r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17337
Expires: Wed, 30 Nov 2022 18:30:11 GMT
Date: Wed, 30 Nov 2022 13:41:14 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 571
Cache-Control: max-age=161976
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:14 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 10:40:50 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15688
Expires: Wed, 30 Nov 2022 18:02:42 GMT
Date: Wed, 30 Nov 2022 13:41:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 13:18:01 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1393
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: fuaGQT2aNespqRkCiwMLo7e3UvW7qc7lT4hZtW84VU9t9a7btpjWJc5V11/SxoZzmA37KPTZQgHoweXWOXYfTg==
x-amz-request-id: 7HNC901Z4H2ZXPTR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 12:45:52 GMT
age: 3322
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 13:41:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 13:11:14 GMT
cache-control: public,max-age=3600
age: 1801
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 578
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:15 GMT
Last-Modified: Wed, 30 Nov 2022 13:31:37 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
www.fishtalesstudio.com/
43.225.110.38301 Moved Permanently 707 B IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 30 Nov 2022 13:41:15 GMT
server: LiteSpeed
location: https://www.fishtalesstudio.com/
push.services.mozilla.com/
35.166.172.24101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.166.172.24:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nE2NlQl7CIXdeLgefwQs8Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aAuz/lYjIs5Bcp6VIhbS0f9FcYY=
www.fishtalesstudio.com/
43.225.110.38200 OK 7.4 kB IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (535), with CRLF line terminators
Hash 6a056db59614ae643e863a7ac09f40de
ed1775e69ce200664b9b9363e7c6c0ede88d644c
dc56ad7b386af5de179bb2ca5fcb9467bbeae5eaf6b955a70191ff5c3271e71a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
last-modified: Mon, 10 May 2021 01:41:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7379
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/embed//pYiOlAjhRSk?rel=0
142.250.74.78303 See Other 0 B URL HTTP/2 www.youtube.com/embed//pYiOlAjhRSk?rel=0
IP 142.250.74.78:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed//pYiOlAjhRSk?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 303 See Other
content-type: application/binary
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
location: https://www.youtube.com/embed/pYiOlAjhRSk?rel=0
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+753; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.fishtalesstudio.com/testimonial.html
43.225.110.38200 OK 7.3 kB URL HTTP/2 www.fishtalesstudio.com/testimonial.html
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (348), with CRLF line terminators
Hash e282c653ec757f8a12a24b4dc662ab69
8e732911098694b28625eb95d4b4e2530f9621c8
f14dfd9910b0405287a5e3ca407697a96d05dc3fa3123efc6c71a42b287e1414
Analyzer Verdict Alert fortinet Phishing
GET /testimonial.html HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Thu, 02 Sep 2021 09:22:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7305
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.fishtalesstudio.com/images/middle_line.jpg
43.225.110.38200 OK 2.6 kB URL HTTP/2 www.fishtalesstudio.com/images/middle_line.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 677x23, components 3\012- data
Hash 74b96b455566a101622e1e4e5fc72bd6
41d45cd9a1db1f5948c4e93daa847a7bc8e654d5
d651e12321679899ef2bfdd1aff84a7ab2785e91e3606d91f3fc5963014aecc1
GET /images/middle_line.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/jpeg
last-modified: Thu, 28 Apr 2005 23:16:50 GMT
accept-ranges: bytes
content-length: 2632
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-137890258-1
142.250.74.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-137890258-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash 19cc224cb9521ff90f6ae6276eba114c
a93bfc2389a27259bb769109e0f3ee44885800c1
6ac3a3bb365200624d0d25aa19bd1496fcdb5309c306528bf070bf11486d0f98
GET /gtag/js?id=UA-137890258-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 30 Nov 2022 13:41:16 GMT
expires: Wed, 30 Nov 2022 13:41:16 GMT
cache-control: private, max-age=900
last-modified: Wed, 30 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43581
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/embed/eflM0MWgX7w?rel=0
142.250.74.78200 OK 28 kB URL HTTP/2 www.youtube.com/embed/eflM0MWgX7w?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58630)
Hash 9d5d066c03a23f77dec640757949ce83
78bd4b46b9967f8e23c0223cf57831a22549945e
40a477a2c6f49aa26d84e9e9ce64b9e23f9791b3cc26a5b1dabc2076246d16f1
GET /embed/eflM0MWgX7w?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=q9662Xlrg40; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=ccDfVhmCYh0; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+488; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/SlxvY6Pc1iY?rel=0
142.250.74.78200 OK 28 kB URL HTTP/2 www.youtube.com/embed/SlxvY6Pc1iY?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash 14e3b9e699f6ee1384ff7c6956c26646
454ce41cafcd74b26278281579d337d978b018c1
30311584a4327ad03affc024843105114652818c2a0ce04cd62004a043d8cca8
GET /embed/SlxvY6Pc1iY?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=BsU-oSgfo5s; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=zH2Hcv3h-GY; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+407; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:40:43 GMT
expires: Fri, 24 Nov 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 507633
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:48:03 GMT
expires: Fri, 24 Nov 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 489193
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/5HR7rNzdRDM?rel=0
