mahacet.com/offers-inline.html
301 Moved Permanently 246 B URL HTTP/1.1 mahacet.com/offers-inline.html
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f475accc97e82c5a8c4fa1e0287ff67d
6765440c793c7abc9d891631fa12d494ce294e1c
169e934201a57ef864966760a29b9346e3ea8c60eeecc6a287dc6efc93451c54
GET /offers-inline.html HTTP/1.1
Host: mahacet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 20 Sep 2022 19:19:05 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 246
Connection: keep-alive
Location: https://mahacet.com/offers-inline.html
Cache-Control: max-age=300
Expires: Tue, 20 Sep 2022 19:24:05 GMT
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: MISS
X-Server-Powered-By: Engintron
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4932
Expires: Tue, 20 Sep 2022 20:41:17 GMT
Date: Tue, 20 Sep 2022 19:19:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 19:03:07 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: syh8xI5R0lneUYMk2uEZu1pGkF4NJqgU13nQvymXv5S88lSJOtswJw==
Age: 958
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 58bFyBAPfOa7OgNdkVuGMcKHy_YYUT6GbPns_2kBzr3P24bF2sCMOA==
age: 53032
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.comodoca.com/
200 OK 471 B IP
Hash 2dabe3f61f52c9fbdcc8b212e3dee4fd
f999949d9f00711ab1add27c5cade97392a1ce4f
84fcd5be480f016967dad02b1ca2e2c8a86da68c775a15548c96c5c9ee409eb4
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 19:19:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 17 Sep 2022 16:20:07 GMT
Expires: Sat, 24 Sep 2022 16:20:06 GMT
Etag: "f999949d9f00711ab1add27c5cade97392a1ce4f"
Cache-Control: max-age=456320,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74dce9256ea20b3d-OSL
mahacet.com/offers-inline.html
200 OK 8.4 kB URL HTTP/2 mahacet.com/offers-inline.html
IP
ASN #24940 Hetzner Online GmbH
Hash f59f58f92f36341726025211c0204e36
37b28b9bc279969f7941af18a32aa23112450a72
0d5f35a164609508bf0670efbb116fd72391ba3e1480258874a65d8a31405c04
GET /offers-inline.html HTTP/1.1
Host: mahacet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:05 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Sun, 18 Sep 2022 12:14:52 GMT
cache-control: max-age=300
expires: Tue, 20 Sep 2022 19:19:39 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: HIT
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-10193151-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-10193151-1
IP
File type ASCII text, with very long lines (1720)
Hash 97e917ce0af85b767700a40382f9e066
83e1a5fc0b40cb87d1e9082746368ab37ded3123
e6bac4e9a75a60821890e582e21bddb427786b6b0674edbff33f7003f35e04a9
GET /gtag/js?id=UA-10193151-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 20 Sep 2022 19:19:06 GMT
expires: Tue, 20 Sep 2022 19:19:06 GMT
cache-control: private, max-age=900
last-modified: Tue, 20 Sep 2022 18:15:09 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 26fcf8aea27805b4a6a29e3e2a4ba19b
f920fd6c5a79a4adb2f456edcee678757ff1602c
7aa63d03f514e4f51190e85f167f747563f980e0e6fdee6cce9393321dff1038
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 20 Sep 2022 19:03:22 GMT
Expires: Tue, 20 Sep 2022 19:31:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: x0l-Bl5M4GRYxtKvrKkY2Y_R6Qpa5gocB46hOrm2iVZgvyEqDR13Xw==
Age: 944
ocsp.sectigo.com/
200 OK 471 B IP
Hash c90472d89a1b853ad1b912ffd0bc2007
2653296412e80a6bb4b3a411a6df576e7fea0741
1b5a0973707d5170d2e08e88dc5836a5b2d18d3a85dc37753c6fa96f76532f09
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 19:19:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 17 Sep 2022 20:32:16 GMT
Expires: Sat, 24 Sep 2022 20:32:15 GMT
Etag: "2653296412e80a6bb4b3a411a6df576e7fea0741"
Cache-Control: max-age=349388,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74dce9276cac0af6-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 75925b52065e8c40d078aee85c947946
72219bfe4412de462135af38de924431a60cd5f5
e4931e694c717412c066464f1c206f1049ebe3fa70270dd550c84129e49b68bb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 19:19:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 06:25:21 GMT
Expires: Mon, 26 Sep 2022 06:25:20 GMT
Etag: "72219bfe4412de462135af38de924431a60cd5f5"
Cache-Control: max-age=471373,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74dce9276c831c0e-OSL
my.rtmark.net/p.js?f=sync&lr=1&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2
IP
Hash 50ddbff6dd8267c5925f72d28d9e3e3e
66883831e6bfc896216d0d9e25eb850aadc91511
fc1ba62996ffaf271c949fced99155b08a63c99dc87152a2fcb50c2ea9ffd93f
GET /p.js?f=sync&lr=1&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:06 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bb4bdc4c3c6869c822618f0b9ef1bdc5
6a438b8d9d87aa30e0989ace7fc0d4cafce1f29d
eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash da1b7eec55c9145546157b147e94fa3b
45cccd3749b201c3c9cc1ce679654c6c399a99ff
863bd39c4b1ae719c32e5e743b160fd27dad8150b88d1746141e68d528dd3015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "863BD39C4B1AE719C32E5E743B160FD27DAD8150B88D1746141E68D528DD3015"
Last-Modified: Sun, 18 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8819
Expires: Tue, 20 Sep 2022 21:46:05 GMT
Date: Tue, 20 Sep 2022 19:19:06 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash edf07cd621f733b0eb50c632387ebf4f
61a082d26501c2c8d481b1676d0de2e585269613
e5c4324e4c55824b86f48bf0b9a1d317a82e7d3c19bdea7a91d78ce98d68a980
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3877
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:06 GMT
Last-Modified: Tue, 20 Sep 2022 18:14:30 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
unphionetor.com/vctx?t=102123
204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=102123
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=102123 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mahacet.com
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 20 Sep 2022 19:19:06 GMT
access-control-allow-origin: https://mahacet.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 398e31e34ccbcdb4ee51298f6ab5abf2
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.youtube.com/s/player/7577aaa2/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/7577aaa2/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash f9390f92b3c372f0d550ee38e1390635
30b2f1f0b8f6d8249450ea85696abf466f915571
295a55abd0d6cffcd13bf72000fe17e777d61c198ffcebbb77ba71378da50462
GET /s/player/7577aaa2/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49631
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:18:57 GMT
expires: Wed, 20 Sep 2023 19:18:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 00:17:08 GMT
content-type: text/css
age: 9
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/7577aaa2/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL HTTP/2 www.youtube.com/s/player/7577aaa2/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (570)
Hash 99dfba779db4190f6a484f19709b09e8
3fe5f6183c52548abec3484b154926f3b905aa6b
9cd782c0286aaa134f4935856bef05a7ed8ec04b1cad6775c7a3192f2be3ae5a
GET /s/player/7577aaa2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97969
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 14:50:44 GMT
expires: Tue, 19 Sep 2023 14:50:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 00:17:08 GMT
