r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5072
Expires: Sun, 27 Nov 2022 00:11:57 GMT
Date: Sat, 26 Nov 2022 22:47:25 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2882
Cache-Control: max-age=131505
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:25 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:19:10 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 22:19:17 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1688
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5993
Expires: Sun, 27 Nov 2022 00:27:18 GMT
Date: Sat, 26 Nov 2022 22:47:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NovBOvfCiLTbJga5cbhfgquUIqcXmw63jvcQvLVg+hL/cjuzWdbtTrcVqeWG7zmy5v3HUwFjWI4=
x-amz-request-id: RGBEBX79W5M93T9H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 22:41:23 GMT
age: 362
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 22:47:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
bone.loanerdrones.com/ga/click/2-399911368-1860-15286-29844-27737-91b8acc972-scc11c797e
302 Found 202 B URL HTTP/1.1 bone.loanerdrones.com/ga/click/2-399911368-1860-15286-29844-27737-91b8acc972-scc11c797e
IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 103b923504e1b58de32d448474e6d0c3
a8f7a144023ed326fd6308f915be89f80ac84ac6
6d753a4ef37d9ac4ffcb5f13aa3ccddac9cfc72a918d31535482e1e2e487979d
GET /ga/click/2-399911368-1860-15286-29844-27737-91b8acc972-scc11c797e HTTP/1.1
Host: bone.loanerdrones.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 26 Nov 2022 22:46:52 GMT
Server: Apache/2.4.51 (Unix) OpenSSL/1.0.2k-fips PHP/7.3.29
Status: 302 Found
X-Rack-Cache: miss
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
X-Request-Id: 7666e546cccc553103bacd2eaf136f79
Location: http://mart.bestsmartphoneplan.com/Ljhdstygcuehbwvdsuygeiubcfyuewgiufbewcfuyewgfiwehvs/dcsgdftyewfugigcvwyufgiuefbwveyucguiewbcvewuygbwi
X-UA-Compatible: IE=Edge,chrome=1
X-Runtime: 0.022469
Expires: Mon, 01 Jan 1990 00:00:00 GMT
X-Powered-By: Phusion Passenger(R) 6.0.9
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 22:08:54 GMT
cache-control: public,max-age=3600
age: 2311
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6483
Cache-Control: max-age=130048
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:26 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:54:54 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: p/Wzsv1+x2RyJqr0fTl7KQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zuvNlQGOLGXDtIaxcMiEMp+AsuY=
mart.bestsmartphoneplan.com/Ljhdstygcuehbwvdsuygeiubcfyuewgiufbewcfuyewgfiwehvs/dcsgdftyewfugigcvwyufgiuefbwveyucguiewbcvewuygbwi
302 Found 0 B URL HTTP/1.1 mart.bestsmartphoneplan.com/Ljhdstygcuehbwvdsuygeiubcfyuewgiufbewcfuyewgfiwehvs/dcsgdftyewfugigcvwyufgiuefbwveyucguiewbcvewuygbwi
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Ljhdstygcuehbwvdsuygeiubcfyuewgiufbewcfuyewgfiwehvs/dcsgdftyewfugigcvwyufgiuefbwveyucguiewbcvewuygbwi HTTP/1.1
Host: mart.bestsmartphoneplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 26 Nov 2022 22:47:25 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
X-Powered-By: PHP/5.4.16
Location: https://mwebnice.com/7787/202/2/?subid=Demalre
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 278 B IP
Hash 4d84f0f5a6a5a2c7aa214f66a5e96fe4
03e590c0ace8a54770f8142bb3bb130e83abd0dd
dee12766a366b32c3cde1bbaef4a8a4a767c575e64823a858760fe827fb13b81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=91557
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:26 GMT
Etag: "63815a23-116"
Expires: Mon, 28 Nov 2022 00:13:23 GMT
Last-Modified: Sat, 26 Nov 2022 00:13:23 GMT
Server: nginx
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14587
Expires: Sun, 27 Nov 2022 02:50:34 GMT
Date: Sat, 26 Nov 2022 22:47:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14587
Expires: Sun, 27 Nov 2022 02:50:34 GMT
Date: Sat, 26 Nov 2022 22:47:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8197b890-dd48-403d-9c61-3406a67e2578.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8197b890-dd48-403d-9c61-3406a67e2578.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 48713d6090df316bed8ab2b1e6698d70
767a6fef172a54d7659417d9cb809d955d130562
702a09de59300336419371adafae4185f7ad8bca43dc4e633f748f68feb967c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8197b890-dd48-403d-9c61-3406a67e2578.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3669
x-amzn-requestid: 66d1c64e-532e-4661-84dc-90b0d1569a3e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8Jr3FUtIAMFc1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b2318-6946a6345e5702cb7d968616;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:04:56 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: Nt2hePjJ3CZ4bJR0I87O25Z0lX_4KOcoD4_DitVZteBlMJiuG1JCcg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 3bb2b699cd244bf37141ea08a6a61732.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 11:39:25 GMT
age: 40082
etag: "767a6fef172a54d7659417d9cb809d955d130562"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 33d3ca17-7878-4897-a634-5f626a64e820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cJ40OEOqIAMFaOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6380a1b4-040288d571fc10b96d893fa4;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 11:06:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: f_U8KSYET6kaKAPbEV7sHW0tO6JGijsqUvghniwzFCRd2YGQjVlFoA==
via: 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 10:16:33 GMT
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
age: 45054
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 433875a1b1fef34e45f2d8ac344c07e3
f2129466436cbbdd58abe42a47fb7af19eba58e6
ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5099
x-amzn-requestid: 57648043-7820-453d-9549-0f743b6c2557
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4jFBvoAMFl1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-53b59d607b82c264180f469d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VsdLWuh4rCawI5V0YYGaHxEMl2YEVNgsbjfCwzDsrnCZhRK2FkCkVw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "f2129466436cbbdd58abe42a47fb7af19eba58e6"
content-type: image/jpeg
age: 3913
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe38fd9-0497-4ec8-8f57-1ba100e73fcc.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe38fd9-0497-4ec8-8f57-1ba100e73fcc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f80a9a9b55da31c98663e157dde74a19
26b8dd82140c0db021048e11bff65a391dc6b444
680c39e4ea1d784db9831958942a64f3e83618dc443c8bcaa34223d85bb5b926