142.250.74.78302 Found 391 B URL HTTP/2 www.youtube.com/embed/5HR7rNzdRDM?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 37e6a4f9fd093a28ce5c02efdb9304d9
342c0ac29baf2cca4cdf09c9c7e0c613ffa67472
aef97149a8b3a613a40be8c56af6ca17f332438e3a24d56e2c0f70d924ae1034
GET /embed/5HR7rNzdRDM?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.google.com/sorry/index?continue=https://www.youtube.com/embed/5HR7rNzdRDM%3Frel%3D0&q=EgRbWiqaGPy6nZwGIjAyX1Sujb5a5y2Sdbj5uUj9i2tZcydJmY-6UNzeXIwk02IRhf7CExdrYaAneTXqXsEyBT5jbmRy
date: Wed, 30 Nov 2022 13:41:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 391
x-xss-protection: 0
set-cookie: CONSENT=PENDING+983; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8f58cd30443a495eed3ec0d9827550c1
fd0f53d2acc63ae015b7b42155136ade5841ebc7
333a3cae36081ea37371e32dc9587faacfda5970daa476b3b36cd6f587ce1594
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/embed/xOcDBDsxWag?rel=0
142.250.74.78302 Found 391 B URL HTTP/2 www.youtube.com/embed/xOcDBDsxWag?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash e3279633bcf8ad95f8e7834f87391a1e
61f8d2ff27108e5857be3de0ac6a3a7d78ff0179
cbeae52db48ace3d46885ac84e02a8e0529ec49b4370f7bb31210c48a1cbc851
GET /embed/xOcDBDsxWag?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.google.com/sorry/index?continue=https://www.youtube.com/embed/xOcDBDsxWag%3Frel%3D0&q=EgRbWiqaGPy6nZwGIjCAjRKpxL8Brf16aGyj06HVpUyybBvVBp8MkVZhAzpaIfhWUEAroEf6jimBisqH60kyBT5jbmRy
date: Wed, 30 Nov 2022 13:41:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 391
x-xss-protection: 0
set-cookie: CONSENT=PENDING+830; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/sorry/index?continue=https://www.youtube.com/embed/5HR7rNzdRDM%3Frel%3D0&q=EgRbWiqaGPy6nZwGIjAyX1Sujb5a5y2Sdbj5uUj9i2tZcydJmY-6UNzeXIwk02IRhf7CExdrYaAneTXqXsEyBT5jbmRy
216.58.207.228302 Found 456 B URL HTTP/2 www.google.com/sorry/index?continue=https://www.youtube.com/embed/5HR7rNzdRDM%3Frel%3D0&q=EgRbWiqaGPy6nZwGIjAyX1Sujb5a5y2Sdbj5uUj9i2tZcydJmY-6UNzeXIwk02IRhf7CExdrYaAneTXqXsEyBT5jbmRy
IP 216.58.207.228:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash a5ff7d3d81ced753f3f8ced421b2aa62
2dcd28333442d2bd4682bfce0b5c95dd057b2c62
0e9f5a9706858a415fe3fd6f7919b2f6ff20aa4a98f9e82167e40a090ad2f230
GET /sorry/index?continue=https://www.youtube.com/embed/5HR7rNzdRDM%3Frel%3D0&q=EgRbWiqaGPy6nZwGIjAyX1Sujb5a5y2Sdbj5uUj9i2tZcydJmY-6UNzeXIwk02IRhf7CExdrYaAneTXqXsEyBT5jbmRy HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fishtalesstudio.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.youtube.com/embed/5HR7rNzdRDM?rel=0&google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3D249892dba71be636:TM%3D1669815676:C%3D%3E:IP%3D91.90.42.154-:S%3DO5II3o_8P-nqSWC3cpzcRQ%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DWed,+30-Nov-2022+16:41:16+GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 456
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/sorry/index?continue=https://www.youtube.com/embed/xOcDBDsxWag%3Frel%3D0&q=EgRbWiqaGPy6nZwGIjCAjRKpxL8Brf16aGyj06HVpUyybBvVBp8MkVZhAzpaIfhWUEAroEf6jimBisqH60kyBT5jbmRy
216.58.207.228302 Found 456 B URL HTTP/2 www.google.com/sorry/index?continue=https://www.youtube.com/embed/xOcDBDsxWag%3Frel%3D0&q=EgRbWiqaGPy6nZwGIjCAjRKpxL8Brf16aGyj06HVpUyybBvVBp8MkVZhAzpaIfhWUEAroEf6jimBisqH60kyBT5jbmRy
IP 216.58.207.228:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 9b81a86e3203f8a8a34c0f04e7224022
3515ba0993754ce6c7890275e837f92775d82166
a3db5c1a953d04b406291e5893485e4bb2071495a1bfc6ce65092bb5a6ec5f56
GET /sorry/index?continue=https://www.youtube.com/embed/xOcDBDsxWag%3Frel%3D0&q=EgRbWiqaGPy6nZwGIjCAjRKpxL8Brf16aGyj06HVpUyybBvVBp8MkVZhAzpaIfhWUEAroEf6jimBisqH60kyBT5jbmRy HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fishtalesstudio.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://www.youtube.com/embed/xOcDBDsxWag?rel=0&google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3Dbf82e1f660b876c4:TM%3D1669815676:C%3D%3E:IP%3D91.90.42.154-:S%3DBq7IGCbYDsVpXdeClzz-PQ%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DWed,+30-Nov-2022+16:41:16+GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 456
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/ljMomUhvNhs?rel=0
142.250.74.78302 Found 391 B URL HTTP/2 www.youtube.com/embed/ljMomUhvNhs?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 33adbc5485a2b2398a6b2604865958e8
b9a021ed3faabb869e409fb7e68b6a866d5109b1
427cec001bdee5309629e1bb923696369c372955711c73cf64862249c452f7f8
GET /embed/ljMomUhvNhs?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.google.com/sorry/index?continue=https://www.youtube.com/embed/ljMomUhvNhs%3Frel%3D0&q=EgRbWiqaGPy6nZwGIjCXexT-skax0HemkJzFK95_lewlUTDr3tX-6kMQ5uQZrKU1KkmY4m95VI0FoU_uwpQyBT5jbmRy
date: Wed, 30 Nov 2022 13:41:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 391
x-xss-protection: 0
set-cookie: CONSENT=PENDING+146; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/shape20520500.png
43.225.110.38200 OK 5.6 kB URL HTTP/2 www.fishtalesstudio.com/images/shape20520500.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 1025 x 272, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b16b132079393238f81f766b1d83f7e
f71996f232a70150acc5c99a07dc6953d9072c94
17672a91c9480d0b1d358f927ca55a5ae7ed07c19c05f2bdc3fcedd0b7e546f5
GET /images/shape20520500.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Thu, 11 Feb 2021 10:49:41 GMT
accept-ranges: bytes
content-length: 5588
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/header1.png
43.225.110.38200 OK 12 kB URL HTTP/2 www.fishtalesstudio.com/images/header1.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 1259 x 179, 8-bit/color RGBA, non-interlaced\012- data
Hash 895a45d4f510af32d6b20be22b2bbf02
61aeff42825a95a0bbc5e1d58892670c2fe58cb1
30cc97572b000e6b81a5a015e343494ce7e9a1fe6515b050bc5ade3bc4079fc8
GET /images/header1.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Mon, 24 Jul 2017 21:15:18 GMT
