XNNqISjPZx8PPpH1viSRnDRiNuoCz0u2b_dsZmV8sC1QpaG72KX0IQb_jFFE38G9SfGClzyIdwgBQw=w1280
IP
File type PNG image data, 1280 x 1089, 8-bit colormap, non-interlaced\012- data
Hash e988e33ac5fa33c249eca33435ba1377
730fd6d825db70e30845767fcedece5d44111164
4640c96af85c21b353828df613a45a4d08052b2b69a96b438772e17c125d8fcd
GET /RWk2yh9J_b6peLFiyVbL9I6-yv7hGiKPS4siS0XCAlSFF56cTkSDBbEBvexkp39FZTo14ymEOmucPz3zUP9X6yrfe4hJ5CG-S2W8rb25XNNqISjPZx8PPpH1viSRnDRiNuoCz0u2b_dsZmV8sC1QpaG72KX0IQb_jFFE38G9SfGClzyIdwgBQw=w1280 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 8136
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 088037aa3cd3f678776d4443ee3feec3
4e8c2c84585e93acaeaba3c4a5704a98a315b33d
5f6edbe6d09f7efebc225ecb6d07c98f1ec12fa127febec52a4194130affdc88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh5.googleusercontent.com/-ftfJukTK5IxwUC9Yspt_bfs40e-NTfMZSy6Nw6fEi1IlOBjquU0ReSukxz0rJ-uvuTkd3Ze1wbk70PmTc5BahtofM6xXYk4GEgRKP2EVxEOXwdhn6aWwLmCwG-DcjITocOTh9P7Ctk55-nqG9ElZBPTg_mr_ilaK8bHAx5pGYX-sCsHGU4nTQ=w1280
200 OK 323 kB URL HTTP/2 lh5.googleusercontent.com/-ftfJukTK5IxwUC9Yspt_bfs40e-NTfMZSy6Nw6fEi1IlOBjquU0ReSukxz0rJ-uvuTkd3Ze1wbk70PmTc5BahtofM6xXYk4GEgRKP2EVxEOXwdhn6aWwLmCwG-DcjITocOTh9P7Ctk55-nqG9ElZBPTg_mr_ilaK8bHAx5pGYX-sCsHGU4nTQ=w1280
IP
File type PNG image data, 1280 x 1089, 8-bit/color RGBA, non-interlaced\012- data
Size 323 kB (322779 bytes)
Hash 5b42b121c44514881228c0c09ae444b9
3302db18774d67d50beea80b36decf14344e4257
8afc0c280f2bd371d55c60c1e9360a1297e8aaf2a61c89d420ab4917933b0890
GET /-ftfJukTK5IxwUC9Yspt_bfs40e-NTfMZSy6Nw6fEi1IlOBjquU0ReSukxz0rJ-uvuTkd3Ze1wbk70PmTc5BahtofM6xXYk4GEgRKP2EVxEOXwdhn6aWwLmCwG-DcjITocOTh9P7Ctk55-nqG9ElZBPTg_mr_ilaK8bHAx5pGYX-sCsHGU4nTQ=w1280 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="image.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 322779
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0fbe3d80eaa6623da753aece08c3a818
d3c6fe97e3154f00f681647a3c74800008ac2d2f
cab890482eacc4298414a2aa0e41ea5bce399eccd4d5e50c9cdc55c735c83b1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-CQE927S36R>m=2oebu0&_p=440745571&gdid=dZWRiYj&cid=66926253.1671104944&ul=en-us&sr=1280x1024&_s=1&sid=1671104943&sct=1&seg=0&dl=https%3A%2F%2Fwww.haimar.co.uk%2F&dt=Haimar%3A%20Build%20better%20tomorrow&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-CQE927S36R>m=2oebu0&_p=440745571&gdid=dZWRiYj&cid=66926253.1671104944&ul=en-us&sr=1280x1024&_s=1&sid=1671104943&sct=1&seg=0&dl=https%3A%2F%2Fwww.haimar.co.uk%2F&dt=Haimar%3A%20Build%20better%20tomorrow&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-CQE927S36R>m=2oebu0&_p=440745571&gdid=dZWRiYj&cid=66926253.1671104944&ul=en-us&sr=1280x1024&_s=1&sid=1671104943&sct=1&seg=0&dl=https%3A%2F%2Fwww.haimar.co.uk%2F&dt=Haimar%3A%20Build%20better%20tomorrow&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Origin: https://www.haimar.co.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.haimar.co.uk