content-type: text/javascript
age: 102502
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/7577aaa2/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/7577aaa2/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/7577aaa2/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 14:50:44 GMT
expires: Tue, 19 Sep 2023 14:50:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 00:17:08 GMT
content-type: text/javascript
age: 102502
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mahacet.com/favicon.ico
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: mahacet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/offers-inline.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:06 GMT
content-type: text/html; charset=UTF-8
content-length: 0
link: <https://mahacet.com/wp-json/>; rel="https://api.w.org/"
expires: Sat, 19 Nov 2022 19:19:06 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: HIT
x-server-powered-by: Engintron
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81fa7001b4b94f54d2ab4f3237ecaabb
e21bb07f34d9bed91f5caac3f9a83e9600a5652c
0ecbe6e0c5198d792a0eeb4197c88ec1d3a9f8b215efae7a6bb87776f7673b6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f5180e6651455bc8443945fb5b6860c
01457b8648200c9d274b2790b95274b1dc855aaf
39301cccc2805993f794301cb01a70a954e7c8a8e5d6779acc4888f77d7282c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Sep 2022 12:31:58 GMT
expires: Sun, 17 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 283628
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dda77a44a7f9eeb9bd828f659ccb7e22
9af43f88835600fd3206e4f18b0c1c2571a3959c
c8effed6366a20b26e104fc4f64d24213eb357d61e7683e28f812d0c21edd044
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f5180e6651455bc8443945fb5b6860c
01457b8648200c9d274b2790b95274b1dc855aaf
39301cccc2805993f794301cb01a70a954e7c8a8e5d6779acc4888f77d7282c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 282 B IP
Hash 9770bea69494841a92779f355002f5df
b4cd690b43e686570bb603ca19a58d9e9ccb56c2
7d93aea09945dd713765c597acc21748b5a7f8c99cc782f9ccbaac3973482f16
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 19:19:06 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 09:53:47 GMT
Expires: Tue, 27 Sep 2022 09:53:46 GMT
Etag: "b4cd690b43e686570bb603ca19a58d9e9ccb56c2"
Cache-Control: max-age=570279,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74dce929ea860af6-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9baaa3878151bf5d83c8d7014da17e5d
d8952bdd01ddec1d9a5a480f17ff5e39f6bdb037
1734ff9035c0a9c965cb5047e9fdbc2c1184b6c568066e856c6dbf0b8dc51df3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6Tlsx4N9eQMs5/Vsnh5gmw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6NlWj3Zv4rSW/N3fUMjJjnvSEzo=
my.rtmark.net/img.gif?f=sync&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2&ttl=&rurl=https%3A%2F%2Fmahacet.com%2Foffers-inline.html
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2&ttl=&rurl=https%3A%2F%2Fmahacet.com%2Foffers-inline.html
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2&ttl=&rurl=https%3A%2F%2Fmahacet.com%2Foffers-inline.html HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:07 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a62a7767e8684aa595b9475b4c639c78; expires=Wed, 20 Sep 2023 19:19:07 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f21412e90af61407d460350c376a911
a0702ce5b354987d025102592339603b1aa8fb17
f2e103d1961e0b553b83b28d0da2e343612ea058a9f2f89ee9ef05341bed9ae3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.a-ads.com/a-ads-banners/411288/728x90?region=eu-central-1
200 OK 22 kB URL HTTP/2 static.a-ads.com/a-ads-banners/411288/728x90?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 728x90, components 3\012- data
Hash 3af60c06af21e754e17a66a85c08ac23
f02b01816a6a2564d657a359c0ba0d585a993231
358937f4c7c0c4114510596de9908e6932dbf51373698c30c3f4c3bd1b07c9d3
GET /a-ads-banners/411288/728x90?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:07 GMT
content-type: image/jpeg
content-length: 22528
x-amz-id-2: Wrz1IxSbyiU0LNVn6PI7VCBtNKXiVbQHAkhy6Q1Rp/eeLiU4gBddkc/PSk+BlZ9veWFqWVyDYrQ=
x-amz-request-id: 07XAQR02QN2M13QQ
x-amz-replication-status: COMPLETED
last-modified: Tue, 23 Aug 2022 14:01:13 GMT
etag: "3af60c06af21e754e17a66a85c08ac23"
cache-control: max-age=315360000
x-amz-version-id: OO2TD4c9FmFamte_EVhmlDDosiYK_wv0
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20220915/r20190131/zrt_lookup.html
200 OK 4.4 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20220915/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash 682bf699cccbc0ff817e1fcb7b95262a
11ad3edf0008f52b733c2d6d7199e1f052318d58
bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
GET /pagead/html/r20220915/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
date: Mon, 19 Sep 2022 20:13:56 GMT
expires: Mon, 03 Oct 2022 20:13:56 GMT
cache-control: public, max-age=1209600
age: 83111
etag: 9671129459699598864
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f21412e90af61407d460350c376a911
a0702ce5b354987d025102592339603b1aa8fb17
f2e103d1961e0b553b83b28d0da2e343612ea058a9f2f89ee9ef05341bed9ae3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-10193151-1&cid=1566305660.1663701547&jid=1877543929&gjid=946152724&_gid=1145798401.1663701547&_u=YEBAAUAAAAAAAC~&z=1007816112
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-10193151-1&cid=1566305660.1663701547&jid=1877543929&gjid=946152724&_gid=1145798401.1663701547&_u=YEBAAUAAAAAAAC~&z=1007816112
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-10193151-1&cid=1566305660.1663701547&jid=1877543929&gjid=946152724&_gid=1145798401.1663701547&_u=YEBAAUAAAAAAAC~&z=1007816112 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://mahacet.com
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://mahacet.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 20 Sep 2022 19:19:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f9a04500cca640e1af04c6989a604053
639af5db6dfb127b15038185e6dd0a75ec33d77f
eb6585fa9ca1612de81379ef5f13084d01f24ced8077bed86917ae6af1af73f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 32d60a76f04221b40dd32e506b6cd47d
89367db15ef63d7916871a006276a981c8b7aec3
c36ad4f90208ed924129ff27e00a6662cc5cc4bf8c4c70e07d04107ddb47d817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=mahacet.com&callback=_gfp_s_&client=ca-pub-5414070771498127
200 OK 199 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=mahacet.com&callback=_gfp_s_&client=ca-pub-5414070771498127
IP
File type ASCII text, with no line terminators
Hash f0622656bfbdf76a990929c592f74341
d76eb457795a83ece709567da7e8c1016d10bc76
519a972621856b116b6e6efaa09077fe9db4402abdd069b66c6606ce42e467e0
GET /gampad/cookie.js?domain=mahacet.com&callback=_gfp_s_&client=ca-pub-5414070771498127 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:07 GMT
server: cafe
cache-control: private
content-length: 199
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ad.a-ads.com/2051809?size=728x90
200 OK 5.2 kB URL HTTP/2 ad.a-ads.com/2051809?size=728x90
IP
ASN #24940 Hetzner Online GmbH
Hash d8076cfde708a36b3c52f9078ea92ab2
64e89d52bc01ba0767e71ee8c4ee17374d062d98
521b907930008ae6c2e90a0389576b1d93e4dd6a10cba0cb92687e7678110fcb