accept-ranges: bytes
content-length: 12117
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/icon_mail_1.png
43.225.110.38200 OK 662 B URL HTTP/2 www.fishtalesstudio.com/images/icon_mail_1.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 77ff3f1731180a06662cde27bf4a14bd
357cf46a6abdfcef5ab90e5c42b7a0b92ccec880
7702030ed239b3826c82bcc9d85dd40867ce7def204c56ca0b25325ce87099b8
GET /images/icon_mail_1.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Mon, 14 Apr 2014 00:47:28 GMT
accept-ranges: bytes
content-length: 662
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/actual%20facebookIcon%20small_n.jpg
43.225.110.38200 OK 16 kB URL HTTP/2 www.fishtalesstudio.com/images/actual%20facebookIcon%20small_n.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=40, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=132], baseline, precision 8, 132x40, components 3\012- data
Hash d6bb600b62cf5c2b682d69a7e8b858ad
d6a85acf0a66d92053ae60f35fbbd562a841700e
386bfea29dea4e866c9c8899ca6b057bda712f6ad883c5dce1138aaca7b81310
GET /images/actual%20facebookIcon%20small_n.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/jpeg
last-modified: Fri, 28 Aug 2015 00:26:14 GMT
accept-ranges: bytes
content-length: 15780
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4604
Expires: Wed, 30 Nov 2022 14:58:01 GMT
Date: Wed, 30 Nov 2022 13:41:17 GMT
Connection: keep-alive
www.youtube.com/embed/3Oto4ZEpe7o?rel=0
142.250.74.78200 OK 28 kB URL HTTP/2 www.youtube.com/embed/3Oto4ZEpe7o?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash 71ec1f455aa5a25b7b4ecf8a3f64cf21
3e0a30dff3891b36048956962c9c87d84e21562e
edb06bbd2e04be3d97e7683881122d35f70ea6813ae262c181f656ff39e73512
GET /embed/3Oto4ZEpe7o?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=W8Y8jGZ5-Zk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=pIRPKH9gx5s; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+282; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4604
Expires: Wed, 30 Nov 2022 14:58:01 GMT
Date: Wed, 30 Nov 2022 13:41:17 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4604
Expires: Wed, 30 Nov 2022 14:58:01 GMT
Date: Wed, 30 Nov 2022 13:41:17 GMT
Connection: keep-alive
www.youtube.com/embed/szxmyWncr0g?rel=0
142.250.74.78200 OK 28 kB URL HTTP/2 www.youtube.com/embed/szxmyWncr0g?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash 466d5ca76c740d90ccfe46ae476f09d7
75566758b68d266b4fb1c5f3cf0204c22b906686
ab9a24096267ca095eb41e72b941e624f34be266f3828af24f8ac8ae610dabe6
GET /embed/szxmyWncr0g?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=aGhdHSWMzDs; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=6SRAoEEgyk8; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+155; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/shop-with-confidence.png
43.225.110.38200 OK 7.6 kB URL HTTP/2 www.fishtalesstudio.com/images/shop-with-confidence.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 62 x 76, 8-bit/color RGB, non-interlaced\012- data
Hash c1782e48d611db79bd5f93c17b97e238
1c51d57bf85939fd987262dab5dd73ba35fa23b3
c66c8569d7de31120c1152360de3e09134265e35a1c40886464a877998c775d3
GET /images/shop-with-confidence.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Sat, 17 Aug 2013 21:34:52 GMT
accept-ranges: bytes
content-length: 7602
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/best-price-guaranteed.png
43.225.110.38200 OK 9.8 kB URL HTTP/2 www.fishtalesstudio.com/images/best-price-guaranteed.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 120 x 74, 8-bit/color RGB, non-interlaced\012- data
Hash befbc614b72f76c46ad005282b0e57a5
14ca2a7299ee83dbc4df6408603d3641cd094b1a
1e0ec3350d69582d58bd72e55db393c5905191c8d1b578fa9c06886a930fade6
GET /images/best-price-guaranteed.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Sat, 01 Mar 2014 22:12:16 GMT
accept-ranges: bytes
content-length: 9769
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/shape45088376.png
43.225.110.38200 OK 371 B URL HTTP/2 www.fishtalesstudio.com/images/shape45088376.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 126 x 109, 8-bit/color RGBA, non-interlaced\012- data
Hash ed136f64a4b70dc2ba851d8fecb2726a
437ba58adbb0088b4265ed7ffd986f764fb343c5
560608e1eea1feabe7150f703b0e631e7c4b8334917e601494abf31973c53d99
GET /images/shape45088376.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Thu, 11 Feb 2021 10:49:41 GMT
accept-ranges: bytes
content-length: 371
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/shape51388164.png
43.225.110.38200 OK 569 B URL HTTP/2 www.fishtalesstudio.com/images/shape51388164.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 397 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash 254cd10e7d4121883cd3099fcb56e783
e91a976df79c0428a1aec1c1bf14994b7d426730
89bce603cddd4e47f2b888c808a842c3a41e00ca7e40653f36d536314766be37
GET /images/shape51388164.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Thu, 11 Feb 2021 10:49:41 GMT
accept-ranges: bytes
content-length: 569
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.youtube.com/embed/d3uB4MxndqA?rel=0
142.250.74.78200 OK 38 kB URL HTTP/2 www.youtube.com/embed/d3uB4MxndqA?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58630)
Hash 24ef7f72e6d06e65dbb23ee7715d284c
f6145f8b8c3bcc3bf87ffa4518f56ccf84460762
d9a94338262b972d303d1d13293db312fd9fad45717a3ca793da21020018a52f
GET /embed/d3uB4MxndqA?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=Cii5xkZI0DY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=OnL_qpTOy-E; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+814; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 777ce44582c70bf01a31da4cab366f36
57e1d34f146d5ccd9943aa97bcc3158f7103bb07
fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: e4GuUolL0WIMXvnF7BZ80j-dMMSILN2gd-1mqFwNns-zCUBsJa8iHQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:43:04 GMT
age: 57493
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.youtube.com/embed/9WyXrYmO8wE?rel=0