date: Thu, 15 Dec 2022 11:49:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/rTY8qFrErkIr_jxi_haEMKzg0JaFHaTCTuSvUUvNaOevpdYxApQYS1EiUXqCoPDAapvjsZYLH8AZvZwPmEOh51MAEnYfP1Joid55ZHgAsPF7b4czpmJ20dv7Io_U6pGsR925T4r2r28=w16383
200 OK 9.8 MB URL HTTP/2 lh6.googleusercontent.com/rTY8qFrErkIr_jxi_haEMKzg0JaFHaTCTuSvUUvNaOevpdYxApQYS1EiUXqCoPDAapvjsZYLH8AZvZwPmEOh51MAEnYfP1Joid55ZHgAsPF7b4czpmJ20dv7Io_U6pGsR925T4r2r28=w16383
IP
Size 9.8 MB (9761112 bytes)
Hash dd6809fa99a93bbe56b808f02bfad164
cd57736e7f7d832b799641654a83a6f8aa2f5140
bd04166edd0e05a4d94ace061292cf1f91294a8c62bc6644c80987e7253070bb
GET /rTY8qFrErkIr_jxi_haEMKzg0JaFHaTCTuSvUUvNaOevpdYxApQYS1EiUXqCoPDAapvjsZYLH8AZvZwPmEOh51MAEnYfP1Joid55ZHgAsPF7b4czpmJ20dv7Io_U6pGsR925T4r2r28=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="A4.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 9761112
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/mDkwYCUhypuV1xy-DDaZTqZ5dqS1SeYVtAXEPUrfs3lrj1xQnp47jzEcLXoSkEJOSxucWtpih62_rdbHCSBCUx4t7jihfaLBR-iYx7g5Qf5WStYzYF3d5gU9u9KGt0eFqdR0Ln6ECWc=w16383
200 OK 11 MB URL HTTP/2 lh6.googleusercontent.com/mDkwYCUhypuV1xy-DDaZTqZ5dqS1SeYVtAXEPUrfs3lrj1xQnp47jzEcLXoSkEJOSxucWtpih62_rdbHCSBCUx4t7jihfaLBR-iYx7g5Qf5WStYzYF3d5gU9u9KGt0eFqdR0Ln6ECWc=w16383
IP
Size 11 MB (10719705 bytes)
Hash d09da5dbdf33928d90e257fb9f3bbe5b
22e9f5179c85ff4687437391e25c4c5ca048054c
6011087b5f8f29d9a7de2e553915e3d3310758c3d87035832dcdb8a456e6323f
GET /mDkwYCUhypuV1xy-DDaZTqZ5dqS1SeYVtAXEPUrfs3lrj1xQnp47jzEcLXoSkEJOSxucWtpih62_rdbHCSBCUx4t7jihfaLBR-iYx7g5Qf5WStYzYF3d5gU9u9KGt0eFqdR0Ln6ECWc=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="A1.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 10719705
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.googleusercontent.com/FZ1Mw_V8MtYi824T9_RTpjgn1FrlAwDvbkeWxJnb5v-VTJSjypo-_U-urSnemigcen6SFkGXAGI8TVCW38gB_dc=w16383
200 OK 11 MB URL HTTP/2 lh6.googleusercontent.com/FZ1Mw_V8MtYi824T9_RTpjgn1FrlAwDvbkeWxJnb5v-VTJSjypo-_U-urSnemigcen6SFkGXAGI8TVCW38gB_dc=w16383
IP
Size 11 MB (11443808 bytes)
Hash 835f892259e86635689a9f7b138d7a16
b6f10cd072ffdeab05a8ac306e99fef050d812ea
39ad4742082ee53f5addd4c098be76e30ba207325b5ea7afd5b8c53099d13e85
GET /FZ1Mw_V8MtYi824T9_RTpjgn1FrlAwDvbkeWxJnb5v-VTJSjypo-_U-urSnemigcen6SFkGXAGI8TVCW38gB_dc=w16383 HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Marketing and franchasing 1 copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 11443808
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0fbe3d80eaa6623da753aece08c3a818
d3c6fe97e3154f00f681647a3c74800008ac2d2f
cab890482eacc4298414a2aa0e41ea5bce399eccd4d5e50c9cdc55c735c83b1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 11:49:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/4fKL1uDVU7Fmkx1JAAipZN4-e6TC6CbZKfJxypWgd1kgmHTq4Dh1gVeWjgJwVrxlvJ1L_JTC-bzaa6cePXjs_UIoFt1_nKLrrr8QsbfsMwOoiQk5mfHWjBuYG_ZnWH67LVxO5g3wrEw=w16383