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe38fd9-0497-4ec8-8f57-1ba100e73fcc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6859
x-amzn-requestid: 4a1b13ad-9455-401d-a914-c1ada2191977
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYTHRroAMFR8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-4e5d630b23cdeb2e4b6d75d1;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qk03VFAQ1od0YzamiePUE8VQp9kBv_fy5gDUrVSlLGLSdn5v4JQbvw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 14:28:34 GMT
age: 29933
etag: "26b8dd82140c0db021048e11bff65a391dc6b444"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8aa8094-2375-4409-9501-0fe4e50b766d.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8aa8094-2375-4409-9501-0fe4e50b766d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d6328cb630204883d77babc9922075f1
e440f7b94b53b6e7880b26f9653b1b266aae0190
b15144c88277e24acde95b45e56fb2d237f5b1d34a9590aa5aa2741f7102a9fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8aa8094-2375-4409-9501-0fe4e50b766d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8584
x-amzn-requestid: ef9e42a9-be9d-4239-831d-4c4250b0cb8d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCKAsGTDIAMFa1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8a04-17e610e05ee024007d64c6ea;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 02:48:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: t-piL9xKmcPO_0sQryoAbpT03ZaUonSHkGK6eD3fid_WrQRJgEvgrw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 14:36:47 GMT
age: 29440
etag: "e440f7b94b53b6e7880b26f9653b1b266aae0190"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
age: 3913
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
200 OK 21 kB URL HTTP/2 fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8330), with CRLF, LF line terminators
Hash e915fac1b810e8a7dae76664ab279b29
49b349ed94acdd9b0839dc1713dbb868ef2f046c
2148513ff0cc2aebb10e5538098f9d24ddbbaf7531cb18cbc173ba4aeff5896e
GET /?aff_id=638&subid2=7787_sessid20221126224744983&subid=202 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
link: <https://fatburncombo.com/wp-json/>; rel="https://api.w.org/", <https://fatburncombo.com/wp-json/wp/v2/pages/280>; rel="alternate"; type="application/json", <https://fatburncombo.com/>; rel=shortlink
cache-control: max-age=600
expires: Sat, 26 Nov 2022 22:57:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 20697
content-type: text/html; charset=UTF-8
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 9cc75dedbc45e2e2215f62df1fd3fb63
001433d8700641b9eb2e5ea11ff9d7965bc05cf6
92390defbffb25260046c80b7639cd4d666ca9d56dc9b0a8b040595c9c0d6892
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4300
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:27 GMT
Etag: "63817e79-117"
Last-Modified: Sat, 26 Nov 2022 21:35:47 GMT
Server: ECS (amb/6B9B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 9cc75dedbc45e2e2215f62df1fd3fb63
001433d8700641b9eb2e5ea11ff9d7965bc05cf6
92390defbffb25260046c80b7639cd4d666ca9d56dc9b0a8b040595c9c0d6892
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4300
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:27 GMT
Last-Modified: Sat, 26 Nov 2022 21:35:47 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-LMVQXV2K4M
200 OK 79 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-LMVQXV2K4M
IP
File type ASCII text, with very long lines (25492)
Hash 6a1788505738170bec4548e39a8111e2
6c0714d998e16e220223373538ff2c72e854876a
f69052d4c360418791c2b629fa35580d867ecf11da74910c8b6d971a31de02f6
GET /gtag/js?id=G-LMVQXV2K4M HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 26 Nov 2022 22:47:27 GMT
expires: Sat, 26 Nov 2022 22:47:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78692
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.3
200 OK 953 B URL HTTP/2 fatburncombo.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.3
IP
Hash c503abd9f9fe09d22b59cb1fb0a292a8
a75f1bde1d2da3a4696a8e027eeaae4e96d21fec
56ea4b514650d10a9c4756a2eb1e4d292d138725164eec8c8ef004ceda2fece7
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.3 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2022 15:42:37 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 953
content-type: text/css
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.3
200 OK 4.4 kB URL HTTP/2 fatburncombo.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.3
IP
Hash 6ccc50d8058f37c03eea10782430638c
f9aced9bc0c8286be877fc48a10ae37fdcc2269c
534cd08c1ea0eaeebe1ba35b004f2a17d329a1d20c0b398785c4714458834b15
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.3 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2022 15:42:37 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4395
content-type: text/css
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
200 OK 12 kB URL HTTP/2 fatburncombo.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
IP
File type ASCII text, with very long lines (43771)
Hash e5548800176e913a9084f47a3e1e04f6
eff4604acc5c26ae82a19188de2f98bf5b79d80c
a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Jul 2022 21:40:38 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 11681
content-type: text/css
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fatburncombo.com/wp-content/plugins/optimizePressPlugin/pages/marketing/1/style.min.css?ver=2.5.25
200 OK 12 kB URL HTTP/2 fatburncombo.com/wp-content/plugins/optimizePressPlugin/pages/marketing/1/style.min.css?ver=2.5.25
IP
File type Unicode text, UTF-8 text, with very long lines (51535), with no line terminators
Hash a7e77819dc5dde45ebca57471b49fa35
022d250d8984806b257c3c73e55b59781ba49f50
82f3f09f42fb16d37c1a7fa1f91764c12fb98d3f89b27b756352142361d649e1
GET /wp-content/plugins/optimizePressPlugin/pages/marketing/1/style.min.css?ver=2.5.25 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2022 15:42:41 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 11471
content-type: text/css
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
display.buygoods.com/v1/disclaimer?id=disclaimer&account_id=7699
200 OK 1.6 kB URL HTTP/2 display.buygoods.com/v1/disclaimer?id=disclaimer&account_id=7699
IP
Hash 218850a055a2ba5d1cdff90977643e05
700906720f0c9509ef0a4340486adbe07d156ca6
601868c145dea07d3d4230ef112212f36afe9b27194a4bb9b65cccb94d774879
GET /v1/disclaimer?id=disclaimer&account_id=7699 HTTP/1.1
Host: display.buygoods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:47:27 GMT
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-credentials: true
strict-transport-security: max-age=31536000;