142.250.74.78200 OK 37 kB URL HTTP/2 www.youtube.com/embed/9WyXrYmO8wE?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash 9b4f433f73d314ddca68e4eda8c04b48
8319ec24d1024471d3fce5c00ce135f33cab37f2
a26620c66059b8f9b41d643a5034164480fd7533d9dceafb0ae0774d1441adc8
GET /embed/9WyXrYmO8wE?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=_raA9T_vuBI; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=krzI4NGN0sQ; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+421; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/r1aDMN2Jg-4?rel=0
142.250.74.78200 OK 37 kB URL HTTP/2 www.youtube.com/embed/r1aDMN2Jg-4?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash 4017664a5e916811915310f4def92ede
a6c6c2b9aed381275e386d8b6cc67838e2fd2511
049a6b72213fdf91b249f68bde94463ce9f14216f60332db956792733417bcff
GET /embed/r1aDMN2Jg-4?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=gyVfQ2Kf-Cs; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=kWVWjMUGO8I; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+738; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/M3rx_Z2E5wg?rel=0
142.250.74.78200 OK 34 kB URL HTTP/2 www.youtube.com/embed/M3rx_Z2E5wg?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash 76358bc3410a91018a54837f70a83ee3
b7b5651032b38d09997dbe6f1c0056ccb40b335f
d140eb8855b6015adabdfd1756bf281995c51d1a9a42fffdb67928344d719a61
GET /embed/M3rx_Z2E5wg?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=bCWb-BGlhDU; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=W2AILqtadQY; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+460; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/zbSe1fbCTyY?rel=0
142.250.74.78200 OK 33 kB URL HTTP/2 www.youtube.com/embed/zbSe1fbCTyY?rel=0
IP 142.250.74.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58646)
Hash ce06bbe8c781c11140f0b0d5603acdd6
ff221f00149d6679aa30bb1ebb1dca1707bf8cc1
a89e42f845ca9a8aa908e7e37fbc8055f75bffcb39d56a00a67d654701db04b0
GET /embed/zbSe1fbCTyY?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=uwERAoJCZhY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=iSu-OnLQ_Qk; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+911; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/nav222068820i.gif
43.225.110.38200 OK 853 B URL HTTP/2 www.fishtalesstudio.com/images/nav222068820i.gif
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type GIF image data, version 89a, 29 x 30\012- data
Hash 86f4c47ba2ae7479a3d591021e13ed1d
9e783fb7250de73f80dd7da510c923a66c529cd4
20a2bc72038ff30962ccbbe418baf8ab69ca024ab0924971b86f417dfd297618
GET /images/nav222068820i.gif HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/gif
last-modified: Thu, 11 Feb 2021 10:49:07 GMT
accept-ranges: bytes
content-length: 853
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_fb%201.png
43.225.110.38200 OK 726 B URL HTTP/2 www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_fb%201.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 15e9ef1c05ce0f08a6f95209f4e212e7
bc4cab6fa88b3400352032f679e7c91e172bd927
4318074b2656b9cc4bfdb018a620810efcabc7691405c59d1e2e44a1217292c1
GET /images/fish%20tales%20social%20media%20icon-_fb%201.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Thu, 09 May 2019 15:49:30 GMT
accept-ranges: bytes
content-length: 726
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_youtube%201.png
43.225.110.38200 OK 744 B URL HTTP/2 www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_youtube%201.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash e2f8a2aa3615dca772186bb587a59344
9a97656742294c80351a231391366461d9ee9975
cf935dae10ab121592cc47de55d2d55bfb16cd29169c1eb3495c2196036a0a0b
GET /images/fish%20tales%20social%20media%20icon-_youtube%201.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Thu, 09 May 2019 15:49:30 GMT
accept-ranges: bytes
content-length: 744
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/img11958187.gif
43.225.110.38200 OK 7.1 kB URL HTTP/2 www.fishtalesstudio.com/images/img11958187.gif
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type GIF image data, version 89a, 348 x 35\012- data
Hash 2b567977387163a736d6d0844be2733b
b00ae69e1e9e27a0db3822b99d74b193839d86fb
05c265bd3a4130eef459bbfca42755822ea17c00fb729e82b651d98f56d73080
GET /images/img11958187.gif HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/gif
last-modified: Thu, 11 Feb 2021 10:49:41 GMT
accept-ranges: bytes
content-length: 7055
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_instargan%201.png
43.225.110.38200 OK 823 B URL HTTP/2 www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_instargan%201.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 25f852eafe6a23cc87adb7e320c8ac6e
f2ee831431fb57f9a2ca681297b14245461ed337
a70f744f760689ef6fdd818d4c1965e27c7750e65de299d1ecc62cd8fba2f739
GET /images/fish%20tales%20social%20media%20icon-_instargan%201.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Thu, 09 May 2019 15:49:30 GMT
accept-ranges: bytes
content-length: 823
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/bg_reco7.gif
43.225.110.38200 OK 2.2 kB URL HTTP/2 www.fishtalesstudio.com/images/bg_reco7.gif
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type GIF image data, version 89a, 87 x 140\012- data
Hash 7d7b11660c576e39dc815959e1a457df
d30cea9cc2f307c7e6efd3b577e77c71bd4661eb
925026366a266bdf1642a1dfa9e4a6bec09d0eb4b47e5ca75255044bec56f520
GET /images/bg_reco7.gif HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/gif
last-modified: Thu, 27 Aug 2015 23:21:48 GMT
accept-ranges: bytes
content-length: 2247
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_twitter%201.png
43.225.110.38200 OK 802 B URL HTTP/2 www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_twitter%201.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f747d4d16a654ebfa3b798ee0a0eafc
d42124ae0e16a5f82b8ed99da32de897aaa91bdf
54de5ce78862dee64304c10232565a4fc6af642e4fd4b6c26ec09bf3ccb1762b