200 OK 9.1 MB URL HTTP/2 lh3.googleusercontent.com/4fKL1uDVU7Fmkx1JAAipZN4-e6TC6CbZKfJxypWgd1kgmHTq4Dh1gVeWjgJwVrxlvJ1L_JTC-bzaa6cePXjs_UIoFt1_nKLrrr8QsbfsMwOoiQk5mfHWjBuYG_ZnWH67LVxO5g3wrEw=w16383
IP
Size 9.1 MB (9066683 bytes)
Hash ae588302ba15b595863b5e4a1e81f355
40459d03f78e0cd2ece4a822f1fdf2ff49201895
529544d58fc9c7becfef6b900defd0dbf65f182a4ec3096f792d80c655d69555
GET /4fKL1uDVU7Fmkx1JAAipZN4-e6TC6CbZKfJxypWgd1kgmHTq4Dh1gVeWjgJwVrxlvJ1L_JTC-bzaa6cePXjs_UIoFt1_nKLrrr8QsbfsMwOoiQk5mfHWjBuYG_ZnWH67LVxO5g3wrEw=w16383 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="A31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 9066683
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/LF1uzgSmMGbAm8x-iZOdOGCOIz9-pmNMkd_cnyNZdtiUEBLCpXs97n6UFX5jHp__CuCvKueckCdNy22iy2LzDRThdzU_YTi8hwlP31EszbEhosN-mCSF56EXWVKa0ID_fG1a7IDjDg=w16383
200 OK 10 MB URL HTTP/2 lh5.googleusercontent.com/LF1uzgSmMGbAm8x-iZOdOGCOIz9-pmNMkd_cnyNZdtiUEBLCpXs97n6UFX5jHp__CuCvKueckCdNy22iy2LzDRThdzU_YTi8hwlP31EszbEhosN-mCSF56EXWVKa0ID_fG1a7IDjDg=w16383
IP
Size 10 MB (10263957 bytes)
Hash b88b04657e0880da0c38ddc85156e9e2
8a2ab9f4c46898683807bf4a0664a2ba0b2e60a2
78730139aeac7bf3cb17bffe81c6ae38ffff6d2fcd7d0ae1299bf28d0613d46c
GET /LF1uzgSmMGbAm8x-iZOdOGCOIz9-pmNMkd_cnyNZdtiUEBLCpXs97n6UFX5jHp__CuCvKueckCdNy22iy2LzDRThdzU_YTi8hwlP31EszbEhosN-mCSF56EXWVKa0ID_fG1a7IDjDg=w16383 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="A2 copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:06 GMT
server: fife
content-length: 10263957
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/CoLItN9RBCvieb5jcjxp_jyjT3VlrDQmD5dm-Ni1c6obqbJajJ7xDx50x36U7sDEwRkmtUJryc0L16j70OtTX-s=w16383
200 OK 10 MB URL HTTP/2 lh3.googleusercontent.com/CoLItN9RBCvieb5jcjxp_jyjT3VlrDQmD5dm-Ni1c6obqbJajJ7xDx50x36U7sDEwRkmtUJryc0L16j70OtTX-s=w16383
IP
Size 10 MB (10225689 bytes)
Hash d4f31cbee54fb01d176e7072ef6f2139
8e2a901a676b251f77426cad48ec38491d919b9c
a2d31c2e11baff420c37ab9a9572f6ccaf640bfce64d98c3244475cb2f377cf0
GET /CoLItN9RBCvieb5jcjxp_jyjT3VlrDQmD5dm-Ni1c6obqbJajJ7xDx50x36U7sDEwRkmtUJryc0L16j70OtTX-s=w16383 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="A2a.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 10225689
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/0l7E7PdYdhKsdUzhsEK9y5l-FRw-1tLZTl27MI4gG1IchjFo5cEZ8YQIg66y8UA10micLC6Zd_BnxrC4AXZsWdztUJb3r6qwSfZlnO-ZlBV9US_gnvO66t0H17DZhs-A0tq178ubvQ=w16383
200 OK 10 MB URL HTTP/2 lh5.googleusercontent.com/0l7E7PdYdhKsdUzhsEK9y5l-FRw-1tLZTl27MI4gG1IchjFo5cEZ8YQIg66y8UA10micLC6Zd_BnxrC4AXZsWdztUJb3r6qwSfZlnO-ZlBV9US_gnvO66t0H17DZhs-A0tq178ubvQ=w16383
IP
Size 10 MB (9968740 bytes)
Hash a8aa57dbc40feb4516621fa9509db472
e73ef2f2b377b7a59394b4613d901215a942312f
1138e1122f56a61cb1e89001eaf8d4fdda12f9c941a14b937ded634c6969bfde