set-cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
cache-control: private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77062a7e3b2f0afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fatburncombo.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/2 fatburncombo.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 19:36:06 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4169
content-type: application/javascript
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.3
200 OK 7.5 kB URL HTTP/2 fatburncombo.com/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.3
IP
Hash 99b4ce14b33b03419e3809847af3fda7
aa0f15bb8b70726fd61c06e61faab08a6c758929
7994c287f4a7d3dfaa71f5eafdec1bd8341955b53b1ae2489772ac36e5f6a825
GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.3 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2022 15:42:37 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7526
content-type: application/javascript
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/plugins/optimizePressPlugin/lib/js/op-jquery-base-all.min.js?ver=2.5.25
200 OK 16 kB URL HTTP/2 fatburncombo.com/wp-content/plugins/optimizePressPlugin/lib/js/op-jquery-base-all.min.js?ver=2.5.25
IP
File type ASCII text, with very long lines (32006)
Hash 18cd463f7c083489ab5d84873af96059
d2bdf4308d93f58abc2aa861314e68560cdfc457
7f01594109f256493f6f71a661819d7e5b476f7853e87bc910736db10747f08b
GET /wp-content/plugins/optimizePressPlugin/lib/js/op-jquery-base-all.min.js?ver=2.5.25 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2022 15:42:41 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 16316
content-type: application/javascript
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 31 kB URL HTTP/2 fatburncombo.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 9640915738503451aa21181699feab5b
c053eaf36ef0da96619706b3abda326305063bd6
f8834e669ad1f4039442c26aaa373ec39c35a233b9786d374fc3f670f16b0adc
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Mar 2021 01:37:24 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30908
content-type: application/javascript
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.fatburncombo.com/wp-content/uploads/js/cook1.js
301 Moved Permanently 0 B URL HTTP/2 www.fatburncombo.com/wp-content/uploads/js/cook1.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/js/cook1.js HTTP/1.1
Host: www.fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 301 Moved Permanently
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://fatburncombo.com/wp-content/uploads/js/cook1.js
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.fatburncombo.com/wp-content/uploads/js/beh.js
301 Moved Permanently 0 B URL HTTP/2 www.fatburncombo.com/wp-content/uploads/js/beh.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/js/beh.js HTTP/1.1
Host: www.fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 301 Moved Permanently
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://fatburncombo.com/wp-content/uploads/js/beh.js
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/plugins/optimizePressPlugin/lib/js/menus.min.js?ver=2.5.25
200 OK 232 B URL HTTP/2 fatburncombo.com/wp-content/plugins/optimizePressPlugin/lib/js/menus.min.js?ver=2.5.25
IP
File type ASCII text, with very long lines (352), with no line terminators
Hash 006ff60fa6afa8ff7b78f0707380263a
8828d0f25afa9dd1f0cb8a925ce9a0ac953e0f1d
5f979133768a2edfdb735da79ade309ff6c6a576148690fc5cb5dc3831a7bcb7
GET /wp-content/plugins/optimizePressPlugin/lib/js/menus.min.js?ver=2.5.25 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2022 15:42:41 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 232
content-type: application/javascript
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-includes/js/comment-reply.min.js?ver=6.0.3
200 OK 1.4 kB URL HTTP/2 fatburncombo.com/wp-includes/js/comment-reply.min.js?ver=6.0.3
IP
File type ASCII text, with very long lines (2946)
Hash 28214bc78b9edfcfbc9c7b651fb4f56c
fb0847abdb33dd943a2dcda4c4b905fb5cdd116c
11691bc1acc1f3a7ab8ef7c67fb720ca58fb72e52f510009f7b0cbc2589d45e0
GET /wp-includes/js/comment-reply.min.js?ver=6.0.3 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 09 Apr 2022 05:37:18 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1351
content-type: application/javascript
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/plugins/op-popup/js/popup.js?rnd=1815803466&ver=2.5.25
200 OK 3.6 kB URL HTTP/2 fatburncombo.com/wp-content/plugins/op-popup/js/popup.js?rnd=1815803466&ver=2.5.25
IP
Hash ef31e83dbf79899c693a38de3e2ea3ab
e6d4a438a7491dd0ab35c6ff45d3bc20c8455844
dfdfdcbcef5d697081d32b5e841325542158d6f66b9342540c5270cfd5fc0033
GET /wp-content/plugins/op-popup/js/popup.js?rnd=1815803466&ver=2.5.25 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Feb 2020 18:49:42 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3582
content-type: application/javascript
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/plugins/optimizePressPlugin/lib/js/op-front-all.min.js?ver=2.5.25
200 OK 19 kB URL HTTP/2 fatburncombo.com/wp-content/plugins/optimizePressPlugin/lib/js/op-front-all.min.js?ver=2.5.25
IP
File type Unicode text, UTF-8 text, with very long lines (20474), with CRLF, LF line terminators
Hash 96275f774f0407982f625b0b8d30daef
80a398aa53782208fa8d30c77e88f6054ff794ae
ab7f044c52beb30a17eaca2cb6712eb95c5623792bf3105a6db5d1bd72c633a6
GET /wp-content/plugins/optimizePressPlugin/lib/js/op-front-all.min.js?ver=2.5.25 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2022 15:42:42 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 19141
content-type: application/javascript
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/uploads/2020/02/wait.jpg
200 OK 21 kB URL HTTP/2 fatburncombo.com/wp-content/uploads/2020/02/wait.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 (12.0x20100115 [20100115.m.998 2010/01/15:02:00:00 cutoff; m branch]) Windows, datetime=2018:01:19 17:49:27], progressive, precision 8, 675x170, components 3\012- data
Hash 54c8f660b87a34fc84a4d8204c86f174
6118ac4578a917fdb4ece31fa0e454b7d3db9cd4
e49d8a38cc169e30360a5d3cb6e9c3b2fa8fa60b2be912756a1f601f95586834
GET /wp-content/uploads/2020/02/wait.jpg HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Feb 2020 16:25:50 GMT
accept-ranges: bytes
content-length: 20574
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
content-type: image/jpeg
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/uploads/2022/10/zyro-image-1-1-scaled.jpg