GET /images/fish%20tales%20social%20media%20icon-_twitter%201.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Thu, 09 May 2019 15:49:30 GMT
accept-ranges: bytes
content-length: 802
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/prder%20now%20red.png
43.225.110.38200 OK 31 kB URL HTTP/2 www.fishtalesstudio.com/images/prder%20now%20red.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 308 x 125, 8-bit/color RGBA, non-interlaced\012- data
Hash 38d84554ee2ddec43b9c9467fc778986
ccd9496f7f2e0348347b6cbf7803000d7bbc5e55
b2a60395af0bdce17f44a09987135d45936ef17433b4347ee6002ec1601070a4
GET /images/prder%20now%20red.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Sun, 17 Feb 2013 03:43:38 GMT
accept-ranges: bytes
content-length: 31308
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/footer-stamps-auth-seal.png
43.225.110.38200 OK 51 kB URL HTTP/2 www.fishtalesstudio.com/images/footer-stamps-auth-seal.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 155 x 155, 8-bit/color RGBA, non-interlaced\012- data
Hash cc3b279514493f4cd0c90be013eaca1e
1e14dc8eeacf6fc7edacccb273468ded644f83b0
9bd3cd3737bd6cd15d1b8376f6f67f636e5f5fbb4043daa9f98de147ca8b012b
GET /images/footer-stamps-auth-seal.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Sun, 30 Aug 2015 21:35:00 GMT
accept-ranges: bytes
content-length: 50724
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/header1-1.png
43.225.110.38200 OK 47 kB URL HTTP/2 www.fishtalesstudio.com/images/header1-1.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 190 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash adf824a0abe77428ab54af36b589e6a8
dbf038c0098d46088de5fffebbf8079e0d2d3c4e
ebc8b5cfad1907372f885015a055afde18d7d3e919e728da2b5ee2cb464a9a4a
GET /images/header1-1.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Wed, 02 Sep 2015 20:53:32 GMT
accept-ranges: bytes
content-length: 47237
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/phone-icon-black.png
43.225.110.38200 OK 28 kB URL HTTP/2 www.fishtalesstudio.com/images/phone-icon-black.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 321 x 311, 8-bit/color RGBA, non-interlaced\012- data
Hash cba8c5930bd925e9e50eb02782cb6be4
64acf59c8caf8f6f3a2493d9e3deec0cc15074e0
33b86366528e4283a75fe9c4acf446a2a47c2f53dba84215c49309c8c51bb4bd
GET /images/phone-icon-black.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/png
last-modified: Mon, 19 Aug 2013 21:59:52 GMT
accept-ranges: bytes
content-length: 27699
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/met%203.jpg
43.225.110.38200 OK 51 kB URL HTTP/2 www.fishtalesstudio.com/images/met%203.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=674, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1300], baseline, precision 8, 475x306, components 3\012- data
Hash f7c410db73a3d7494a2df6e80747504c
77ec470f5940f6655d6bd65330f3b65b20b16dce
01565f99c25b259f154a54384c3cdc0eaa68c98a0ba8204e5601c0275efaa78c
GET /images/met%203.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/jpeg
last-modified: Mon, 14 Apr 2014 01:29:22 GMT
accept-ranges: bytes
content-length: 51332
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/wedding%20animation-early%20bird-%20background%202.jpg
43.225.110.38200 OK 192 kB URL HTTP/2 www.fishtalesstudio.com/images/wedding%20animation-early%20bird-%20background%202.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=3000, bps=194, PhotometricIntepretation=RGB, description=Setup and decorations for dining in wedding day, manufacturer=NIKON CORPORATION, model=NIKON D800, orientation=upper-left, width=4500], baseline, precision 8, 1706x851, components 3\012- data
Size 192 kB (191618 bytes)
Hash a534f12eed922dd944a408b703bf59c7
ab1b87560d4fa1fb8391e1357a5dc801bda976ac
d629d1d3640f26702b0bd55c771989e943c4d07f44d5fdf06b713dfcf822e333
GET /images/wedding%20animation-early%20bird-%20background%202.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/jpeg
last-modified: Thu, 09 May 2019 14:32:34 GMT
accept-ranges: bytes
content-length: 191618
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/save%20the%20date%20video%202019_wedding%20animation%202.jpg
43.225.110.38200 OK 244 kB URL HTTP/2 www.fishtalesstudio.com/images/save%20the%20date%20video%202019_wedding%20animation%202.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=792, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1623], baseline, precision 8, 1623x792, components 3\012- data
Size 244 kB (244067 bytes)
Hash 1521bd8dee663a25430f5375b89962fc
d34ed98fdd5cb8cb8bcdee0f83873ae8d2eb479a
005ae8f8630c8f9d85aae996c709278b1532992fa46e374a524b136c624df107
GET /images/save%20the%20date%20video%202019_wedding%20animation%202.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/jpeg
last-modified: Thu, 03 Oct 2019 22:59:04 GMT
accept-ranges: bytes
content-length: 244067
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/save%20the%20date%20video%202019_wedding%20animation%201.jpg
43.225.110.38200 OK 261 kB URL HTTP/2 www.fishtalesstudio.com/images/save%20the%20date%20video%202019_wedding%20animation%201.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=792, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1623], baseline, precision 8, 1623x792, components 3\012- data
Size 261 kB (260998 bytes)
Hash 58b16c03b2a194c6307aec0acefce99a
e13e44249c54048fd6e4bfeff664d3ce0b846ca0
7351c10d83d343031f1e65c0cf2a530d329d11e508f160f2cebe65517bb91971
GET /images/save%20the%20date%20video%202019_wedding%20animation%201.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/jpeg
last-modified: Thu, 03 Oct 2019 22:59:26 GMT
accept-ranges: bytes
content-length: 260998
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/actual%20facebookIcon%20small%20s_n.jpg
43.225.110.38200 OK 43 kB URL HTTP/2 www.fishtalesstudio.com/images/actual%20facebookIcon%20small%20s_n.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
Hash 1b6b516a3393148f2a4a3ac980cc407d