GET /0l7E7PdYdhKsdUzhsEK9y5l-FRw-1tLZTl27MI4gG1IchjFo5cEZ8YQIg66y8UA10micLC6Zd_BnxrC4AXZsWdztUJb3r6qwSfZlnO-ZlBV9US_gnvO66t0H17DZhs-A0tq178ubvQ=w16383 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="A5.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 9968740
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-h-32oSfkW3cA7Ta7UjDlNvEgiFf3685Mpk6FtOscxXNb22on_USjgYfhtfJ_S60K_GtyAolZ_WU1RGrswVB3majhdlikrlB_1smafC5nlPxvw8I0E_4zNY9xZWrA5HiDb7tyQM9TAA=w16383
200 OK 10 MB URL HTTP/2 lh4.googleusercontent.com/-h-32oSfkW3cA7Ta7UjDlNvEgiFf3685Mpk6FtOscxXNb22on_USjgYfhtfJ_S60K_GtyAolZ_WU1RGrswVB3majhdlikrlB_1smafC5nlPxvw8I0E_4zNY9xZWrA5HiDb7tyQM9TAA=w16383
IP
Size 10 MB (10351109 bytes)
Hash 209c4d1b0acc2983106e76ad1ceedabb
e0ff3d6f704af9dda0863662aec292bf3584eb6d
bf571d5e1f4bc9922b9a983eb8702e0f9b6c85a9c20fb77cfaf1573298d83de0
GET /-h-32oSfkW3cA7Ta7UjDlNvEgiFf3685Mpk6FtOscxXNb22on_USjgYfhtfJ_S60K_GtyAolZ_WU1RGrswVB3majhdlikrlB_1smafC5nlPxvw8I0E_4zNY9xZWrA5HiDb7tyQM9TAA=w16383 HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="accounting and finance2 copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 10351109
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F886cc6e3-a038-4e4d-8da0-caf399786ff4.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F886cc6e3-a038-4e4d-8da0-caf399786ff4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b76e8c43482cb1f6e9d3f5dd55185382
364236e338c799f7d7a604882451428d12cdc7c7
375600e8bedfec8fa85da9298fc3322b91e97261dee7fd94b1dad8e6f4faed67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F886cc6e3-a038-4e4d-8da0-caf399786ff4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4523
x-amzn-requestid: 5404595d-f42f-49a0-9438-093b2fb1b852
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dBXWTGEcIAMFdnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6396d28e-17f927945ee836a91a3148e0;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 07:04:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JBIoHXeeJIsyl_wj57ZEP_f1mg3eq0WJjgKveuc_DslNZzSiVf62Og==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 07:11:31 GMT
age: 16662
etag: "364236e338c799f7d7a604882451428d12cdc7c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.haimar.co.uk/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.haimar.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 Dec 2022 11:49:05 GMT
cross-origin-opener-policy: unsafe-none
content-security-policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'nonce-LRAY3QkFGrVrvC3uABJv4g' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
referrer-policy: strict-origin-when-cross-origin
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
lh5.googleusercontent.com/t3SYnelmOJQF78o_Lp2b6ttx1CQvM8MuzyWixPk44NXkkXKdZbREuewUo7bc_t6y35nhW6WNxFH9YwQ_2VvY2q8WGDyZihNJrg4sMzjxFzu93My0NXf3gQAkhH0LEK-178K2lQsre2E=w16383