GET /2051809?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:07 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://mahacet.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0180bad73e9143c70a43e0065c4a8072
035340a6bdb7d6438d9e1c5cfa1d5bd0928d98e4
c74f5ac8268c64bc64d08fe4da689750b91c40462265e8ce1b815d202889f3e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6e871380318c8a883f329ca25b2ee36c
e8d3585a45b2b32814096416b12028644c3aff50
0496e550737efc29d25e0bed099c472680f2367aa3d4cde4209bfa9af41fd9d2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:14:23 GMT
expires: Tue, 20 Sep 2022 19:29:23 GMT
cache-control: public, max-age=900
age: 284
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3146bb0aaba22619df206969792ed383
07db3170920b9ba82ecf00e6135eecf08f167942
cba7793fa0a6de6486e3515f886a42efeb21f3b4c84d5e7395f6468a5925d27f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e34f594c2e3b9b6a81e4ae9fef80f363
b7f65f5fb0df328d3c863af6c9351923205645f2
bcedda132b602d90a62a5fbe07e7c37f69cce319fb4b84e1bed40b1200e9898b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e34f594c2e3b9b6a81e4ae9fef80f363
b7f65f5fb0df328d3c863af6c9351923205645f2
bcedda132b602d90a62a5fbe07e7c37f69cce319fb4b84e1bed40b1200e9898b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 20 Sep 2022 19:19:07 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c53364cae0510b97de38fb4b3396ff56
d6088b7fe775ebc077d116271fbe7fce898c06f0
2df909d86d97fbb9a27dd94ca9335ea29eae8f9325fccc8d0ef00a4f7cd7cdc6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 97d00f619bcff2b84de4bd4e19f8a985
450167d4a5b614bff4e50d2854545497c6bd7a24
ff656ba6eafbd32176b2a98dfaf4aa11cd1e54cfb263cd4ffdcad1fbd03abc78
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:07 GMT
server: ESF
cache-control: private
content-length: 31019
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/8jEuNRvllEtFmLzioZdbHhRQ_2cTQWhd6LiOGRrTeiw.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/8jEuNRvllEtFmLzioZdbHhRQ_2cTQWhd6LiOGRrTeiw.js
IP
File type ASCII text, with very long lines (35918)
Hash b600177efe473664fb627ad35ffbc4db
b85f65be40c923277d1455e64a33966ee9fa0838
ec20323b3d03a9e3cb135ab17c27cee75eab248b40f3ebed5062d80ef18f961f
GET /js/th/8jEuNRvllEtFmLzioZdbHhRQ_2cTQWhd6LiOGRrTeiw.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14184
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 05:03:05 GMT
expires: Thu, 14 Sep 2023 05:03:05 GMT
cache-control: public, max-age=31536000
age: 569762
last-modified: Mon, 29 Aug 2022 11:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e34f594c2e3b9b6a81e4ae9fef80f363
b7f65f5fb0df328d3c863af6c9351923205645f2
bcedda132b602d90a62a5fbe07e7c37f69cce319fb4b84e1bed40b1200e9898b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b4c49cafcb6c1050bd6062ca77021b0f
391b19a1f787aaf2769aa4d8b77c8a494b7ccf58
9a41450a0f09390e532d6193d9309fee56fd9a2512375af64516f88b330674ea
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0a103478642d8967648f98988c7e6419
b39283cc8c8cd4f335f94e15f03ede72698f75de
348b99176d4f4d9f324ce464cf051eac70f03bb6219e54c0b6fbf35efa356443
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 15f2e4d43b738892fbb148aa4080c353
82339187aa5d216091d6ef61be63ed476aed8773
fd0178eb6ee7fed2113f20dc523431c0126de3e47d10065044f1fc58246df7aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/YC5q_PYBUgM/maxresdefault.webp
200 OK 52 kB URL HTTP/2 i.ytimg.com/vi_webp/YC5q_PYBUgM/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ffff7aec0d84da2f77ca37ebca11d976
3dc8ba322eb87b8233a7680cd4153356925529bb
222b38319204f7b4f45c30b42601f26f7d53768645674fc0736be2629bc03c8d
GET /vi_webp/YC5q_PYBUgM/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 52270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:19:07 GMT
expires: Tue, 20 Sep 2022 21:19:07 GMT
cache-control: public, max-age=7200
etag: "1609638413"
content-type: image/webp
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 15f2e4d43b738892fbb148aa4080c353
82339187aa5d216091d6ef61be63ed476aed8773
fd0178eb6ee7fed2113f20dc523431c0126de3e47d10065044f1fc58246df7aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1494)
Hash c6ef0dcf21169e17aaffa059d38c2d49
2be7fa5127d37589157427293c2acededdbc009c
a2734b2074e51f52a7e9c604170acd71b311146d99d1640192f015f070b7df7f
GET /pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7552
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 1588701280721430806
content-type: text/javascript; charset=UTF-8
age: 883
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 44 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash 1191238e4518bf6ffe3de5bd10369470
477feae219fa11d8f0404812eb1eeb62cc40cbda
e68823228e0f39a3ed549cae9e5a77dc0a56247eee02b3ea919a8da4a14a3086
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44544
date: Tue, 20 Sep 2022 19:19:07 GMT
expires: Tue, 20 Sep 2022 19:19:07 GMT
cache-control: private, max-age=3000
etag: "1663587528796173"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1624)
Hash 85a90b8e0126b27c0822c49645a463df
45792c551fabfa14db90396c2c34337929011a3b
13fe815828a5dc11870c98db4957f2f59aaf7e0eaec4028d3d88fb4b6e82588e
GET /pagead/js/r20220915/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9550
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:32 GMT
expires: Tue, 04 Oct 2022 18:58:32 GMT
cache-control: public, max-age=1209600
etag: 715955199520789971
content-type: text/javascript; charset=UTF-8
age: 1235
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4aebec42ca2e6505dc8921d4e374fb5e
e43838649932d95af63c651d94b8ca67845156ef
01edca4a2f977f1dc6c0a068f97fd17e04dc96d88d9664107af3b2ffb6f18ffb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ada29f357ebf16bf037a8f7ca0943687
08a6e41c5fa688ca538b3e4b30ec8100fb292aaf
e368e32c7f8c8d2ae99520c324a2571ed402c80f76aec3c05a9711df12150de5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0a103478642d8967648f98988c7e6419
b39283cc8c8cd4f335f94e15f03ede72698f75de
348b99176d4f4d9f324ce464cf051eac70f03bb6219e54c0b6fbf35efa356443
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 67801aaa77b0226b24e48c3d2b0055ec
284e0390a9afeed4f556a2e7eac0e75c33b01d6c
b576b0b0307ccf104137b1427b246e30570da6c64a1c8116fe4e765a0562a308
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 19:19:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8237
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 19:19:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8237
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 19:19:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8237
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 19:19:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a7d863845e96c5927e812f325c08c16
b8484fb5443344b03e52dd56b1d6c5682eb6221a
fcb382029332a44deaf212298b618074a752d674d0c735a1b8b861ab4bb6ff0f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9865
x-amzn-requestid: 7eeeff5b-cb13-4060-96a6-bf5a4be57331
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugokGQVoAMFXmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e169-4211dbbe1a22d0255a45aff0;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:38:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2kU9PLuzusMR04mNUdwbU6-120ESVhYJtNaIixERO68Vo9jEfP3JWg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:04:47 GMT