c2dd87e2f5c1b241bbc9ec7cd7a3a3ef31dca54d
0f426710a46cc2430c134cd414f5bc5894d1629a448bb3fa83592455df1dd381
GET /images/actual%20facebookIcon%20small%20s_n.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:18 GMT
content-type: image/jpeg
last-modified: Fri, 28 Aug 2015 00:26:42 GMT
accept-ranges: bytes
content-length: 15417
date: Wed, 30 Nov 2022 13:41:18 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/header1-2%20light.png
43.225.110.38200 OK 53 kB URL HTTP/2 www.fishtalesstudio.com/images/header1-2%20light.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
Hash 0f9a05f9c5d061aa7e3f5908f723d578
b466624ce8dc6e229f492dbe524aee4d8bdeaee9
0e83c847effc45dc99455a145f722ab3b0353db20042484adbadb51120b20842
GET /images/header1-2%20light.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:18 GMT
content-type: image/png
last-modified: Fri, 02 Jun 2017 12:16:50 GMT
accept-ranges: bytes
content-length: 24353
date: Wed, 30 Nov 2022 13:41:18 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 28 kB IP 142.250.74.131:0
Hash aa72ef220340ac7f97d17057493fd6ae
1ca5402dde5f3c6f39595dba29344f6fe81e1d87
8401da7a50f3d7098b5bf69aca597286ce0f0b4abc45579d8e1fccaa44c56268
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
142.250.74.134200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP 142.250.74.134:0
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 13:36:04 GMT
expires: Wed, 30 Nov 2022 13:51:04 GMT
cache-control: public, max-age=900
age: 315
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
142.250.74.162302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 142.250.74.162:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 30 Nov 2022 13:41:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
142.250.74.162302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 142.250.74.162:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 30 Nov 2022 13:41:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 4b470d898d2b9f278b6ec072b3f336cf
1570b2d97beb377b0a424044be2075ec0a262851
b73f51f344b0c221e7bcc239083809a5a1030f9893db5b9ddb7741df1bde495b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
216.239.38.178200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 216.239.38.178:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 30 Nov 2022 12:41:08 GMT
expires: Wed, 30 Nov 2022 14:41:08 GMT
cache-control: public, max-age=7200
age: 3611
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/nav439705970a.gif
43.225.110.38200 OK 2.8 kB URL HTTP/2 www.fishtalesstudio.com/images/nav439705970a.gif
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type GIF image data, version 87a, 113 x 35\012- data
Hash eb18ec589fe34803978193df510b6163
0bcf14279eab381781e7642e9bdc6ccbdc304a50
bda0d45283d1bbe7f96ccfb379b2d7d2e2f98b65cf4f4c44a44aae0e72de5e63
GET /images/nav439705970a.gif HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/gif
last-modified: Thu, 11 Feb 2021 10:49:22 GMT
accept-ranges: bytes
content-length: 2845
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/nav438632530a.gif
43.225.110.38200 OK 3.0 kB URL HTTP/2 www.fishtalesstudio.com/images/nav438632530a.gif
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type GIF image data, version 87a, 113 x 35\012- data
Hash 8677d4765173d0195cf9ea0a441c5c39
f3f6bbd22f93816687a7f6c8cd683f75faab183c
fa80657f62a86d478bb479470c288298d4f847e1c5b0fd66a02ef157ed4bde17
GET /images/nav438632530a.gif HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/gif
last-modified: Thu, 11 Feb 2021 10:49:22 GMT
accept-ranges: bytes
content-length: 2984
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/nav439944500a.gif
43.225.110.38200 OK 30 kB URL HTTP/2 www.fishtalesstudio.com/images/nav439944500a.gif
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
Hash a6baa25a56ed969288a48ea235f56e7e
a98b659d10c6908b8ec169b064af849cfeda1b78
4949af673d632fdbb355771ac59810cbe6445fe7fc7d2381d10d59a7eb98cf0f
GET /images/nav439944500a.gif HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/gif
last-modified: Thu, 11 Feb 2021 10:49:22 GMT
accept-ranges: bytes
content-length: 2977
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/nav193846680a.gif
43.225.110.38200 OK 2.9 kB URL HTTP/2 www.fishtalesstudio.com/images/nav193846680a.gif
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type GIF image data, version 87a, 113 x 35\012- data
Hash ae5ef48d91e727781f90d0218971020c
daefea4c5b8badc1287ac23a5f3571da61c8553c
e500d5ada4636a07d46836f04732cd4ee0782141ccbe5eb61af7cf23dc93cc90
GET /images/nav193846680a.gif HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/gif
last-modified: Thu, 11 Feb 2021 10:49:22 GMT
accept-ranges: bytes
content-length: 2853
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_fb2.png
43.225.110.38200 OK 632 B URL HTTP/2 www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_fb2.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash a1d34881b092b8de1b5bd8b39e8c78b4
c721b10ccf9c160cd4e8f27db4ee3f57999cabbd
7dbf3abc6094e6d6af933fee556255591754ac52f4e23123cb813d1ac98ed96b
GET /images/fish%20tales%20social%20media%20icon-_fb2.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/png
last-modified: Thu, 09 May 2019 15:49:30 GMT
accept-ranges: bytes
content-length: 632
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/nav222068820a.gif
43.225.110.38200 OK 853 B URL HTTP/2 www.fishtalesstudio.com/images/nav222068820a.gif
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type GIF image data, version 89a, 29 x 30\012- data
Hash 86f4c47ba2ae7479a3d591021e13ed1d
9e783fb7250de73f80dd7da510c923a66c529cd4
20a2bc72038ff30962ccbbe418baf8ab69ca024ab0924971b86f417dfd297618
GET /images/nav222068820a.gif HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/gif
last-modified: Thu, 11 Feb 2021 10:49:07 GMT
accept-ranges: bytes
content-length: 853
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/nav435095210a.gif
43.225.110.38200 OK 3.1 kB URL HTTP/2 www.fishtalesstudio.com/images/nav435095210a.gif