200 OK 0 B URL HTTP/2 lh5.googleusercontent.com/t3SYnelmOJQF78o_Lp2b6ttx1CQvM8MuzyWixPk44NXkkXKdZbREuewUo7bc_t6y35nhW6WNxFH9YwQ_2VvY2q8WGDyZihNJrg4sMzjxFzu93My0NXf3gQAkhH0LEK-178K2lQsre2E=w16383
IP
GET /t3SYnelmOJQF78o_Lp2b6ttx1CQvM8MuzyWixPk44NXkkXKdZbREuewUo7bc_t6y35nhW6WNxFH9YwQ_2VvY2q8WGDyZihNJrg4sMzjxFzu93My0NXf3gQAkhH0LEK-178K2lQsre2E=w16383 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Knowledge M 1.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 10644540
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/xnLi1X6LIoL4sfm2V-MtFh3Y9ePhtY17iHtTRmHfSD0oCopOGksE8RV-dw04go66kpretit_kX_fz3obOqjvmRH1dnuaS9aGHURhwRFKmwq-rZso5QZMeSY1uMV2rVkVkKZHP8Y8piw=w16383
200 OK 0 B URL HTTP/2 lh5.googleusercontent.com/xnLi1X6LIoL4sfm2V-MtFh3Y9ePhtY17iHtTRmHfSD0oCopOGksE8RV-dw04go66kpretit_kX_fz3obOqjvmRH1dnuaS9aGHURhwRFKmwq-rZso5QZMeSY1uMV2rVkVkKZHP8Y8piw=w16383
IP
GET /xnLi1X6LIoL4sfm2V-MtFh3Y9ePhtY17iHtTRmHfSD0oCopOGksE8RV-dw04go66kpretit_kX_fz3obOqjvmRH1dnuaS9aGHURhwRFKmwq-rZso5QZMeSY1uMV2rVkVkKZHP8Y8piw=w16383 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Digital Knowledge M 1.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 10660590
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/8_h-3_XEwbxapRydWUx4kixJAQIbYSDxeoy4G9fUG7u7y5Gk0aqj5r8e1bXvUp1G59o1nUa5wG3GUSamHMXsfZGnt_d9TXwHiKafkC4E_NpLndQRAEVeZfraX07wGxFxCgIvSpzmB2Q=w16383
200 OK 0 B URL HTTP/2 lh5.googleusercontent.com/8_h-3_XEwbxapRydWUx4kixJAQIbYSDxeoy4G9fUG7u7y5Gk0aqj5r8e1bXvUp1G59o1nUa5wG3GUSamHMXsfZGnt_d9TXwHiKafkC4E_NpLndQRAEVeZfraX07wGxFxCgIvSpzmB2Q=w16383
IP
GET /8_h-3_XEwbxapRydWUx4kixJAQIbYSDxeoy4G9fUG7u7y5Gk0aqj5r8e1bXvUp1G59o1nUa5wG3GUSamHMXsfZGnt_d9TXwHiKafkC4E_NpLndQRAEVeZfraX07wGxFxCgIvSpzmB2Q=w16383 HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 16 Dec 2022 11:49:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Study in the UK 1 copy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 11:49:07 GMT
server: fife
content-length: 11065739
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.haimar.co.uk/_/view/logImpressions?authuser=0
200 OK 0 B URL HTTP/2 www.haimar.co.uk/_/view/logImpressions?authuser=0
IP
POST /_/view/logImpressions?authuser=0 HTTP/1.1
Host: www.haimar.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.haimar.co.uk/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 11378
Origin: https://www.haimar.co.uk
Connection: keep-alive
Cookie: _ga_CQE927S36R=GS1.1.1671104943.1.0.1671104943.0.0.0; _ga=GA1.1.66926253.1671104944
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 Dec 2022 11:49:10 GMT
content-disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin
x-content-type-options: nosniff
cross-origin-opener-policy: same-origin-allow-popups
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
content-encoding: gzip
X-Firefox-Spdy: h2
216.58.207.211
93.184.220.29
23.36.76.249
0.0.0.0