200 OK 228 kB URL HTTP/2 fatburncombo.com/wp-content/uploads/2022/10/zyro-image-1-1-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1275x2560, components 3\012- data
Size 228 kB (228195 bytes)
Hash 439ca99bf381fad84d805cf2f2a13ce1
b48e3bbf6881763969a7d33c9dc0b8608f0c7b6b
443f81a3ca0b0cc0d6b6c165b7fa4c6c763e6cdf3408ff5219976a57975a1a99
GET /wp-content/uploads/2022/10/zyro-image-1-1-scaled.jpg HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 31 Oct 2022 14:51:37 GMT
accept-ranges: bytes
content-length: 228195
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
content-type: image/jpeg
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/uploads/2021/01/reference.jpg
200 OK 72 kB URL HTTP/2 fatburncombo.com/wp-content/uploads/2021/01/reference.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 (12.0x20100115 [20100115.m.998 2010/01/15:02:00:00 cutoff; m branch]) Windows, datetime=2021:01:07 13:57:13], baseline, precision 8, 1522x616, components 3\012- data
Hash 594630a1bb2a79d1dd08a6ed6ee5cd71
ecdaa12e9a5da4b9c8071efa879e1709a4c1409b
94db1d81dcef39d8d61727cdd195d0931614bfa12a181cb431e513a0034a0fb2
GET /wp-content/uploads/2021/01/reference.jpg HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 07 Jan 2021 11:58:38 GMT
accept-ranges: bytes
content-length: 72429
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
content-type: image/jpeg
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/uploads/2022/10/fat6.jpg
200 OK 78 kB URL HTTP/2 fatburncombo.com/wp-content/uploads/2022/10/fat6.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 (12.0x20100115 [20100115.m.998 2010/01/15:02:00:00 cutoff; m branch]) Windows, datetime=2022:10:31 15:03:32], baseline, precision 8, 364x789, components 3\012- data
Hash 9678000f7e3140b9b8fcf1c86c557d66
4ac18db138de3e1993a45d2073ef0d94f6bd2608
fe97e521c4b18e4f24a72bb5e17767b8ac6169def6a3b081ba8eb513f960ad45
GET /wp-content/uploads/2022/10/fat6.jpg HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 31 Oct 2022 14:44:26 GMT
accept-ranges: bytes
content-length: 78026
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
content-type: image/jpeg
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/uploads/2022/10/zyro-image-2-1-scaled.jpg
200 OK 261 kB URL HTTP/2 fatburncombo.com/wp-content/uploads/2022/10/zyro-image-2-1-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1271x2560, components 3\012- data
Size 261 kB (261017 bytes)
Hash eea1529f6a23ea917de4a831d91cf835
38f1fb0cfee1e0d41005670e2a052df493feab2e
654ccd1a0f74e9e358b85e499aeab59ff1836ca4ece014926e53683f0dde5de9
GET /wp-content/uploads/2022/10/zyro-image-2-1-scaled.jpg HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 31 Oct 2022 14:51:59 GMT
accept-ranges: bytes
content-length: 261017
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
content-type: image/jpeg
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/uploads/js/cook1.js
404 Not Found 11 kB URL HTTP/2 fatburncombo.com/wp-content/uploads/js/cook1.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8330), with CRLF, LF line terminators
Hash cb4ea55cfa3726569cbc737ab5530447
7aa72a665fbe99e2ce9e72204415be34d69faffa
508a2c7d21d842ffa668715dee001ddf7a30b20fbe119f9f7641d5a4a5e53a8c
GET /wp-content/uploads/js/cook1.js HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fatburncombo.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://fatburncombo.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 10654
content-type: text/html; charset=UTF-8
date: Sat, 26 Nov 2022 22:47:28 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/uploads/js/beh.js
404 Not Found 11 kB URL HTTP/2 fatburncombo.com/wp-content/uploads/js/beh.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8330), with CRLF, LF line terminators
Hash cb4ea55cfa3726569cbc737ab5530447
7aa72a665fbe99e2ce9e72204415be34d69faffa
508a2c7d21d842ffa668715dee001ddf7a30b20fbe119f9f7641d5a4a5e53a8c
GET /wp-content/uploads/js/beh.js HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fatburncombo.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://fatburncombo.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 10654
content-type: text/html; charset=UTF-8
date: Sat, 26 Nov 2022 22:47:28 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 2e47f3fd1c17d83c62f184d0a4e41fa6
ebf00fbe418817cca745fb10cfa9c184756cf38d
dbd2dd4b7502db94b0c406798fd6fca67046630cab2fb6fdcc59337b7f9229b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2195
Cache-Control: max-age=161388
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:28 GMT
Etag: "63826259-116"
Expires: Mon, 28 Nov 2022 19:37:16 GMT
Last-Modified: Sat, 26 Nov 2022 19:00:41 GMT
Server: ECS (amb/6B9B)
X-Cache: HIT
Content-Length: 278
fatburncombo.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
200 OK 5.0 kB URL HTTP/2 fatburncombo.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
File type ASCII text, with very long lines (15660)
Hash e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Apr 2022 15:26:24 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:28 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5009
content-type: application/javascript
date: Sat, 26 Nov 2022 22:47:28 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/uploads/2020/02/jane15.jpg
200 OK 43 kB URL HTTP/2 fatburncombo.com/wp-content/uploads/2020/02/jane15.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 (12.0x20100115 [20100115.m.998 2010/01/15:02:00:00 cutoff; m branch]) Windows, datetime=2020:02:25 00:09:48], baseline, precision 8, 900x450, components 3\012- data
Hash eb358455bedeb9ccb18d6947ad31507c
71cac10a622aab99323794b24afc557f50c8f0e5
82300eeb06d1dc5ccdab641d7bfe98f8f6ecaa4359a3d2e03cd52bf49e38afa2
GET /wp-content/uploads/2020/02/jane15.jpg HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 24 Feb 2020 22:10:11 GMT
accept-ranges: bytes
content-length: 42823
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:28 GMT
content-type: image/jpeg
date: Sat, 26 Nov 2022 22:47:28 GMT
server: Apache
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/uploads/2022/11/NewPicture948.jpg
200 OK 84 kB URL HTTP/2 fatburncombo.com/wp-content/uploads/2022/11/NewPicture948.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 (12.0x20100115 [20100115.m.998 2010/01/15:02:00:00 cutoff; m branch]) Windows, datetime=2022:11:03 11:18:31], baseline, precision 8, 1904x200, components 3\012- data
Hash 81180812611a3595098da0e6382db26d
2322ec2595086a74ee3fc792db25c0472d98b826
4e85b8177adf860da29e1f59693f0943809c7a8eac3f4df1b8662d5022fe9f6e