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type GIF image data, version 87a, 113 x 35\012- data
Hash d57a38e1d0c021f3efed786f34480ba8
c886d24c1e5a21ce54fdd5635ceafbe94ce9efa0
0844fda4a8030f844696c0612b4bd1768637767bf5efe0e8209aecb2fee3120b
GET /images/nav435095210a.gif HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/gif
last-modified: Thu, 11 Feb 2021 10:49:22 GMT
accept-ranges: bytes
content-length: 3056
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_youtube%202.png
43.225.110.38200 OK 661 B URL HTTP/2 www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_youtube%202.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 134db3466aaf6c57f19a97eea1ea0fd3
1c109a1c0616c888b4b09b341f9c82eaf3640ed2
19d991da4296c3519fc2a51a171892b2d61b75c78f4f5a75c83913b020f4cf9f
GET /images/fish%20tales%20social%20media%20icon-_youtube%202.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/png
last-modified: Thu, 09 May 2019 15:49:30 GMT
accept-ranges: bytes
content-length: 661
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_instagram%202.png
43.225.110.38200 OK 864 B URL HTTP/2 www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_instagram%202.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 4673acb69743fc7446be2a5157e60b86
f65651fddaa1e3ca69403b731e174143541708c4
c01cfdb26bd43443861723adfe16bdb6d18ea16f9f622d621cc2b44a1057346f
GET /images/fish%20tales%20social%20media%20icon-_instagram%202.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/png
last-modified: Thu, 09 May 2019 15:49:30 GMT
accept-ranges: bytes
content-length: 864
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_twitter%202.png
43.225.110.38200 OK 850 B URL HTTP/2 www.fishtalesstudio.com/images/fish%20tales%20social%20media%20icon-_twitter%202.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a599dd7d04918e2c8bc80dc49c7b6c7
364695cd99bf71fb8d62cfcd3d7269ba0af58561
dc6d73e8c699522bc54edac75d0d5a33f1e45b175fc5acb6c58a7723e38a7e1e
GET /images/fish%20tales%20social%20media%20icon-_twitter%202.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/png
last-modified: Thu, 09 May 2019 15:49:30 GMT
accept-ranges: bytes
content-length: 850
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/prder%20now%20red_S.png
43.225.110.38200 OK 35 kB URL HTTP/2 www.fishtalesstudio.com/images/prder%20now%20red_S.png
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
File type PNG image data, 308 x 125, 8-bit/color RGBA, non-interlaced\012- data
Hash a71ae41271e417272844cbd4ac355ab8
ca3eb190461e293154b5d0f0a9254abdefc61010
9b31498ec7c2089b41cc2fcc7fdfe4549b926698546d3cfc94bbfd7442b60bbc
GET /images/prder%20now%20red_S.png HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:20 GMT
content-type: image/png
last-modified: Sun, 17 Feb 2013 03:48:02 GMT
accept-ranges: bytes
content-length: 35022
date: Wed, 30 Nov 2022 13:41:20 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
172.217.21.170200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 172.217.21.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 30 Nov 2022 13:41:20 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
172.217.21.170200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 172.217.21.170:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 246efd28b5d3006cab66a2511deea96d
344e00c73e19c2a9427c03fafed39ec17d7d5ea6
80a0ca3942b353eae4912df5fffecc7b7d8055041c55e7b0dbbeb1852644e413
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 30 Nov 2022 13:41:20 GMT
server: ESF
cache-control: private
content-length: 30676
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 369336d480569ceb5b96454c928ae3f5
f8bc9e0cd99273198df5c7334d731a1b75fd2f2e
5338be3c216922d48eeec600e01265955f3e00a88eb048344ae365735a85bf9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/M3rx_Z2E5wg/sddefault.webp
142.250.74.86200 OK 50 kB URL HTTP/2 i.ytimg.com/vi_webp/M3rx_Z2E5wg/sddefault.webp
IP 142.250.74.86:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7f796d27263e88ed3113285143383bca
2bb0bb7f542519f3fd1eed0e0cafb09b205446a1
020dff6ef8ae25acdb78a587e34987fbb7fa9ba2d41104fbbbf7dee26e931394
GET /vi_webp/M3rx_Z2E5wg/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49576
date: Wed, 30 Nov 2022 13:41:20 GMT
expires: Wed, 30 Nov 2022 15:41:20 GMT
cache-control: public, max-age=7200
etag: "1557292520"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8d5f53eac27302554bb029ae36aa283c
2d71b909d1a1bbe2e81269d0c6200ba807fcd4aa
a4644d46e0e2b270572d06530145486bac01335dada14ccd6079bd9543e710d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 369336d480569ceb5b96454c928ae3f5
f8bc9e0cd99273198df5c7334d731a1b75fd2f2e
5338be3c216922d48eeec600e01265955f3e00a88eb048344ae365735a85bf9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 13:41:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
172.217.21.170200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 172.217.21.170:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f805874f529bb745e42a734c387ac651
28f7a9110e428e1b9714880ec01339ce9cf19240
e117526dac5c75eab59295e79dcf304d631d697b4ba3d4cad342c1a0ea977af4
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 30 Nov 2022 13:41:20 GMT
server: ESF
cache-control: private
content-length: 30687
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/AMLnZu-7Gkienl3owh-7fENFU8LlbZYvXMc5MR9GDT86Iw=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 3.8 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu-7Gkienl3owh-7fENFU8LlbZYvXMc5MR9GDT86Iw=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash aa1347130de387405dae1c6cbc0ebdff
31e93d302977e3072e48f0c396138723e2765b3f
2ac8b5f75a5fd7dd6c0b96c93e2a07277fd3b4107dab9d80ba2cb37f7d78acb6
GET /ytc/AMLnZu-7Gkienl3owh-7fENFU8LlbZYvXMc5MR9GDT86Iw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v473"
expires: Thu, 01 Dec 2022 13:41:20 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 30 Nov 2022 13:41:20 GMT
server: fife
content-length: 3781
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-137890258-1&cid=766257338.1669815680&jid=146260182&gjid=128921753&_gid=1274341114.1669815680&_u=YEBAAUAAAAAAACAAI~&z=873282489
74.125.131.156200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-137890258-1&cid=766257338.1669815680&jid=146260182&gjid=128921753&_gid=1274341114.1669815680&_u=YEBAAUAAAAAAACAAI~&z=873282489
IP 74.125.131.156:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-137890258-1&cid=766257338.1669815680&jid=146260182&gjid=128921753&_gid=1274341114.1669815680&_u=YEBAAUAAAAAAACAAI~&z=873282489 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.fishtalesstudio.com
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.fishtalesstudio.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 30 Nov 2022 13:41:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05196ec43964cf559caa0c0279148d62
6170d6776615503e3e29f86783febc3e3e78ca66
47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9051
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEMNIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rtfl896JX35oFFEVmqyH9Nm62iSY6rqwzkLwZMcM45p_ySF6J2QwEQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:47 GMT
age: 57396
etag: "6170d6776615503e3e29f86783febc3e3e78ca66"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bad627-8bb4-4de1-a2da-92da8f9ec614.webp
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bad627-8bb4-4de1-a2da-92da8f9ec614.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 536cd283dee06cf1ceb9e15e4850db92
47aafca572d34f9726a0174ac902178556e581d8
63a5acf87962da6656f828422545af0ccc0888f0a2a15ebd2160ffb3714e6241
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bad627-8bb4-4de1-a2da-92da8f9ec614.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7658
x-amzn-requestid: e729e5b6-0c92-4ed3-b449-4a30d5bb4b89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEyEQSIAMFWsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1e-1bba7e9a2d15d66779b1896c;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AuN9hTb4YydNZjvpnTGyE313wl-O3F_p4jC_NUSe8kr3RB_4AjOEMw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:56:09 GMT
age: 56715
etag: "47aafca572d34f9726a0174ac902178556e581d8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.youtube.com/embed/HULJIFtiQMo?rel=0
142.250.74.78200 OK 0 B URL HTTP/2 www.youtube.com/embed/HULJIFtiQMo?rel=0
IP 142.250.74.78:0
GET /embed/HULJIFtiQMo?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=G-9PsWIlr1Q; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=QUz_P3xFEsc; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+770; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/fish%20tales%20website_h1.jpg
43.225.110.38200 OK 0 B URL HTTP/2 www.fishtalesstudio.com/images/fish%20tales%20website_h1.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
GET /images/fish%20tales%20website_h1.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/jpeg
last-modified: Fri, 01 Jan 2021 13:02:26 GMT
accept-ranges: bytes
content-length: 147844
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/quotation%202021-14.jpg
43.225.110.38200 OK 0 B URL HTTP/2 www.fishtalesstudio.com/images/quotation%202021-14.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
GET /images/quotation%202021-14.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/jpeg
last-modified: Wed, 10 Feb 2021 15:44:15 GMT
accept-ranges: bytes
content-length: 880868
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.fishtalesstudio.com/images/save%20the%20date%20video%202019_wedding%20animation%203%20copy.jpg
43.225.110.38200 OK 0 B URL HTTP/2 www.fishtalesstudio.com/images/save%20the%20date%20video%202019_wedding%20animation%203%20copy.jpg
IP 43.225.110.38:0
ASN #132198 iCore Technology Sdn Bhd
GET /images/save%20the%20date%20video%202019_wedding%20animation%203%20copy.jpg HTTP/1.1
Host: www.fishtalesstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 13:41:16 GMT
content-type: image/jpeg
last-modified: Sat, 31 Aug 2019 15:14:56 GMT
accept-ranges: bytes
content-length: 229564
date: Wed, 30 Nov 2022 13:41:16 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.youtube.com/embed/pyte-Ij2Bgs?rel=0
142.250.74.78200 OK 0 B URL HTTP/2 www.youtube.com/embed/pyte-Ij2Bgs?rel=0
IP 142.250.74.78:0
GET /embed/pyte-Ij2Bgs?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=CbIk-uUXW90; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=1goCkcNZzb0; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+142; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/1yQCbFbqp4s?rel=0
142.250.74.78200 OK 0 B URL HTTP/2 www.youtube.com/embed/1yQCbFbqp4s?rel=0
IP 142.250.74.78:0
GET /embed/1yQCbFbqp4s?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=PNKu7JcSdp8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=uNWoJ-DllM4; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+552; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/3DCkz5Qns9k?rel=0
142.250.74.78200 OK 0 B URL HTTP/2 www.youtube.com/embed/3DCkz5Qns9k?rel=0
IP 142.250.74.78:0
GET /embed/3DCkz5Qns9k?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=fLwnBJHr5ws; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=rhXyOdll9ys; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+605; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/iULsovtflIg?rel=0
142.250.74.78200 OK 0 B URL HTTP/2 www.youtube.com/embed/iULsovtflIg?rel=0
IP 142.250.74.78:0
GET /embed/iULsovtflIg?rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fishtalesstudio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 13:41:16 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=9ubuKu6T9ws; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=3q6b5iDMEZ4; Domain=.youtube.com; Expires=Mon, 29-May-2023 13:41:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+500; expires=Fri, 29-Nov-2024 13:41:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2