GET /wp-content/uploads/2022/11/NewPicture948.jpg HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 03 Nov 2022 09:20:36 GMT
accept-ranges: bytes
content-length: 84273
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:28 GMT
content-type: image/jpeg
date: Sat, 26 Nov 2022 22:47:28 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/4eb6b35d/www-widgetapi.vflset/www-widgetapi.js
200 OK 54 kB URL HTTP/2 www.youtube.com/s/player/4eb6b35d/www-widgetapi.vflset/www-widgetapi.js
IP
File type ASCII text, with very long lines (817)
Hash 29427ecf21304acecbbdf40f5400645d
d1ad2abfce599431b1a01e8aa0170f8535677cf7
bbb57b235a677b493d1129a3e765c9765995a12fbc2a81fbc0ebbbe81fe647af
GET /s/player/4eb6b35d/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 54014
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 21:08:00 GMT
expires: Sun, 26 Nov 2023 21:08:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 01:17:16 GMT
content-type: text/javascript
age: 5968
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fatburncombo.com/favicon.ico
302 Found 0 B URL HTTP/2 fatburncombo.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Cookie: _ga_LMVQXV2K4M=GS1.1.1669502848.1.0.1669502848.0.0.0; _ga=GA1.1.1996603263.1669502849
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
link: <https://fatburncombo.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
location: https://fatburncombo.com/wp-includes/images/w-logo-blue-white-bg.png
cache-control: max-age=600
expires: Sat, 26 Nov 2022 22:57:28 GMT
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Sat, 26 Nov 2022 22:47:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
200 OK 4.6 kB URL HTTP/2 www.youtube.com/iframe_api
IP
File type ASCII text, with very long lines (509)
Hash d1964f0dca5bc9e282c865a08d5e2120
3f163a3204568dfafbfdfc026c6ba7256408ee96
8317cd9892744ae1ca11eaf4f57496c52df771e0b539495c24764d52fa8f7c05
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Sat, 26 Nov 2022 22:47:28 GMT
date: Sat, 26 Nov 2022 22:47:28 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=grzZWUseJsY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=ACQzdon0dzY; Domain=.youtube.com; Expires=Thu, 25-May-2023 22:47:28 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+632; expires=Mon, 25-Nov-2024 22:47:28 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.buygoods.com/assets/js/jquery-3.3.1.min.js
200 OK 32 kB URL HTTP/2 cdn.buygoods.com/assets/js/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash e905abd9f4e8456a2ed587fefb190c11
dee3c5fb0fc21faaa124f44883c209f33742c0e7
a13e40b72362af2df26d277b6685b83e711872ac3e6511d0509a9fa6095a36c2
GET /assets/js/jquery-3.3.1.min.js HTTP/1.1
Host: cdn.buygoods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:47:27 GMT
content-type: application/javascript
last-modified: Mon, 21 Sep 2020 20:25:35 GMT
etag: W/"a09e13ee94d51c524b7e2a728c7d4039"
x-amz-meta-sha256: 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
x-amz-meta-s3b-last-modified: 20190502T230659Z
expires: Wed, 24 Jul 2030 07:58:55 GMT
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 3a4d5aad46ae3a82da414d69565389aa.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: om2SqJo9U9ZdzQcRS-P5V7_hk6nmm7AoTexiFBWH_LZYox4EPnmJ6g==
cf-cache-status: HIT
cache-control: public, max-age=241607488
server: cloudflare
cf-ray: 77062a7e2b270afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 12:31:58 GMT
expires: Sun, 26 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 36931
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 176473
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-LMVQXV2K4M>m=2oeb90&_p=833570541&cid=1996603263.1669502849&ul=en-us&sr=1280x1024&_s=1&sid=1669502848&sct=1&seg=0&dl=https%3A%2F%2Ffatburncombo.com%2F%3Faff_id%3D638%26subid2%3D7787_sessid20221126224744983%26subid%3D202&dt=Fat%20Burn%20Combo%20%E2%80%93%20Fat%20Burn%20Combo&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-LMVQXV2K4M>m=2oeb90&_p=833570541&cid=1996603263.1669502849&ul=en-us&sr=1280x1024&_s=1&sid=1669502848&sct=1&seg=0&dl=https%3A%2F%2Ffatburncombo.com%2F%3Faff_id%3D638%26subid2%3D7787_sessid20221126224744983%26subid%3D202&dt=Fat%20Burn%20Combo%20%E2%80%93%20Fat%20Burn%20Combo&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-LMVQXV2K4M>m=2oeb90&_p=833570541&cid=1996603263.1669502849&ul=en-us&sr=1280x1024&_s=1&sid=1669502848&sct=1&seg=0&dl=https%3A%2F%2Ffatburncombo.com%2F%3Faff_id%3D638%26subid2%3D7787_sessid20221126224744983%26subid%3D202&dt=Fat%20Burn%20Combo%20%E2%80%93%20Fat%20Burn%20Combo&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fatburncombo.com
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://fatburncombo.com
date: Sat, 26 Nov 2022 22:47:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9cff2c2ad4207e09e07c017987177850
833082ded91a1983a1367c48c8076949e079ce95
82b03e92d004f116875ba023a7e8782d3c124a1c499a6328f29cff70f397a6cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 22:45:21 GMT
expires: Sat, 26 Nov 2022 23:00:21 GMT
cache-control: public, max-age=900
age: 128
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sat, 26 Nov 2022 22:47:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be0da545931a6e6f06c7eb8395b8a3af
bea09f1e5d361abfe41135f1497b1b469699b912
3428d08f184d29f34d4067e1796ecfa6aa9f9cc6e76006fac23aaf175bdd4eaf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 26 Nov 2022 22:47:29 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30f833b25d6e5af2229d9584c6f6cf97
ee79c3fa994d53c1d0687ca61353d63cce459e25
1bc091991c4663dbc86ae735e47ddc3e887a24661050ad9f24b8d458bfd11a6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 05e8ae398f3098a51a3a2c5095fcadda
a6343c5b828968c99fa34a9e6e26706c0ce74146
2bc3e1f3d773d4daff4bc9fda561e160227b42c0436b7f0afe1d10b1670227c3
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 26 Nov 2022 22:47:29 GMT
server: ESF
cache-control: private
content-length: 31017
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fatburncombo.com/wp-content/plugins/optimizePressPlugin/lib/assets/default.min.css?ver=2.5.25
200 OK 73 kB URL HTTP/2 fatburncombo.com/wp-content/plugins/optimizePressPlugin/lib/assets/default.min.css?ver=2.5.25
IP
Hash 8755bec83d40e2e8c7026b3ec5c2f3e8
49fe57f32713087eb96ebcefb6efe0c18fd6228b
3271b52c2df4f921aa01c9b8027fe0c3f3e7895f7dec4191ee1043b28a97c116
GET /wp-content/plugins/optimizePressPlugin/lib/assets/default.min.css?ver=2.5.25 HTTP/1.1
Host: fatburncombo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2022 15:42:42 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Dec 2022 22:47:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Sat, 26 Nov 2022 22:47:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8835f987270c3a6655732a8b9f79019d
b526a02966f50407fd20c881616a505ca6693ce3
349663442998cf63d2ff77fdfee46ac572703750f977b4f60e9082307309f7c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AMLnZu8Di9FgOpo4fwEyRkDcHYQjL585_vAwOt6zww=s68-c-k-c0x00ffffff-no-rj
200 OK 1.3 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu8Di9FgOpo4fwEyRkDcHYQjL585_vAwOt6zww=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash bb19016ba2006c1f2f984650a77c02cc
207d3d1dd9f71fdb5bf64045d923ffb92090d17f
73e1924092710b400c0b810df3177a5bb1b2869489e28597640317d57c6d2c1e
GET /ytc/AMLnZu8Di9FgOpo4fwEyRkDcHYQjL585_vAwOt6zww=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sun, 27 Nov 2022 22:47:29 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 22:47:29 GMT
server: fife
content-length: 1313
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 26 Nov 2022 22:47:30 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a452fe37e5182997f7c56072ae4c7d78
d81c3e1e2cf9b0c2333aa9498dd37c7636896317
fe280bdfafca3a9c3d170ca393ab404eb099b86d829881aa166a22e5d26eec55
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1180
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 26 Nov 2022 22:47:30 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2699829f82705e3bc5fc9c80c7e1e13c
a64e05e667843baf7d16263861afe54f889bdc17
0d05cec3866ba93bd75ec6c139d9dbe128b6a16531c5e0726091d5a5d430a76d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df08f508e01b80551d5cb2168117fcd6
17ee41c3900f520024279a9825d6269f155e588f
66f4df6d9783a0e435e457eceda34bd564eb55a188f322558680956d45963af1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=244&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&mh=TU&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1691250&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=video%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=19186742&dur=2166.066&lmt=1669111171944405&mt=1669502492&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKc8lTUi7r7qPzgDHy1JhiURFzZWiUrsQikK-C5bh5PUCIQDTTKJxbf6DFtnfDRUneSVZ-XRPmbIgJRgFoZ8N6BkhMw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAOEYEl7bcXoqE42NroZ0SsmODuif8gBTuDyC18qWOiTwAiBYsY9POKzpVsDg1Hc9NIHyI9x3X3Yayy-PzZHDF0fbdw%3D%3D&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&range=0-190531&rn=1&rbuf=0
200 OK 1.1 kB URL HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=244&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&mh=TU&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1691250&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=video%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=19186742&dur=2166.066&lmt=1669111171944405&mt=1669502492&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKc8lTUi7r7qPzgDHy1JhiURFzZWiUrsQikK-C5bh5PUCIQDTTKJxbf6DFtnfDRUneSVZ-XRPmbIgJRgFoZ8N6BkhMw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAOEYEl7bcXoqE42NroZ0SsmODuif8gBTuDyC18qWOiTwAiBYsY9POKzpVsDg1Hc9NIHyI9x3X3Yayy-PzZHDF0fbdw%3D%3D&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&range=0-190531&rn=1&rbuf=0
IP
ASN #50304 Blix Solutions AS
File type ASCII text, with very long lines (1083), with no line terminators
Hash b81c0d6c47b16005aa19847db1763fd9
5a69de2965eda06e2b83ffd942780341312db4f3
ba8c64541ba93fc04def5c655162e05fc7c7d3f5ba7ee06587635184eeb371fa
GET /videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=244&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&mh=TU&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1691250&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=video%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=19186742&dur=2166.066&lmt=1669111171944405&mt=1669502492&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKc8lTUi7r7qPzgDHy1JhiURFzZWiUrsQikK-C5bh5PUCIQDTTKJxbf6DFtnfDRUneSVZ-XRPmbIgJRgFoZ8N6BkhMw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAOEYEl7bcXoqE42NroZ0SsmODuif8gBTuDyC18qWOiTwAiBYsY9POKzpVsDg1Hc9NIHyI9x3X3Yayy-PzZHDF0fbdw%3D%3D&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&range=0-190531&rn=1&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sat, 26 Nov 2022 22:47:30 GMT
Expires: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 1083
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=251&source=youtube&requiressl=yes&mh=TU&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1691250&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=audio%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=43780868&dur=2166.121&lmt=1669130316184597&mt=1669502492&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5318224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgZLfT8hhcmzg7LSyjFxno8nLgJD5U3-INtViTi_wZ1lsCIHfRUJU_KpCBpbHUt9btSmBTAawVoST97YUzZKI4qdxO&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAOEYEl7bcXoqE42NroZ0SsmODuif8gBTuDyC18qWOiTwAiBYsY9POKzpVsDg1Hc9NIHyI9x3X3Yayy-PzZHDF0fbdw%3D%3D&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&range=0-69622&rn=2&rbuf=0
200 OK 1.0 kB URL HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=251&source=youtube&requiressl=yes&mh=TU&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1691250&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=audio%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=43780868&dur=2166.121&lmt=1669130316184597&mt=1669502492&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5318224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgZLfT8hhcmzg7LSyjFxno8nLgJD5U3-INtViTi_wZ1lsCIHfRUJU_KpCBpbHUt9btSmBTAawVoST97YUzZKI4qdxO&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAOEYEl7bcXoqE42NroZ0SsmODuif8gBTuDyC18qWOiTwAiBYsY9POKzpVsDg1Hc9NIHyI9x3X3Yayy-PzZHDF0fbdw%3D%3D&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&range=0-69622&rn=2&rbuf=0
IP
ASN #50304 Blix Solutions AS
File type ASCII text, with very long lines (1025), with no line terminators
Hash 0882daebeca666936287afe65acb7188
97c946705e0d17cf7987e0f1782ca7f5fe01d78e
e238baa8982cfc0c9e861f1d5dbb64aca7ece6621468c8fdd238deefcf032d76
GET /videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=251&source=youtube&requiressl=yes&mh=TU&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1691250&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=audio%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=43780868&dur=2166.121&lmt=1669130316184597&mt=1669502492&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5318224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgZLfT8hhcmzg7LSyjFxno8nLgJD5U3-INtViTi_wZ1lsCIHfRUJU_KpCBpbHUt9btSmBTAawVoST97YUzZKI4qdxO&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAOEYEl7bcXoqE42NroZ0SsmODuif8gBTuDyC18qWOiTwAiBYsY9POKzpVsDg1Hc9NIHyI9x3X3Yayy-PzZHDF0fbdw%3D%3D&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&range=0-69622&rn=2&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sat, 26 Nov 2022 22:47:30 GMT
Expires: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 1025
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df08f508e01b80551d5cb2168117fcd6
17ee41c3900f520024279a9825d6269f155e588f
66f4df6d9783a0e435e457eceda34bd564eb55a188f322558680956d45963af1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a166b692e49569f49412a4835a95d3a5
c98c9ca2a1ddc28e49f34eb35c8e3c46aa8487b7
4ed9e17a1d8f15022b4f16a825b670ae1f1d9dfb2aced8746dc60e601c426be3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 11f21f5b7a8ced43f390356274d20eae
752926a39aa7c8eb577bdcd621f0246997a0a10a
9fc5caab6782001d1d48cd076bbb0197e7cd4d1c7502d59011a0a7f7f9e62d6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0999d0c3d07b9c4ccb154920dd866b2c
db8be21e780328d355e4bb323c97f587c031aa5a
d30cd3c015457cb4560cf661f81b3191ce3f6888734b726c34afc40b3e8f410d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/tuHjFzYuVZ0/sddefault.webp
200 OK 39 kB URL HTTP/2 i.ytimg.com/vi_webp/tuHjFzYuVZ0/sddefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 96d4847290cf9e918008a12006705f83
b60fbc7c9a56b17c7399502360a29cf886e0fb98
1bdc8a8643c6fd149034f50feb6f42bde659c6c089c1e5326306f63d1d92b826
GET /vi_webp/tuHjFzYuVZ0/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 39154
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 22:47:30 GMT
expires: Sun, 27 Nov 2022 00:47:30 GMT
cache-control: public, max-age=7200
etag: "1669038857"
content-type: image/webp
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a166b692e49569f49412a4835a95d3a5
c98c9ca2a1ddc28e49f34eb35c8e3c46aa8487b7
4ed9e17a1d8f15022b4f16a825b670ae1f1d9dfb2aced8746dc60e601c426be3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=251&source=youtube&requiressl=yes&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=audio%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=43780868&dur=2166.121&lmt=1669130316184597&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5318224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgZLfT8hhcmzg7LSyjFxno8nLgJD5U3-INtViTi_wZ1lsCIHfRUJU_KpCBpbHUt9btSmBTAawVoST97YUzZKI4qdxO&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=TU&mm=29&mn=sn-5goeenez&ms=rdu&mt=1669502731&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAOsw9PfKzBGjPcLpjJAcZ48ifwG6KBalktJ6RngNJeKsAiEA_y5s6zDkujFL9TaHd0Y-L1GHdJABqGPY5JyVuu4RWqU%3D&range=0-69622&rn=4&rbuf=0&pot=Dxl4jKvxiFswGUNFdVBa-1xDpoE720PWttP6wfqwM7gddbxYD2bf1f6PIybZQ_as4ab42uzbnoTK4FHN52SdulRZJofACvUXJWA6AbF4loncWuqZcjMBasZIM9X3m6AJasmb-PF6BHE=
200 OK 70 kB URL HTTP/1.1 rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=251&source=youtube&requiressl=yes&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=audio%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=43780868&dur=2166.121&lmt=1669130316184597&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5318224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgZLfT8hhcmzg7LSyjFxno8nLgJD5U3-INtViTi_wZ1lsCIHfRUJU_KpCBpbHUt9btSmBTAawVoST97YUzZKI4qdxO&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=TU&mm=29&mn=sn-5goeenez&ms=rdu&mt=1669502731&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAOsw9PfKzBGjPcLpjJAcZ48ifwG6KBalktJ6RngNJeKsAiEA_y5s6zDkujFL9TaHd0Y-L1GHdJABqGPY5JyVuu4RWqU%3D&range=0-69622&rn=4&rbuf=0&pot=Dxl4jKvxiFswGUNFdVBa-1xDpoE720PWttP6wfqwM7gddbxYD2bf1f6PIybZQ_as4ab42uzbnoTK4FHN52SdulRZJofACvUXJWA6AbF4loncWuqZcjMBasZIM9X3m6AJasmb-PF6BHE=
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Hash b1895dbc6ba4bb0492af035dbe4df820
c4b8c092b1c4f83f7b941b699df1e12f6cbe7113
643edbf427c409fef2e05611f6ac414ef8c9a754f105ed12553c754daeec545a
GET /videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=251&source=youtube&requiressl=yes&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=audio%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=43780868&dur=2166.121&lmt=1669130316184597&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5318224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgZLfT8hhcmzg7LSyjFxno8nLgJD5U3-INtViTi_wZ1lsCIHfRUJU_KpCBpbHUt9btSmBTAawVoST97YUzZKI4qdxO&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=TU&mm=29&mn=sn-5goeenez&ms=rdu&mt=1669502731&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAOsw9PfKzBGjPcLpjJAcZ48ifwG6KBalktJ6RngNJeKsAiEA_y5s6zDkujFL9TaHd0Y-L1GHdJABqGPY5JyVuu4RWqU%3D&range=0-69622&rn=4&rbuf=0&pot=Dxl4jKvxiFswGUNFdVBa-1xDpoE720PWttP6wfqwM7gddbxYD2bf1f6PIybZQ_as4ab42uzbnoTK4FHN52SdulRZJofACvUXJWA6AbF4loncWuqZcjMBasZIM9X3m6AJasmb-PF6BHE= HTTP/1.1
Host: rr3---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Tue, 22 Nov 2022 15:18:36 GMT
Content-Type: audio/webm
Date: Sat, 26 Nov 2022 22:47:30 GMT
Expires: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 69623
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 11f21f5b7a8ced43f390356274d20eae
752926a39aa7c8eb577bdcd621f0246997a0a10a
9fc5caab6782001d1d48cd076bbb0197e7cd4d1c7502d59011a0a7f7f9e62d6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 512295f664c0e78f42eb681cb523bb4d
f0944daef1d2cbee86b8cc5af262eb15459840fd
6d9c25a7eee0c14901dfb6d66e1743c7153078ce5898548aaecc6f270847b816
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=142102
Date: Sat, 26 Nov 2022 22:47:30 GMT
Etag: "6382071b-1d7"
Expires: Mon, 28 Nov 2022 14:15:52 GMT
Last-Modified: Sat, 26 Nov 2022 12:31:23 GMT
Server: ECS (dcb/7F5C)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oH-CtPDsKd434SDziDrA11IrWUmD8F3RzNG53VIj4bVaXlUZENsGvw==
Age: 6269
data.resurge.com/images/ic_sound_white.png
200 OK 3.3 kB URL HTTP/2 data.resurge.com/images/ic_sound_white.png
IP
File type PNG image data, 82 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash 15a45f95e73951868a6f02bd26afaeae
1423cfce8d9a0770a5d5b1769ab3da7a228b2dd4
fa2bc5e94f437b013ae4a8f975f5274cdba38f5010156005307a7e7bbd46aff4
GET /images/ic_sound_white.png HTTP/1.1
Host: data.resurge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 3320
last-modified: Tue, 21 Apr 2020 12:09:04 GMT
accept-ranges: bytes
server: AmazonS3
date: Sat, 26 Nov 2022 02:27:57 GMT
etag: "15a45f95e73951868a6f02bd26afaeae"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: faW6d1-yVJcJtYwvLI7f7GRxa3rnvQQyJ5nmYO9-c-4DJOzXhPsIcA==
age: 73174
X-Firefox-Spdy: h2
rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=244&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=video%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=19186742&dur=2166.066&lmt=1669111171944405&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKc8lTUi7r7qPzgDHy1JhiURFzZWiUrsQikK-C5bh5PUCIQDTTKJxbf6DFtnfDRUneSVZ-XRPmbIgJRgFoZ8N6BkhMw%3D%3D&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=TU&mm=29&mn=sn-5goeenez&ms=rdu&mt=1669502731&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgKZc2VQ0VErxI1zY7U3j5VGXrLZu4_j4DdrA_DN5R4e4CIDr0o2kaQDuMDR5ftBNA0AJdSctKOmz4V_YUbUW5HsQp&range=0-190531&rn=3&rbuf=0&pot=Dxl4jKvxiFswGUNFdVBa-1xDpoE720PWttP6wfqwM7gddbxYD2bf1f6PIybZQ_as4ab42uzbnoTK4FHN52SdulRZJofACvUXJWA6AbF4loncWuqZcjMBasZIM9X3m6AJasmb-PF6BHE=
200 OK 190 kB URL HTTP/1.1 rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=244&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=video%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=19186742&dur=2166.066&lmt=1669111171944405&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKc8lTUi7r7qPzgDHy1JhiURFzZWiUrsQikK-C5bh5PUCIQDTTKJxbf6DFtnfDRUneSVZ-XRPmbIgJRgFoZ8N6BkhMw%3D%3D&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=TU&mm=29&mn=sn-5goeenez&ms=rdu&mt=1669502731&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgKZc2VQ0VErxI1zY7U3j5VGXrLZu4_j4DdrA_DN5R4e4CIDr0o2kaQDuMDR5ftBNA0AJdSctKOmz4V_YUbUW5HsQp&range=0-190531&rn=3&rbuf=0&pot=Dxl4jKvxiFswGUNFdVBa-1xDpoE720PWttP6wfqwM7gddbxYD2bf1f6PIybZQ_as4ab42uzbnoTK4FHN52SdulRZJofACvUXJWA6AbF4loncWuqZcjMBasZIM9X3m6AJasmb-PF6BHE=
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Size 190 kB (190532 bytes)
Hash 6774a1e538254f751a6da5af9791ac17
806ecde14d7965c760983fc5bb8ebb497181ae1f
3d9c8334606e2d47d347d82cbcd21906c5bda1a00663079351ed8a3f19c785b6
GET /videoplayback?expire=1669524449&ei=gZeCY6OrKsiRv_IP65CIsAE&ip=91.90.42.154&id=o-AHK33ztdzFweZ-RMEySFPCGofzOi-fjISXtxStRcu_TK&itag=244&aitags=133%2C134%2C135%2C160%2C242%2C243%2C244%2C278&source=youtube&requiressl=yes&spc=SFxXNpaZCe8bBdtbRY50w2V9gjwDHgA&vprv=1&mime=video%2Fwebm&ns=kI80qqJhvcInsq9DJ3kxdYwJ&gir=yes&clen=19186742&dur=2166.066&lmt=1669111171944405&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5319224&n=TvdfID2HNIZlPw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKc8lTUi7r7qPzgDHy1JhiURFzZWiUrsQikK-C5bh5PUCIQDTTKJxbf6DFtnfDRUneSVZ-XRPmbIgJRgFoZ8N6BkhMw%3D%3D&alr=yes&cpn=dOyj7TH0ynEo_UW5&cver=1.20221120.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=TU&mm=29&mn=sn-5goeenez&ms=rdu&mt=1669502731&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgKZc2VQ0VErxI1zY7U3j5VGXrLZu4_j4DdrA_DN5R4e4CIDr0o2kaQDuMDR5ftBNA0AJdSctKOmz4V_YUbUW5HsQp&range=0-190531&rn=3&rbuf=0&pot=Dxl4jKvxiFswGUNFdVBa-1xDpoE720PWttP6wfqwM7gddbxYD2bf1f6PIybZQ_as4ab42uzbnoTK4FHN52SdulRZJofACvUXJWA6AbF4loncWuqZcjMBasZIM9X3m6AJasmb-PF6BHE= HTTP/1.1
Host: rr3---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Tue, 22 Nov 2022 09:59:31 GMT
Content-Type: video/webm
Date: Sat, 26 Nov 2022 22:47:30 GMT
Expires: Sat, 26 Nov 2022 22:47:30 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 190532
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
tracking.buygoods.com/track/?a=7699&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=Fat_Burn_tsl,Fat_Burn_tsl1,Fat_Burn_tsl2&vid1=&vid2=&vid3=&caller_url=https%3A%2F%2Ffatburncombo.com%2F%3Faff_id%3D638%26subid2%3D7787_sessid20221126224744983%26subid%3D202
200 OK 0 B URL HTTP/2 tracking.buygoods.com/track/?a=7699&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=Fat_Burn_tsl,Fat_Burn_tsl1,Fat_Burn_tsl2&vid1=&vid2=&vid3=&caller_url=https%3A%2F%2Ffatburncombo.com%2F%3Faff_id%3D638%26subid2%3D7787_sessid20221126224744983%26subid%3D202
IP
GET /track/?a=7699&firstcookie=0&tracking_redirect=&referrer=&sessid2=&product=Fat_Burn_tsl,Fat_Burn_tsl1,Fat_Burn_tsl2&vid1=&vid2=&vid3=&caller_url=https%3A%2F%2Ffatburncombo.com%2F%3Faff_id%3D638%26subid2%3D7787_sessid20221126224744983%26subid%3D202 HTTP/1.1
Host: tracking.buygoods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:47:28 GMT
content-type: application/javascript
p3p: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE"
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Tue, Jan 12 1999 01:01:01 GMT
set-cookie: spiaffid_7699=638; expires=Fri, 24-Feb-2023 22:47:28 GMT; Max-Age=7776000; path=/; domain=.buygoods.com
spisubid_7699=202%7C7787_sessid20221126224744983; expires=Fri, 24-Feb-2023 22:47:28 GMT; Max-Age=7776000; path=/; domain=.buygoods.com
spicampaign_id_7699=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.buygoods.com
spireferrer_7699=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.buygoods.com
spireferrer_7699=91.90.42.154::fatburncombo.com; expires=Fri, 24-Feb-2023 22:47:28 GMT; Max-Age=7776000; path=/; domain=.buygoods.com
spisessid2_7699=sessid20221126224733500; expires=Fri, 24-Feb-2023 22:47:28 GMT; Max-Age=7776000; path=/; domain=.buygoods.com
spi_funnel_codename_7699=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.buygoods.com
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77062a82ed0d0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mwebnice.com/7787/202/2/?subid=Demalre
302 Found 0 B URL HTTP/2 mwebnice.com/7787/202/2/?subid=Demalre
IP
Analyzer Verdict Alert fortinet Phishing
GET /7787/202/2/?subid=Demalre HTTP/1.1
Host: mwebnice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sat, 26 Nov 2022 22:47:26 GMT
content-type: text/html; charset=UTF-8
location: https://fatburncombo.com?aff_id=638&subid2=7787_sessid20221126224744983&subid=202
cache-control: max-age=3600, private
pragma: no-cache
expires: Sat, 26 Nov 2022 23:47:26 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77062a76bf83b51e-OSL
X-Firefox-Spdy: h2
go.maxweb.com/conversion/iframe/?a=7787&token=453f9438d686960bd07e48032b7ad8f0
200 OK 0 B URL HTTP/2 go.maxweb.com/conversion/iframe/?a=7787&token=453f9438d686960bd07e48032b7ad8f0
IP
GET /conversion/iframe/?a=7787&token=453f9438d686960bd07e48032b7ad8f0 HTTP/1.1
Host: go.maxweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fatburncombo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 22:47:28 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Sat, 26 Nov 2022 23:47:28 GMT
cache-control: max-age=3600, private
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77062a833a16b4ed-OSL
content-encoding: br
X-Firefox-Spdy: h2
194.60.87.144
23.36.76.226
172.66.43.22
93.184.220.29
0.0.0.0