age: 76461
etag: "b8484fb5443344b03e52dd56b1d6c5682eb6221a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ed7323b395e757f7766ea0045efdaca
8b91bc3069a3217bc719c27959d578b353b5d9dc
8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gLh2EBTPdXvFtZuYKH1NVZebvnz4Rhs-f_rZPtfJpIWNemEk0upeOQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:43 GMT
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
content-type: image/jpeg
age: 76165
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30fbdfee7ec4513a5ff3dfcb7282f816
a852edb64a7220532aa619ab2a440c3a7e11b97a
4adee59f97bea412c6a0a786d0a27e431a497198b9047a75841b0a530803bdfe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9543
x-amzn-requestid: 17be04c9-54f0-4988-82dd-f13911a2a629
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugINHN1IAMF8iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09a-35496b4c21c23dec75257964;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -VBFetQNkmIiWeJtW5IOheaPLdDHM9iKhiGPzVcA3_KQk7Qha5VrXg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:14:25 GMT
age: 75883
etag: "a852edb64a7220532aa619ab2a440c3a7e11b97a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3e70b2859ca89b353682d03f6b46b93
ebd83f29edd95217dfa4f4c7a94eddf34dd58b14
43ad8f8b0a664bbec39e0410c1201498a2d2e36e5bd7d5ece8d65b15230ec50b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 10:06:02 GMT
age: 33186
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg
IP
File type gzip compressed data, max compression\012- data
Hash ae51b74191d06dfccd1dd199a58b3ce9
4887e35b1578bd520da04e69d968800e9b8e2779
89edcaa0eeaf87be58ff968878134e9642f1003cfe282ea07f7dd6001540422c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11145
x-amzn-requestid: dcb726a6-2f43-4170-a53c-4f0d2883309e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yuh7yHfHIAMFu4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e37e-11bf06e96123e01c11854cbb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:47:42 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oJyChyEdTbGx6oQCRy6IVMS8qU22LupFYn6FOii3p4BUVFyKnssQ7Q==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:05:54 GMT
age: 76394
etag: "ff8286c4d2cf87a1865d56d082bc5235dba60ad7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca0c1a7f205ad07f1cce80b26448873
0e14f5062e40ce94346494ff947bfcf74b5e88c1
ebc960279032671136749823c126ec807334d9eaf2b019abcc63b41bcdbf4a7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9873
x-amzn-requestid: 7171299f-e6e3-40ef-a292-33779346e1ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI-FDIIAMF-xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-31f9413434a6b00e77e7709b;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: evL3aL1ULo6B2a8Rp6iILKCX7F14O9HMSbEqkEY3XHFhmMptE8FaVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:44 GMT
age: 76164
etag: "0e14f5062e40ce94346494ff947bfcf74b5e88c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/AMLnZu8bsu05GxMz5jmQzx9Xp7a1tHyWkHpKK-49a8M1=s68-c-k-c0x00ffffff-no-rj
200 OK 0 B URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu8bsu05GxMz5jmQzx9Xp7a1tHyWkHpKK-49a8M1=s68-c-k-c0x00ffffff-no-rj
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ytc/AMLnZu8bsu05GxMz5jmQzx9Xp7a1tHyWkHpKK-49a8M1=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3947
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:20:17 GMT
expires: Sun, 31 Jul 2022 16:58:44 GMT
cache-control: public, max-age=86400, no-transform
age: 3530
etag: "vd"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20220915&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20220915&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14470), with no line terminators
Hash 0a78255b8c19af240f27864f2e6f9d6f
ae1b2cc0c5f374563895012490ab03912def8597
44a29b974ef6485634e8cdb13e5430a03a2e12015585120035c032b0892f115d
GET /getconfig/sodar?sv=200&tid=gda&tv=r20220915&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mahacet.com
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:09 GMT
server: cafe
cache-control: private
content-length: 10988
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202209080101/reactive_library_fy2021.js
200 OK 55 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202209080101/reactive_library_fy2021.js
IP
File type ASCII text, with very long lines (3461)
Hash 19952718214b7f1ee0fd76173a968a71
170b519370f867d285cd7f9ce59e93113b4291e8
ce2876b7a352dbacd007e55463dbfc232f0784811f737a0fd3061d89f4114cae
GET /pagead/managed/js/adsense/m202209080101/reactive_library_fy2021.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 20 Sep 2022 19:19:09 GMT
expires: Tue, 20 Sep 2022 19:19:09 GMT
cache-control: private, max-age=1209600
content-type: text/javascript; charset=UTF-8
etag: 11432715448022380044
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 54580
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Tue, 20 Sep 2022 19:19:09 GMT
expires: Tue, 20 Sep 2022 19:19:09 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
unphionetor.com/vb?t=102123&bid=undefined&aid=undefined&tp=4559
204 No Content 0 B URL HTTP/2 unphionetor.com/vb?t=102123&bid=undefined&aid=undefined&tp=4559
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vb?t=102123&bid=undefined&aid=undefined&tp=4559 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mahacet.com
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 20 Sep 2022 19:19:09 GMT
access-control-allow-origin: https://mahacet.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: e62e7ca2c953d1e877ed83ac0d516d57
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjss90KVYYHVvDh8dt2c-MHxAdtoNIDiA52TtE5TTRxJ8qSGdjGpqFByxt39zOefESDaeiqYbc6u5Pe7L3eoUyaPUSEBaimSx7utKFTpjbgqCNHWZRFT5HaAMxahLdzmU3Ny-4eXH3-PVgemwO-RJjIvEod4CkFUvCBI2h2g3bFI_rv_ysgiFxsyiucJ-vvE_ktXlAgKRPG6-phxsj2gAjTToWSgJKi2ymcGTHx2MaowoV7zlINajtSZEeP2iIUVHeYfUdfYVV-KrHn7CaOpMtZHw5KbG8p6DpjDABEk1jIDd-QGwu-i7672pBOh98e5t14Zv0cAkw7zp03Yoq6V0ab2zURV8pZqOn12FtbGpZA-Ia6shBNGGDTkIYrzfkv2rP_qxVZgFfoNZ1-zfXxM_JurOGygTqMhc98oyh_7cCkjyM8ucIrVXl3q82xAjRrM05CYTdp7MjG5upHjqASkVVZ69iRyPgQdl0RMULUKJuiRq0mPO4z76gNNpyOk3YuYumQxhJPV36muzvbJZvQX-sKLjKG75IVtF0AIPIOYlPLLlMH247Gwor7aZKSjW3lK2iSKuQK_sdp0Z31qpRTjftiTceURi3mffTm2ZfjI3ZxevQVKkpUVEwIT9Eo_xg1kG4gV5QHE_wNA872yTHMlFT6nx90B51YNsCwwWdKRkaWe131_e0X5lt6G4mQF-ykx4PHqHTecZlweSfL_vr6NylwmCBoh2WhzSAKATCxvOO4ldLF9jG3QmIrUvK5VfV-BtcymCATUzdQ9-GcnMZ4a6iL1v49bgseo7RWMr8WSL2rZlKToNd1FmZKsaVWOm4XHkEPTEKkZ1zpFlRCbty5-5S0UooieU1gnNvtoAfaDgOwmZ9cAJp0-mF13u5FtcVCGw_itFwtZS6qgs7DgsCyDOlgOX1oireJ8enu-TxQRIuEP56mMImhCEIwaaK6V6zu8&sai=AMfl-YQy3Vcxhbrv_lLdjJI7-7bF8rQgIg1NbdAGNE2jgAhOHrC2uMj0-V_ZLEReBne-GcMvdSpfo-1ygdOMojPH85hiZNCB0qrKisHlhhjnPTEZIf_I7SmwF90jf4wp1MO2kxYWygNjEJIbRn9exQ&sig=Cg0ArKJSzFoNriU1xfsdEAE&id=lidartos&mcvt=498&p=0,0,90,728&mtos=498,498,498,498,498&tos=498,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=643801748&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547376&rpt=2035&ec=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjss90KVYYHVvDh8dt2c-MHxAdtoNIDiA52TtE5TTRxJ8qSGdjGpqFByxt39zOefESDaeiqYbc6u5Pe7L3eoUyaPUSEBaimSx7utKFTpjbgqCNHWZRFT5HaAMxahLdzmU3Ny-4eXH3-PVgemwO-RJjIvEod4CkFUvCBI2h2g3bFI_rv_ysgiFxsyiucJ-vvE_ktXlAgKRPG6-phxsj2gAjTToWSgJKi2ymcGTHx2MaowoV7zlINajtSZEeP2iIUVHeYfUdfYVV-KrHn7CaOpMtZHw5KbG8p6DpjDABEk1jIDd-QGwu-i7672pBOh98e5t14Zv0cAkw7zp03Yoq6V0ab2zURV8pZqOn12FtbGpZA-Ia6shBNGGDTkIYrzfkv2rP_qxVZgFfoNZ1-zfXxM_JurOGygTqMhc98oyh_7cCkjyM8ucIrVXl3q82xAjRrM05CYTdp7MjG5upHjqASkVVZ69iRyPgQdl0RMULUKJuiRq0mPO4z76gNNpyOk3YuYumQxhJPV36muzvbJZvQX-sKLjKG75IVtF0AIPIOYlPLLlMH247Gwor7aZKSjW3lK2iSKuQK_sdp0Z31qpRTjftiTceURi3mffTm2ZfjI3ZxevQVKkpUVEwIT9Eo_xg1kG4gV5QHE_wNA872yTHMlFT6nx90B51YNsCwwWdKRkaWe131_e0X5lt6G4mQF-ykx4PHqHTecZlweSfL_vr6NylwmCBoh2WhzSAKATCxvOO4ldLF9jG3QmIrUvK5VfV-BtcymCATUzdQ9-GcnMZ4a6iL1v49bgseo7RWMr8WSL2rZlKToNd1FmZKsaVWOm4XHkEPTEKkZ1zpFlRCbty5-5S0UooieU1gnNvtoAfaDgOwmZ9cAJp0-mF13u5FtcVCGw_itFwtZS6qgs7DgsCyDOlgOX1oireJ8enu-TxQRIuEP56mMImhCEIwaaK6V6zu8&sai=AMfl-YQy3Vcxhbrv_lLdjJI7-7bF8rQgIg1NbdAGNE2jgAhOHrC2uMj0-V_ZLEReBne-GcMvdSpfo-1ygdOMojPH85hiZNCB0qrKisHlhhjnPTEZIf_I7SmwF90jf4wp1MO2kxYWygNjEJIbRn9exQ&sig=Cg0ArKJSzFoNriU1xfsdEAE&id=lidartos&mcvt=498&p=0,0,90,728&mtos=498,498,498,498,498&tos=498,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=643801748&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547376&rpt=2035&ec=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjss90KVYYHVvDh8dt2c-MHxAdtoNIDiA52TtE5TTRxJ8qSGdjGpqFByxt39zOefESDaeiqYbc6u5Pe7L3eoUyaPUSEBaimSx7utKFTpjbgqCNHWZRFT5HaAMxahLdzmU3Ny-4eXH3-PVgemwO-RJjIvEod4CkFUvCBI2h2g3bFI_rv_ysgiFxsyiucJ-vvE_ktXlAgKRPG6-phxsj2gAjTToWSgJKi2ymcGTHx2MaowoV7zlINajtSZEeP2iIUVHeYfUdfYVV-KrHn7CaOpMtZHw5KbG8p6DpjDABEk1jIDd-QGwu-i7672pBOh98e5t14Zv0cAkw7zp03Yoq6V0ab2zURV8pZqOn12FtbGpZA-Ia6shBNGGDTkIYrzfkv2rP_qxVZgFfoNZ1-zfXxM_JurOGygTqMhc98oyh_7cCkjyM8ucIrVXl3q82xAjRrM05CYTdp7MjG5upHjqASkVVZ69iRyPgQdl0RMULUKJuiRq0mPO4z76gNNpyOk3YuYumQxhJPV36muzvbJZvQX-sKLjKG75IVtF0AIPIOYlPLLlMH247Gwor7aZKSjW3lK2iSKuQK_sdp0Z31qpRTjftiTceURi3mffTm2ZfjI3ZxevQVKkpUVEwIT9Eo_xg1kG4gV5QHE_wNA872yTHMlFT6nx90B51YNsCwwWdKRkaWe131_e0X5lt6G4mQF-ykx4PHqHTecZlweSfL_vr6NylwmCBoh2WhzSAKATCxvOO4ldLF9jG3QmIrUvK5VfV-BtcymCATUzdQ9-GcnMZ4a6iL1v49bgseo7RWMr8WSL2rZlKToNd1FmZKsaVWOm4XHkEPTEKkZ1zpFlRCbty5-5S0UooieU1gnNvtoAfaDgOwmZ9cAJp0-mF13u5FtcVCGw_itFwtZS6qgs7DgsCyDOlgOX1oireJ8enu-TxQRIuEP56mMImhCEIwaaK6V6zu8&sai=AMfl-YQy3Vcxhbrv_lLdjJI7-7bF8rQgIg1NbdAGNE2jgAhOHrC2uMj0-V_ZLEReBne-GcMvdSpfo-1ygdOMojPH85hiZNCB0qrKisHlhhjnPTEZIf_I7SmwF90jf4wp1MO2kxYWygNjEJIbRn9exQ&sig=Cg0ArKJSzFoNriU1xfsdEAE&id=lidartos&mcvt=498&p=0,0,90,728&mtos=498,498,498,498,498&tos=498,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=643801748&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547376&rpt=2035&ec=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstpnPYPD5gvHZYQp5cxqef2Gshq-QX8_JWQugbhJJBT9I4WvK30DJbvNGuUPkCuoz1BDgtXxiLCN7CVX6o4f9Iqcq54-VrYou4N80FKHgettTxSAYeu9tOKXTT4847_kMA99bxtiBftUipWnNHbnsupFCN2OnqY4XBRGsQEaLVdjV4JhqV_K7WVnMYqcnACe_tUH6tqspfG_hO_ajupaPysWyuuKssxnnPG14EYflHS2zGbljjmytOR--kx3MxqIseT8LEY7wRsdctPwz7Bcq5mvDESDjUa4RbGyvylZzBF3jq0igHh-KsKYVhaANtS1MDTroF9Lqrh37-tTdLi5HmrLpeb0VA_QqgdHUpxQjBOzUbWhOVN53tI3AL1I2IsNbW6QmPNEnL-MyJIgphxmnNqwTXSP59KjVy-ro13hQsiOprKY6N9aNqriR8AJc6v38WPmlILI_bAWbgbSxWHHzViWAFqqV4bn8gZwsa8csBbShLfRH3Sz0QfUn0mHydWm9NMNnDKK-cSOHKG1ySEyW8REcSOSE2Jg5v4itD7kKqPZZe0B9F32V4HOc9shPEN2zt3nxzVkZXeNIHz_OE1MUQGAoypS0kjtp6A_oL76zA288eWjd6bq16awr7PyBN6NYN6c9uLWpF7dCo0-5wb9mdKgVT1g5YZhsWGNCWQR6erYmiAP1I-I3WLR8t2mJLqm4GPDcnH-xJs0cFQqvi9TFz6to8OwkAVBB0m6xJEoDiRESknJEtG2j4EYiHgaUSnICTzAFJpvOQT-V7B_s96MawUJldBpT3XZLlmwMnVo6FLTMcRBnyv8CoLn5IIdZ3WVUaveVV9XPLlU5G1iCxXqoBZY35gCR3pSZQYaNYrPYlJqBAd-aQ4sKmQwmTKCjvl-sQWJVovdTNALKmbQ30_WB-jpGu-Cf-cEPVKF7-wkpQoLN68ctxgorgBviyXbus4Iw&sai=AMfl-YSRhEZ_dsvNfyUswEW42qN9lDhXK0OCRSm7_utsLh4oiENXEo4HnTjp8uo8WIAWWOKr9gJJPSNt6Rd9WuBwuvRE0Qwp3-_Un2t4aDlX23jBKwAa7yx2cgl-jxMlLWnHP7qys1gaZ2IHNl4WGA&sig=Cg0ArKJSzIOsIhY-442IEAE&id=lidartos&mcvt=711&p=0,0,90,728&mtos=711,711,711,711,711&tos=711,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=850080377&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547382&rpt=1698&ec=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstpnPYPD5gvHZYQp5cxqef2Gshq-QX8_JWQugbhJJBT9I4WvK30DJbvNGuUPkCuoz1BDgtXxiLCN7CVX6o4f9Iqcq54-VrYou4N80FKHgettTxSAYeu9tOKXTT4847_kMA99bxtiBftUipWnNHbnsupFCN2OnqY4XBRGsQEaLVdjV4JhqV_K7WVnMYqcnACe_tUH6tqspfG_hO_ajupaPysWyuuKssxnnPG14EYflHS2zGbljjmytOR--kx3MxqIseT8LEY7wRsdctPwz7Bcq5mvDESDjUa4RbGyvylZzBF3jq0igHh-KsKYVhaANtS1MDTroF9Lqrh37-tTdLi5HmrLpeb0VA_QqgdHUpxQjBOzUbWhOVN53tI3AL1I2IsNbW6QmPNEnL-MyJIgphxmnNqwTXSP59KjVy-ro13hQsiOprKY6N9aNqriR8AJc6v38WPmlILI_bAWbgbSxWHHzViWAFqqV4bn8gZwsa8csBbShLfRH3Sz0QfUn0mHydWm9NMNnDKK-cSOHKG1ySEyW8REcSOSE2Jg5v4itD7kKqPZZe0B9F32V4HOc9shPEN2zt3nxzVkZXeNIHz_OE1MUQGAoypS0kjtp6A_oL76zA288eWjd6bq16awr7PyBN6NYN6c9uLWpF7dCo0-5wb9mdKgVT1g5YZhsWGNCWQR6erYmiAP1I-I3WLR8t2mJLqm4GPDcnH-xJs0cFQqvi9TFz6to8OwkAVBB0m6xJEoDiRESknJEtG2j4EYiHgaUSnICTzAFJpvOQT-V7B_s96MawUJldBpT3XZLlmwMnVo6FLTMcRBnyv8CoLn5IIdZ3WVUaveVV9XPLlU5G1iCxXqoBZY35gCR3pSZQYaNYrPYlJqBAd-aQ4sKmQwmTKCjvl-sQWJVovdTNALKmbQ30_WB-jpGu-Cf-cEPVKF7-wkpQoLN68ctxgorgBviyXbus4Iw&sai=AMfl-YSRhEZ_dsvNfyUswEW42qN9lDhXK0OCRSm7_utsLh4oiENXEo4HnTjp8uo8WIAWWOKr9gJJPSNt6Rd9WuBwuvRE0Qwp3-_Un2t4aDlX23jBKwAa7yx2cgl-jxMlLWnHP7qys1gaZ2IHNl4WGA&sig=Cg0ArKJSzIOsIhY-442IEAE&id=lidartos&mcvt=711&p=0,0,90,728&mtos=711,711,711,711,711&tos=711,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=850080377&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547382&rpt=1698&ec=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjstpnPYPD5gvHZYQp5cxqef2Gshq-QX8_JWQugbhJJBT9I4WvK30DJbvNGuUPkCuoz1BDgtXxiLCN7CVX6o4f9Iqcq54-VrYou4N80FKHgettTxSAYeu9tOKXTT4847_kMA99bxtiBftUipWnNHbnsupFCN2OnqY4XBRGsQEaLVdjV4JhqV_K7WVnMYqcnACe_tUH6tqspfG_hO_ajupaPysWyuuKssxnnPG14EYflHS2zGbljjmytOR--kx3MxqIseT8LEY7wRsdctPwz7Bcq5mvDESDjUa4RbGyvylZzBF3jq0igHh-KsKYVhaANtS1MDTroF9Lqrh37-tTdLi5HmrLpeb0VA_QqgdHUpxQjBOzUbWhOVN53tI3AL1I2IsNbW6QmPNEnL-MyJIgphxmnNqwTXSP59KjVy-ro13hQsiOprKY6N9aNqriR8AJc6v38WPmlILI_bAWbgbSxWHHzViWAFqqV4bn8gZwsa8csBbShLfRH3Sz0QfUn0mHydWm9NMNnDKK-cSOHKG1ySEyW8REcSOSE2Jg5v4itD7kKqPZZe0B9F32V4HOc9shPEN2zt3nxzVkZXeNIHz_OE1MUQGAoypS0kjtp6A_oL76zA288eWjd6bq16awr7PyBN6NYN6c9uLWpF7dCo0-5wb9mdKgVT1g5YZhsWGNCWQR6erYmiAP1I-I3WLR8t2mJLqm4GPDcnH-xJs0cFQqvi9TFz6to8OwkAVBB0m6xJEoDiRESknJEtG2j4EYiHgaUSnICTzAFJpvOQT-V7B_s96MawUJldBpT3XZLlmwMnVo6FLTMcRBnyv8CoLn5IIdZ3WVUaveVV9XPLlU5G1iCxXqoBZY35gCR3pSZQYaNYrPYlJqBAd-aQ4sKmQwmTKCjvl-sQWJVovdTNALKmbQ30_WB-jpGu-Cf-cEPVKF7-wkpQoLN68ctxgorgBviyXbus4Iw&sai=AMfl-YSRhEZ_dsvNfyUswEW42qN9lDhXK0OCRSm7_utsLh4oiENXEo4HnTjp8uo8WIAWWOKr9gJJPSNt6Rd9WuBwuvRE0Qwp3-_Un2t4aDlX23jBKwAa7yx2cgl-jxMlLWnHP7qys1gaZ2IHNl4WGA&sig=Cg0ArKJSzIOsIhY-442IEAE&id=lidartos&mcvt=711&p=0,0,90,728&mtos=711,711,711,711,711&tos=711,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=850080377&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547382&rpt=1698&ec=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvxVfD9KZpOUnD5Jfn2ph0xDKRYjBpCpZrr2Cwh8mnZFx615TSzAZlFIpN0lB8cF-txfxVVxNMd3bqbjCIps3_i38Gb4SCYKTP8T2wHXE0Ie-kBdfiUZZ-BRNNwEfyXGJZRrC5TSkpUYJzFl7wjYdB4cw3L3-ODpiYzVfM6yuCT4u-fB9vLcvWQotgtM2DT58oGd0Kycs-QB8oPqZuaq0q7A14sfFnQiX76iCfdqv3Gh1HrxUQLJDPfHQDlnZUzQjG8o-lkFF2pu5BnuGS4tEw6Y_oAD_ah4vWhL-GAcs6U4YglWalhJKjMKg3XuAGmnUmhQXo3ia6APBdTza1BHcwP-UHtdQC97Lk3f6LLolHEyYr6nvzo4iuiEHlfo4O8EbdMB1J9AGQI6iUU4tXY0xmeLUl69XBvYRkLjiykljiEAH1W9uuetJgFOumqCRPPz3M64d8JEipaqsRNgG9Sae1k2SZrQrH6dcOck6Gn9VEusFaezZ2_dhP9dH9woDGmiVvJWGhgB3le7kl3PfIJ61YufpAS9zo8NXgdQxnTUp9jOF-Fr4TlQFiGw5UlR-VALkD7NL4C_jWufryUnW_ChX6VEzuZkXnurtbSQmrK5uGjLh_Nr4De1cQNj_rZ3G15HMReiTLoIGAG3IiKR_TV8iaJObK4f5Vuog3mL-ZYvvcYA_NHNuZjo-ZTmzrGCBpXbeaw07qiGHq7lUZzEhw8qWTX0F8o4egXuyO0WHBu8lWe0dLKDtFHFjoUiMQukTIJONi-m2s6cB1E1njtfxArQlSKbxrIxNSQbIt1ap8tt_Q3o7Lw3RfOvu9CDg5qtkR9mkvVShEdPTV7yHSsNLqhnpazBwVCztdnWiIgn_X86znidKiORNZSk8trTC4WkD1OTsi5HdYKTiJXBdid7cEFdRtsKkAT7m86j3VkBuytw3SOjWhpT0zci-yPXV-QS9ujSja5tYz14nKBjZVI4ufEXC22UCrOWe_OxiUcKrv3_HHK&sai=AMfl-YS9X06Q4XMxjLS3qUhtv1g4TZxnFB2tjQts1HpgAFrH2yCvWnkS91sK7wX_5Kh189UDOPVg51SXG7p6jL3q-1V0Zpd6Z4-Ov_CzLHSBjL8mHS1D8vGXrRm8FaABH0j8DC6Yrjg6lgJ8rvDx3w&sig=Cg0ArKJSzGhP2WINssaxEAE&id=lidartos&mcvt=517&p=0,0,250,970&mtos=517,517,517,517,517&tos=517,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1268289179&rs=2&la=1&cr=0&vs=3&r=b&rst=1663701547388&rpt=1955&ec=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvxVfD9KZpOUnD5Jfn2ph0xDKRYjBpCpZrr2Cwh8mnZFx615TSzAZlFIpN0lB8cF-txfxVVxNMd3bqbjCIps3_i38Gb4SCYKTP8T2wHXE0Ie-kBdfiUZZ-BRNNwEfyXGJZRrC5TSkpUYJzFl7wjYdB4cw3L3-ODpiYzVfM6yuCT4u-fB9vLcvWQotgtM2DT58oGd0Kycs-QB8oPqZuaq0q7A14sfFnQiX76iCfdqv3Gh1HrxUQLJDPfHQDlnZUzQjG8o-lkFF2pu5BnuGS4tEw6Y_oAD_ah4vWhL-GAcs6U4YglWalhJKjMKg3XuAGmnUmhQXo3ia6APBdTza1BHcwP-UHtdQC97Lk3f6LLolHEyYr6nvzo4iuiEHlfo4O8EbdMB1J9AGQI6iUU4tXY0xmeLUl69XBvYRkLjiykljiEAH1W9uuetJgFOumqCRPPz3M64d8JEipaqsRNgG9Sae1k2SZrQrH6dcOck6Gn9VEusFaezZ2_dhP9dH9woDGmiVvJWGhgB3le7kl3PfIJ61YufpAS9zo8NXgdQxnTUp9jOF-Fr4TlQFiGw5UlR-VALkD7NL4C_jWufryUnW_ChX6VEzuZkXnurtbSQmrK5uGjLh_Nr4De1cQNj_rZ3G15HMReiTLoIGAG3IiKR_TV8iaJObK4f5Vuog3mL-ZYvvcYA_NHNuZjo-ZTmzrGCBpXbeaw07qiGHq7lUZzEhw8qWTX0F8o4egXuyO0WHBu8lWe0dLKDtFHFjoUiMQukTIJONi-m2s6cB1E1njtfxArQlSKbxrIxNSQbIt1ap8tt_Q3o7Lw3RfOvu9CDg5qtkR9mkvVShEdPTV7yHSsNLqhnpazBwVCztdnWiIgn_X86znidKiORNZSk8trTC4WkD1OTsi5HdYKTiJXBdid7cEFdRtsKkAT7m86j3VkBuytw3SOjWhpT0zci-yPXV-QS9ujSja5tYz14nKBjZVI4ufEXC22UCrOWe_OxiUcKrv3_HHK&sai=AMfl-YS9X06Q4XMxjLS3qUhtv1g4TZxnFB2tjQts1HpgAFrH2yCvWnkS91sK7wX_5Kh189UDOPVg51SXG7p6jL3q-1V0Zpd6Z4-Ov_CzLHSBjL8mHS1D8vGXrRm8FaABH0j8DC6Yrjg6lgJ8rvDx3w&sig=Cg0ArKJSzGhP2WINssaxEAE&id=lidartos&mcvt=517&p=0,0,250,970&mtos=517,517,517,517,517&tos=517,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1268289179&rs=2&la=1&cr=0&vs=3&r=b&rst=1663701547388&rpt=1955&ec=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsvxVfD9KZpOUnD5Jfn2ph0xDKRYjBpCpZrr2Cwh8mnZFx615TSzAZlFIpN0lB8cF-txfxVVxNMd3bqbjCIps3_i38Gb4SCYKTP8T2wHXE0Ie-kBdfiUZZ-BRNNwEfyXGJZRrC5TSkpUYJzFl7wjYdB4cw3L3-ODpiYzVfM6yuCT4u-fB9vLcvWQotgtM2DT58oGd0Kycs-QB8oPqZuaq0q7A14sfFnQiX76iCfdqv3Gh1HrxUQLJDPfHQDlnZUzQjG8o-lkFF2pu5BnuGS4tEw6Y_oAD_ah4vWhL-GAcs6U4YglWalhJKjMKg3XuAGmnUmhQXo3ia6APBdTza1BHcwP-UHtdQC97Lk3f6LLolHEyYr6nvzo4iuiEHlfo4O8EbdMB1J9AGQI6iUU4tXY0xmeLUl69XBvYRkLjiykljiEAH1W9uuetJgFOumqCRPPz3M64d8JEipaqsRNgG9Sae1k2SZrQrH6dcOck6Gn9VEusFaezZ2_dhP9dH9woDGmiVvJWGhgB3le7kl3PfIJ61YufpAS9zo8NXgdQxnTUp9jOF-Fr4TlQFiGw5UlR-VALkD7NL4C_jWufryUnW_ChX6VEzuZkXnurtbSQmrK5uGjLh_Nr4De1cQNj_rZ3G15HMReiTLoIGAG3IiKR_TV8iaJObK4f5Vuog3mL-ZYvvcYA_NHNuZjo-ZTmzrGCBpXbeaw07qiGHq7lUZzEhw8qWTX0F8o4egXuyO0WHBu8lWe0dLKDtFHFjoUiMQukTIJONi-m2s6cB1E1njtfxArQlSKbxrIxNSQbIt1ap8tt_Q3o7Lw3RfOvu9CDg5qtkR9mkvVShEdPTV7yHSsNLqhnpazBwVCztdnWiIgn_X86znidKiORNZSk8trTC4WkD1OTsi5HdYKTiJXBdid7cEFdRtsKkAT7m86j3VkBuytw3SOjWhpT0zci-yPXV-QS9ujSja5tYz14nKBjZVI4ufEXC22UCrOWe_OxiUcKrv3_HHK&sai=AMfl-YS9X06Q4XMxjLS3qUhtv1g4TZxnFB2tjQts1HpgAFrH2yCvWnkS91sK7wX_5Kh189UDOPVg51SXG7p6jL3q-1V0Zpd6Z4-Ov_CzLHSBjL8mHS1D8vGXrRm8FaABH0j8DC6Yrjg6lgJ8rvDx3w&sig=Cg0ArKJSzGhP2WINssaxEAE&id=lidartos&mcvt=517&p=0,0,250,970&mtos=517,517,517,517,517&tos=517,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1268289179&rs=2&la=1&cr=0&vs=3&r=b&rst=1663701547388&rpt=1955&ec=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst-PmvS5JVi1c-3lh44fK5zLzJqtd7pj-JkA7n2pTRC8-8z5GOhGOseiBM84I6QTLgmGH4M-KGPN0l8WRAxf_xk9k07aZ_rlwTZEIpPfoVc9S9JkQ8dcLPdoUSJ4c-bnm3PFS5G-BxLKbqVZFriF2F9VnGyUnGY4240KxM7qDsmUZ3o-JXp7-HVSlj4ehgBYczi_f0c1TS8hP8QIJeKxenIPIkWlB-XOlyDH1GAr-_eSK8pSxlkwe430_WXMof7EdqtnqvZFTT3eXl1Ei2gpTpfiXbcFko2vkbRmp9wtv2lOcrkoSJw_91DUyw9qkcvq5LtbyEprIHQJ7pjkpnA9x4a7GtSHr_AuWLXohwyk_m95xUKMY7VF9YcDv72fBzQmsSXwYxjB84h6R98-8dkdIoTunnq7k2BLmtwrLPD4pLePcz5s82ADV9_QiYiym0bpj87Qw-OvbiEp4hN6JZ4HviNVCmj_28R_XH7AS4qFf0ltl8NWI4swbhKS6wKX9br5Lw_WxzD_phnvsBswvQ3MJ_-FGHHr9JteNbZDyVfMZRVTBf5MFgXubztcXRyGhoXZu2kW9B3yLNXQbju1Q8kSVfwo71N1pSw3ZHrVZy0NW_HlHYbjZwwZK8AWkXYAd2f-KFM988Fojjc4-CtWX8jCL9vMO_G81bcC5qdO8bPtUcOUgmzWEUawhFM0c7FOV-jpbuSOn_aCCYRnv6eqyFykXtl-1clPtXo9tDe9Y_BSDnr6v7PFEmIIcr7wuHl7aTLwEEoYdflLW0eqoJOP33-MOZT4Z5rUiyF3Q1B7ePAEoQ3qYLCka8VaLAJhvfMvAkfSsEESCTFB--7h6AQEUAUn_KHkiIO93VtrENREeGjOl6AYRH9TIrKCf1mSILG9ZB7x0GPgLbq92wqpOQ3dDgxM2iXTrwN78h8uNa1NiuwgbIBwJVlm6l1RVfU9Wn2jkID1g&sai=AMfl-YSo-esSO9zD_yFXi-X-PIFYgZ-ZtgkG5WeNqVAGxVdjGcbjMVdkNlBzYUAUPxaKW-nHbBOgzg3ZKirOe9KZ76WmsDleEEpaHLKU_9_KoKwNq1Ifwc6_sCuqt7BpDpuw6w-RxkGk9ogl4GV1FA&sig=Cg0ArKJSzBn_8j6BwBzuEAE&id=lidartos&mcvt=728&p=0,0,90,728&mtos=728,728,728,728,728&tos=728,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1646902164&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547394&rpt=1718&ec=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst-PmvS5JVi1c-3lh44fK5zLzJqtd7pj-JkA7n2pTRC8-8z5GOhGOseiBM84I6QTLgmGH4M-KGPN0l8WRAxf_xk9k07aZ_rlwTZEIpPfoVc9S9JkQ8dcLPdoUSJ4c-bnm3PFS5G-BxLKbqVZFriF2F9VnGyUnGY4240KxM7qDsmUZ3o-JXp7-HVSlj4ehgBYczi_f0c1TS8hP8QIJeKxenIPIkWlB-XOlyDH1GAr-_eSK8pSxlkwe430_WXMof7EdqtnqvZFTT3eXl1Ei2gpTpfiXbcFko2vkbRmp9wtv2lOcrkoSJw_91DUyw9qkcvq5LtbyEprIHQJ7pjkpnA9x4a7GtSHr_AuWLXohwyk_m95xUKMY7VF9YcDv72fBzQmsSXwYxjB84h6R98-8dkdIoTunnq7k2BLmtwrLPD4pLePcz5s82ADV9_QiYiym0bpj87Qw-OvbiEp4hN6JZ4HviNVCmj_28R_XH7AS4qFf0ltl8NWI4swbhKS6wKX9br5Lw_WxzD_phnvsBswvQ3MJ_-FGHHr9JteNbZDyVfMZRVTBf5MFgXubztcXRyGhoXZu2kW9B3yLNXQbju1Q8kSVfwo71N1pSw3ZHrVZy0NW_HlHYbjZwwZK8AWkXYAd2f-KFM988Fojjc4-CtWX8jCL9vMO_G81bcC5qdO8bPtUcOUgmzWEUawhFM0c7FOV-jpbuSOn_aCCYRnv6eqyFykXtl-1clPtXo9tDe9Y_BSDnr6v7PFEmIIcr7wuHl7aTLwEEoYdflLW0eqoJOP33-MOZT4Z5rUiyF3Q1B7ePAEoQ3qYLCka8VaLAJhvfMvAkfSsEESCTFB--7h6AQEUAUn_KHkiIO93VtrENREeGjOl6AYRH9TIrKCf1mSILG9ZB7x0GPgLbq92wqpOQ3dDgxM2iXTrwN78h8uNa1NiuwgbIBwJVlm6l1RVfU9Wn2jkID1g&sai=AMfl-YSo-esSO9zD_yFXi-X-PIFYgZ-ZtgkG5WeNqVAGxVdjGcbjMVdkNlBzYUAUPxaKW-nHbBOgzg3ZKirOe9KZ76WmsDleEEpaHLKU_9_KoKwNq1Ifwc6_sCuqt7BpDpuw6w-RxkGk9ogl4GV1FA&sig=Cg0ArKJSzBn_8j6BwBzuEAE&id=lidartos&mcvt=728&p=0,0,90,728&mtos=728,728,728,728,728&tos=728,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1646902164&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547394&rpt=1718&ec=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjst-PmvS5JVi1c-3lh44fK5zLzJqtd7pj-JkA7n2pTRC8-8z5GOhGOseiBM84I6QTLgmGH4M-KGPN0l8WRAxf_xk9k07aZ_rlwTZEIpPfoVc9S9JkQ8dcLPdoUSJ4c-bnm3PFS5G-BxLKbqVZFriF2F9VnGyUnGY4240KxM7qDsmUZ3o-JXp7-HVSlj4ehgBYczi_f0c1TS8hP8QIJeKxenIPIkWlB-XOlyDH1GAr-_eSK8pSxlkwe430_WXMof7EdqtnqvZFTT3eXl1Ei2gpTpfiXbcFko2vkbRmp9wtv2lOcrkoSJw_91DUyw9qkcvq5LtbyEprIHQJ7pjkpnA9x4a7GtSHr_AuWLXohwyk_m95xUKMY7VF9YcDv72fBzQmsSXwYxjB84h6R98-8dkdIoTunnq7k2BLmtwrLPD4pLePcz5s82ADV9_QiYiym0bpj87Qw-OvbiEp4hN6JZ4HviNVCmj_28R_XH7AS4qFf0ltl8NWI4swbhKS6wKX9br5Lw_WxzD_phnvsBswvQ3MJ_-FGHHr9JteNbZDyVfMZRVTBf5MFgXubztcXRyGhoXZu2kW9B3yLNXQbju1Q8kSVfwo71N1pSw3ZHrVZy0NW_HlHYbjZwwZK8AWkXYAd2f-KFM988Fojjc4-CtWX8jCL9vMO_G81bcC5qdO8bPtUcOUgmzWEUawhFM0c7FOV-jpbuSOn_aCCYRnv6eqyFykXtl-1clPtXo9tDe9Y_BSDnr6v7PFEmIIcr7wuHl7aTLwEEoYdflLW0eqoJOP33-MOZT4Z5rUiyF3Q1B7ePAEoQ3qYLCka8VaLAJhvfMvAkfSsEESCTFB--7h6AQEUAUn_KHkiIO93VtrENREeGjOl6AYRH9TIrKCf1mSILG9ZB7x0GPgLbq92wqpOQ3dDgxM2iXTrwN78h8uNa1NiuwgbIBwJVlm6l1RVfU9Wn2jkID1g&sai=AMfl-YSo-esSO9zD_yFXi-X-PIFYgZ-ZtgkG5WeNqVAGxVdjGcbjMVdkNlBzYUAUPxaKW-nHbBOgzg3ZKirOe9KZ76WmsDleEEpaHLKU_9_KoKwNq1Ifwc6_sCuqt7BpDpuw6w-RxkGk9ogl4GV1FA&sig=Cg0ArKJSzBn_8j6BwBzuEAE&id=lidartos&mcvt=728&p=0,0,90,728&mtos=728,728,728,728,728&tos=728,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1646902164&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547394&rpt=1718&ec=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuCBqgx3NSasu_tdrelx86GKWuHITr5IdqB31S4v8Ay3GLQhcla4Cl8Nm9bBi_lGM4SA3SGUWVzJsQ7hC2clLg-UceH1wOK1bvzpUMQVG8mMnWAXY6lIGMkPviXRtvA9erg2dY5s7KYn5wFyTd9H_irDvScbgPJmIh9FDnTe-SA99XMcyTZzanspXWDm5amb3UaHlI2zdJuKkPUsGIJpQ1_oXr8r0J1WlILanMgX2l9oYBu85u0NAGpepBxdLX_b2amgW2kfOaubGk_2s4rTDoWXHDDhfZ0WrrShkOk8UfLv9-Brod5gy9WWbj0-xUAH5a9DprrklqjScDhDZCq1BTVZm0RC87SuLzo6WEreH9_XU0A7_3I4NSaw8GpWS1qlkwxKireLJaUwNDnXqBfQOx_dXqQSpgiXWTyvlwVpAUBfZW_XmgwfVM1joTzE87TBra4hRT2THx3FJrzP_L1ui6MQYTnJ4vjWqdSWK2YI7UWCsql8AoJIemIQv30UZNKic_H7Enx5-nqm1vP99p0HuFFQA0x0PE4oFzSvNdD4heaF5DN9Gq7ofrW_pflvD4TK_gyzPxALT-IjbDWiTrXU6oVmP7ra3vc1swyq2Rz71qNEB4eZmw6JFe0NW0mXkyzwev0Yaf7hP745cXDIar1EplG3BNACeqitgDuLCtzEOIIQLXHm4oeHaj25erDSHjTnA1WFMnY0-lVt0N-2TqhIvmTQYl0jcl9-ujRbi6O6X7MY57MaOunkpqfyyCcfze94G162srdCYZYsbxPZGhGCLIuhz8OD8dicjSqv-l5DU5eMkQEcxBhIr8s2Xcz-Tle8gnEd-NskNNgdSc3yO4beBofKWFTOJZeos31N3EHkSvbhybIdoEfYry6piP6E50mme_HoLQmEEQwXAgwfH5C-Osb2GiJ4WIxd7JMgUpFIW6aE4h556rp0ksvgAH9grSP-g8j8JajmqGJq_T5sZW6zHOrP4wWyf7ZtmLJ1LLM&sai=AMfl-YQMrsFY2-ycd5cPEp4j3w6DkuYwhrT01HHUUzKBxw6a5s2SNEqgLQByKsQqmWE-EHn4pKbaOSyo9izQ7g0gLtoCB5qoggqmA0f5yVfRZy8TzNhUdxoQ8d9qv0FrTbflmTq9Y2Wd-HTXKmhMvA&sig=Cg0ArKJSzPbh9-0bCY9MEAE&id=lidartos&mcvt=534&p=0,0,250,300&mtos=0,0,534,534,534&tos=0,0,534,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=0.68&if=1&vu=1&app=0&itpl=22&adk=996803492&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547408&rpt=1953&ec=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuCBqgx3NSasu_tdrelx86GKWuHITr5IdqB31S4v8Ay3GLQhcla4Cl8Nm9bBi_lGM4SA3SGUWVzJsQ7hC2clLg-UceH1wOK1bvzpUMQVG8mMnWAXY6lIGMkPviXRtvA9erg2dY5s7KYn5wFyTd9H_irDvScbgPJmIh9FDnTe-SA99XMcyTZzanspXWDm5amb3UaHlI2zdJuKkPUsGIJpQ1_oXr8r0J1WlILanMgX2l9oYBu85u0NAGpepBxdLX_b2amgW2kfOaubGk_2s4rTDoWXHDDhfZ0WrrShkOk8UfLv9-Brod5gy9WWbj0-xUAH5a9DprrklqjScDhDZCq1BTVZm0RC87SuLzo6WEreH9_XU0A7_3I4NSaw8GpWS1qlkwxKireLJaUwNDnXqBfQOx_dXqQSpgiXWTyvlwVpAUBfZW_XmgwfVM1joTzE87TBra4hRT2THx3FJrzP_L1ui6MQYTnJ4vjWqdSWK2YI7UWCsql8AoJIemIQv30UZNKic_H7Enx5-nqm1vP99p0HuFFQA0x0PE4oFzSvNdD4heaF5DN9Gq7ofrW_pflvD4TK_gyzPxALT-IjbDWiTrXU6oVmP7ra3vc1swyq2Rz71qNEB4eZmw6JFe0NW0mXkyzwev0Yaf7hP745cXDIar1EplG3BNACeqitgDuLCtzEOIIQLXHm4oeHaj25erDSHjTnA1WFMnY0-lVt0N-2TqhIvmTQYl0jcl9-ujRbi6O6X7MY57MaOunkpqfyyCcfze94G162srdCYZYsbxPZGhGCLIuhz8OD8dicjSqv-l5DU5eMkQEcxBhIr8s2Xcz-Tle8gnEd-NskNNgdSc3yO4beBofKWFTOJZeos31N3EHkSvbhybIdoEfYry6piP6E50mme_HoLQmEEQwXAgwfH5C-Osb2GiJ4WIxd7JMgUpFIW6aE4h556rp0ksvgAH9grSP-g8j8JajmqGJq_T5sZW6zHOrP4wWyf7ZtmLJ1LLM&sai=AMfl-YQMrsFY2-ycd5cPEp4j3w6DkuYwhrT01HHUUzKBxw6a5s2SNEqgLQByKsQqmWE-EHn4pKbaOSyo9izQ7g0gLtoCB5qoggqmA0f5yVfRZy8TzNhUdxoQ8d9qv0FrTbflmTq9Y2Wd-HTXKmhMvA&sig=Cg0ArKJSzPbh9-0bCY9MEAE&id=lidartos&mcvt=534&p=0,0,250,300&mtos=0,0,534,534,534&tos=0,0,534,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=0.68&if=1&vu=1&app=0&itpl=22&adk=996803492&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547408&rpt=1953&ec=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsuCBqgx3NSasu_tdrelx86GKWuHITr5IdqB31S4v8Ay3GLQhcla4Cl8Nm9bBi_lGM4SA3SGUWVzJsQ7hC2clLg-UceH1wOK1bvzpUMQVG8mMnWAXY6lIGMkPviXRtvA9erg2dY5s7KYn5wFyTd9H_irDvScbgPJmIh9FDnTe-SA99XMcyTZzanspXWDm5amb3UaHlI2zdJuKkPUsGIJpQ1_oXr8r0J1WlILanMgX2l9oYBu85u0NAGpepBxdLX_b2amgW2kfOaubGk_2s4rTDoWXHDDhfZ0WrrShkOk8UfLv9-Brod5gy9WWbj0-xUAH5a9DprrklqjScDhDZCq1BTVZm0RC87SuLzo6WEreH9_XU0A7_3I4NSaw8GpWS1qlkwxKireLJaUwNDnXqBfQOx_dXqQSpgiXWTyvlwVpAUBfZW_XmgwfVM1joTzE87TBra4hRT2THx3FJrzP_L1ui6MQYTnJ4vjWqdSWK2YI7UWCsql8AoJIemIQv30UZNKic_H7Enx5-nqm1vP99p0HuFFQA0x0PE4oFzSvNdD4heaF5DN9Gq7ofrW_pflvD4TK_gyzPxALT-IjbDWiTrXU6oVmP7ra3vc1swyq2Rz71qNEB4eZmw6JFe0NW0mXkyzwev0Yaf7hP745cXDIar1EplG3BNACeqitgDuLCtzEOIIQLXHm4oeHaj25erDSHjTnA1WFMnY0-lVt0N-2TqhIvmTQYl0jcl9-ujRbi6O6X7MY57MaOunkpqfyyCcfze94G162srdCYZYsbxPZGhGCLIuhz8OD8dicjSqv-l5DU5eMkQEcxBhIr8s2Xcz-Tle8gnEd-NskNNgdSc3yO4beBofKWFTOJZeos31N3EHkSvbhybIdoEfYry6piP6E50mme_HoLQmEEQwXAgwfH5C-Osb2GiJ4WIxd7JMgUpFIW6aE4h556rp0ksvgAH9grSP-g8j8JajmqGJq_T5sZW6zHOrP4wWyf7ZtmLJ1LLM&sai=AMfl-YQMrsFY2-ycd5cPEp4j3w6DkuYwhrT01HHUUzKBxw6a5s2SNEqgLQByKsQqmWE-EHn4pKbaOSyo9izQ7g0gLtoCB5qoggqmA0f5yVfRZy8TzNhUdxoQ8d9qv0FrTbflmTq9Y2Wd-HTXKmhMvA&sig=Cg0ArKJSzPbh9-0bCY9MEAE&id=lidartos&mcvt=534&p=0,0,250,300&mtos=0,0,534,534,534&tos=0,0,534,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=0.68&if=1&vu=1&app=0&itpl=22&adk=996803492&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547408&rpt=1953&ec=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst5qMFd4_nZH1vTHcUsMR8aolpfUKZkHp0hN7qHgHgOVEHQHzTVGCBeOiYtwglj__3in1E-o3Cxs_9bvaMoZk0iqIQWHBgcTUcT-MN8JJfO5vv6MSfJ2UUy-5p6NcJtxsj2yivFGjHJKuWtQ2F22nzzSaBMZWKYUtm6wQ&sai=AMfl-YQ2Fs6-P4bq2VE29wS8nFIdC3yta-eferf41S3YmvwBV0i9TYa1XiyPYMR7_iHynpEv8sbmfcpmRm_qsnT73JF-5ES___2XBXXlZ4CjBqAyTBIRqZg5Yeee_-pZ6T9D&sig=Cg0ArKJSzGcxrTrjUcSkEAE&id=lidartos&mcvt=1045&p=0,0,600,160&mtos=1045,1045,1045,1045,1045&tos=1045,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=1520397898&rs=2&la=0&cr=0&vs=4&r=b&rst=1663701547422&rpt=1514&ec=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst5qMFd4_nZH1vTHcUsMR8aolpfUKZkHp0hN7qHgHgOVEHQHzTVGCBeOiYtwglj__3in1E-o3Cxs_9bvaMoZk0iqIQWHBgcTUcT-MN8JJfO5vv6MSfJ2UUy-5p6NcJtxsj2yivFGjHJKuWtQ2F22nzzSaBMZWKYUtm6wQ&sai=AMfl-YQ2Fs6-P4bq2VE29wS8nFIdC3yta-eferf41S3YmvwBV0i9TYa1XiyPYMR7_iHynpEv8sbmfcpmRm_qsnT73JF-5ES___2XBXXlZ4CjBqAyTBIRqZg5Yeee_-pZ6T9D&sig=Cg0ArKJSzGcxrTrjUcSkEAE&id=lidartos&mcvt=1045&p=0,0,600,160&mtos=1045,1045,1045,1045,1045&tos=1045,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=1520397898&rs=2&la=0&cr=0&vs=4&r=b&rst=1663701547422&rpt=1514&ec=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjst5qMFd4_nZH1vTHcUsMR8aolpfUKZkHp0hN7qHgHgOVEHQHzTVGCBeOiYtwglj__3in1E-o3Cxs_9bvaMoZk0iqIQWHBgcTUcT-MN8JJfO5vv6MSfJ2UUy-5p6NcJtxsj2yivFGjHJKuWtQ2F22nzzSaBMZWKYUtm6wQ&sai=AMfl-YQ2Fs6-P4bq2VE29wS8nFIdC3yta-eferf41S3YmvwBV0i9TYa1XiyPYMR7_iHynpEv8sbmfcpmRm_qsnT73JF-5ES___2XBXXlZ4CjBqAyTBIRqZg5Yeee_-pZ6T9D&sig=Cg0ArKJSzGcxrTrjUcSkEAE&id=lidartos&mcvt=1045&p=0,0,600,160&mtos=1045,1045,1045,1045,1045&tos=1045,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=1520397898&rs=2&la=0&cr=0&vs=4&r=b&rst=1663701547422&rpt=1514&ec=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsss3bazqOF_sPjcRiwpfMa-TIG57TRGWNpH8f4uCiDOuHgl-v9bkQy0yWkSKJv_A-X7tJmgBd-IaZUEBMcgeLSAMaj2ocEBxL241gh16s-cI6KAz_07W8GcNZkwFgCQLf6j22yh_5Ef-wPqOuWgWTFo8ufIdPdwP7e4ei2nPAl7kRApA3dFXRvS1mEw2sus_ihS399iZTpCy0XY2f4zLFUNVXr4EVxEiEbuHsRwazjQ62O81Z3AlVqKc4SqFkg2iNaatXot3ENl1LDSru6wsyb8w3TX36UyS9mMQbARtRS0i2PJQlb4LfycjxT5u8NeKJksYqK1R2Qbydy5qp4igSVIZbPW-R1xDScQeInHhCJ-tHesdeMNrOmHhix5TGFKbAq-b-IicKLc8NkKa-zmk3rpOcAFEux1SUnFwEc0_CLzZu0Fab5JXBaH1WR8rWutvZCWrraXxR1SUvxRldIp408dw7vcJwJ6pj1XNmhbmxqkgzLuLo0Inkw6RRbaDul0dKcCR8JsH8vp-eHP9WXoJRv7vbirbA7t0Qhu413CrpX6SV4R0hlP3MBI7HMz0GOmE4ghGdaxK_WSxJJVPEIPEwQf85xB9T3plQOs7_J3R0UR0-ALCkS-CWlczQLVqpt6VvFeqsc5_Rp27ZroD93aPHzGC8c5jsEMNrKjqc3kJXbYxRmRYdMUbvycapmYo0pBibYxaHJS812FyXPHdZcss92b0O7lZj-G86gmSNcAuZ8UldJULdfLcTOdKCrlWNtz6eYBehU3epT7kZDVQgdLyx7qObPfwPJlvswS_b53o27FGwOCVIqQAgC1r1eVvBnBgdnXoQKs9OFcnqUl5ye2adWUs-QqrHrnnXwr0oWuefUCW2GuoJRJ7AFybQ_ISMaeAAiY1BeDZgdcGgwwAsGSap-xoCHoAALl-r9C2MLSKLLEsY10EkUz9DFm1fiBUCN5mkB4i0H0yR0Q_g&sai=AMfl-YTLaC9umopvcRCvlALjeA5SPSR5HftqSCG5jE2r4FwFaKveuRvmvZBI7ktyI8JhK8ObboNwUdrIkiRpW0CiifGOiZ9ZGf_ZaTMixt1jYdwQRBSZt1BTtufz-lOMuXL4aD_OsuIfBFQVuL43gw&sig=Cg0ArKJSzCGBPt5-yq9KEAE&id=lidartos&mcvt=747&p=0,0,581,155&mtos=747,747,747,747,747&tos=747,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=1843790409&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547417&rpt=1577&ec=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsss3bazqOF_sPjcRiwpfMa-TIG57TRGWNpH8f4uCiDOuHgl-v9bkQy0yWkSKJv_A-X7tJmgBd-IaZUEBMcgeLSAMaj2ocEBxL241gh16s-cI6KAz_07W8GcNZkwFgCQLf6j22yh_5Ef-wPqOuWgWTFo8ufIdPdwP7e4ei2nPAl7kRApA3dFXRvS1mEw2sus_ihS399iZTpCy0XY2f4zLFUNVXr4EVxEiEbuHsRwazjQ62O81Z3AlVqKc4SqFkg2iNaatXot3ENl1LDSru6wsyb8w3TX36UyS9mMQbARtRS0i2PJQlb4LfycjxT5u8NeKJksYqK1R2Qbydy5qp4igSVIZbPW-R1xDScQeInHhCJ-tHesdeMNrOmHhix5TGFKbAq-b-IicKLc8NkKa-zmk3rpOcAFEux1SUnFwEc0_CLzZu0Fab5JXBaH1WR8rWutvZCWrraXxR1SUvxRldIp408dw7vcJwJ6pj1XNmhbmxqkgzLuLo0Inkw6RRbaDul0dKcCR8JsH8vp-eHP9WXoJRv7vbirbA7t0Qhu413CrpX6SV4R0hlP3MBI7HMz0GOmE4ghGdaxK_WSxJJVPEIPEwQf85xB9T3plQOs7_J3R0UR0-ALCkS-CWlczQLVqpt6VvFeqsc5_Rp27ZroD93aPHzGC8c5jsEMNrKjqc3kJXbYxRmRYdMUbvycapmYo0pBibYxaHJS812FyXPHdZcss92b0O7lZj-G86gmSNcAuZ8UldJULdfLcTOdKCrlWNtz6eYBehU3epT7kZDVQgdLyx7qObPfwPJlvswS_b53o27FGwOCVIqQAgC1r1eVvBnBgdnXoQKs9OFcnqUl5ye2adWUs-QqrHrnnXwr0oWuefUCW2GuoJRJ7AFybQ_ISMaeAAiY1BeDZgdcGgwwAsGSap-xoCHoAALl-r9C2MLSKLLEsY10EkUz9DFm1fiBUCN5mkB4i0H0yR0Q_g&sai=AMfl-YTLaC9umopvcRCvlALjeA5SPSR5HftqSCG5jE2r4FwFaKveuRvmvZBI7ktyI8JhK8ObboNwUdrIkiRpW0CiifGOiZ9ZGf_ZaTMixt1jYdwQRBSZt1BTtufz-lOMuXL4aD_OsuIfBFQVuL43gw&sig=Cg0ArKJSzCGBPt5-yq9KEAE&id=lidartos&mcvt=747&p=0,0,581,155&mtos=747,747,747,747,747&tos=747,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=1843790409&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547417&rpt=1577&ec=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsss3bazqOF_sPjcRiwpfMa-TIG57TRGWNpH8f4uCiDOuHgl-v9bkQy0yWkSKJv_A-X7tJmgBd-IaZUEBMcgeLSAMaj2ocEBxL241gh16s-cI6KAz_07W8GcNZkwFgCQLf6j22yh_5Ef-wPqOuWgWTFo8ufIdPdwP7e4ei2nPAl7kRApA3dFXRvS1mEw2sus_ihS399iZTpCy0XY2f4zLFUNVXr4EVxEiEbuHsRwazjQ62O81Z3AlVqKc4SqFkg2iNaatXot3ENl1LDSru6wsyb8w3TX36UyS9mMQbARtRS0i2PJQlb4LfycjxT5u8NeKJksYqK1R2Qbydy5qp4igSVIZbPW-R1xDScQeInHhCJ-tHesdeMNrOmHhix5TGFKbAq-b-IicKLc8NkKa-zmk3rpOcAFEux1SUnFwEc0_CLzZu0Fab5JXBaH1WR8rWutvZCWrraXxR1SUvxRldIp408dw7vcJwJ6pj1XNmhbmxqkgzLuLo0Inkw6RRbaDul0dKcCR8JsH8vp-eHP9WXoJRv7vbirbA7t0Qhu413CrpX6SV4R0hlP3MBI7HMz0GOmE4ghGdaxK_WSxJJVPEIPEwQf85xB9T3plQOs7_J3R0UR0-ALCkS-CWlczQLVqpt6VvFeqsc5_Rp27ZroD93aPHzGC8c5jsEMNrKjqc3kJXbYxRmRYdMUbvycapmYo0pBibYxaHJS812FyXPHdZcss92b0O7lZj-G86gmSNcAuZ8UldJULdfLcTOdKCrlWNtz6eYBehU3epT7kZDVQgdLyx7qObPfwPJlvswS_b53o27FGwOCVIqQAgC1r1eVvBnBgdnXoQKs9OFcnqUl5ye2adWUs-QqrHrnnXwr0oWuefUCW2GuoJRJ7AFybQ_ISMaeAAiY1BeDZgdcGgwwAsGSap-xoCHoAALl-r9C2MLSKLLEsY10EkUz9DFm1fiBUCN5mkB4i0H0yR0Q_g&sai=AMfl-YTLaC9umopvcRCvlALjeA5SPSR5HftqSCG5jE2r4FwFaKveuRvmvZBI7ktyI8JhK8ObboNwUdrIkiRpW0CiifGOiZ9ZGf_ZaTMixt1jYdwQRBSZt1BTtufz-lOMuXL4aD_OsuIfBFQVuL43gw&sig=Cg0ArKJSzCGBPt5-yq9KEAE&id=lidartos&mcvt=747&p=0,0,581,155&mtos=747,747,747,747,747&tos=747,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=1843790409&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547417&rpt=1577&ec=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssJ9p1eqibd916CBcOk_plk30ODTGKGzlboG3H7VdnsRaO3CE07kaQSUXDUmtqC18KQkiZ-4Oe6GLKe9zqqR54JPYbMv8qiG6AlUoTvBNOCf1RbMCzXQ3Iaf16klEReEw4oGS41AKN2vM84qitCGAH6Xr7c7rLyUwJU0ffawPJeZHn5vBS8yRMbJpKytuXcUNyIDHEfByTTH3bkp1arCCBUgzYk_s6vUiNhNffKXDeD0qAwv1gK6h6uBcoGqhjFuCpiBJZjXok_SLX2aSn6lrU7jXvPvIkAR70tpfnguRWMaorMJxO-_3_6890hehTz6yqo2RFBsGWsO_MO4YBF0BL0tc97MSLQxCgtT4WMbQjV4nlJsrYjMoeFIiKwO8ec1D5es5gWvWeeYs88KSJ5qBF7_lZ1Fsx6VxZugTLVltF7uiXW4sJgcU_LRXbitpBGwlc_zf7DWJhevWAeDR_ZbonF2xJ51DqD_bNe34e3ywjrMfsFX-eP_A6GIJjEcwIC11cR8nhS64CqlFWFeW2MtYqabJ8epl2kGtDiJuNQJfsV2vEmPObNM5I0itDT4JOl9MDDj1FnQzOMbIpqadubFSjLbbi492VeiHn3YrzjOdN0vv73coz7mrGDo0ndoBu0747WFl-o7yGqykCGJEofS8-HTtC_dASTmmg-E1K9AWV9Engm8cUOT2s3Oifei5flcgOI0eSqWWWHYMoIRjIXiex2hUVt3gUpONEGIG1sbZMhXi6nrWr_2E8oCkXsHp-aC_b-Yz8JRD1zOa_4ThcxEwdmRp1rclFH8HYe2ldkDE-GJifohWTm9ji6pY_gSG7QB7Q7ZWUXP1DpfTTHP4dKgilTOTBIGUe_3nTorteHjYlYldXkBVWde47JZvoyK5n4tHwkNSheT5vLTeKiI_xdCg0IYho5vQnsrAZwgsRO85X3DLMnmCMqPvq6NQvQAkKRELM&sai=AMfl-YSeFyF9CtuZWeOHTfhY_qoI-yIIe5rqIxj0x7aSjXcqYjh1Ozzlm90PeceWNhxJ2ItGAbzG1waYc0RVR3VZPs35ZoVDfEuYatdr3RNXf8uy64w5wu_35ZwZSavrUgrF2ogKIMSe9KNAreCVrA&sig=Cg0ArKJSzC6ZRgDrRsOMEAE&id=lidartos&mcvt=562&p=0,0,90,728&mtos=562,562,562,562,562&tos=562,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=803467372&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547687&rpt=1745&ec=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssJ9p1eqibd916CBcOk_plk30ODTGKGzlboG3H7VdnsRaO3CE07kaQSUXDUmtqC18KQkiZ-4Oe6GLKe9zqqR54JPYbMv8qiG6AlUoTvBNOCf1RbMCzXQ3Iaf16klEReEw4oGS41AKN2vM84qitCGAH6Xr7c7rLyUwJU0ffawPJeZHn5vBS8yRMbJpKytuXcUNyIDHEfByTTH3bkp1arCCBUgzYk_s6vUiNhNffKXDeD0qAwv1gK6h6uBcoGqhjFuCpiBJZjXok_SLX2aSn6lrU7jXvPvIkAR70tpfnguRWMaorMJxO-_3_6890hehTz6yqo2RFBsGWsO_MO4YBF0BL0tc97MSLQxCgtT4WMbQjV4nlJsrYjMoeFIiKwO8ec1D5es5gWvWeeYs88KSJ5qBF7_lZ1Fsx6VxZugTLVltF7uiXW4sJgcU_LRXbitpBGwlc_zf7DWJhevWAeDR_ZbonF2xJ51DqD_bNe34e3ywjrMfsFX-eP_A6GIJjEcwIC11cR8nhS64CqlFWFeW2MtYqabJ8epl2kGtDiJuNQJfsV2vEmPObNM5I0itDT4JOl9MDDj1FnQzOMbIpqadubFSjLbbi492VeiHn3YrzjOdN0vv73coz7mrGDo0ndoBu0747WFl-o7yGqykCGJEofS8-HTtC_dASTmmg-E1K9AWV9Engm8cUOT2s3Oifei5flcgOI0eSqWWWHYMoIRjIXiex2hUVt3gUpONEGIG1sbZMhXi6nrWr_2E8oCkXsHp-aC_b-Yz8JRD1zOa_4ThcxEwdmRp1rclFH8HYe2ldkDE-GJifohWTm9ji6pY_gSG7QB7Q7ZWUXP1DpfTTHP4dKgilTOTBIGUe_3nTorteHjYlYldXkBVWde47JZvoyK5n4tHwkNSheT5vLTeKiI_xdCg0IYho5vQnsrAZwgsRO85X3DLMnmCMqPvq6NQvQAkKRELM&sai=AMfl-YSeFyF9CtuZWeOHTfhY_qoI-yIIe5rqIxj0x7aSjXcqYjh1Ozzlm90PeceWNhxJ2ItGAbzG1waYc0RVR3VZPs35ZoVDfEuYatdr3RNXf8uy64w5wu_35ZwZSavrUgrF2ogKIMSe9KNAreCVrA&sig=Cg0ArKJSzC6ZRgDrRsOMEAE&id=lidartos&mcvt=562&p=0,0,90,728&mtos=562,562,562,562,562&tos=562,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=803467372&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547687&rpt=1745&ec=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjssJ9p1eqibd916CBcOk_plk30ODTGKGzlboG3H7VdnsRaO3CE07kaQSUXDUmtqC18KQkiZ-4Oe6GLKe9zqqR54JPYbMv8qiG6AlUoTvBNOCf1RbMCzXQ3Iaf16klEReEw4oGS41AKN2vM84qitCGAH6Xr7c7rLyUwJU0ffawPJeZHn5vBS8yRMbJpKytuXcUNyIDHEfByTTH3bkp1arCCBUgzYk_s6vUiNhNffKXDeD0qAwv1gK6h6uBcoGqhjFuCpiBJZjXok_SLX2aSn6lrU7jXvPvIkAR70tpfnguRWMaorMJxO-_3_6890hehTz6yqo2RFBsGWsO_MO4YBF0BL0tc97MSLQxCgtT4WMbQjV4nlJsrYjMoeFIiKwO8ec1D5es5gWvWeeYs88KSJ5qBF7_lZ1Fsx6VxZugTLVltF7uiXW4sJgcU_LRXbitpBGwlc_zf7DWJhevWAeDR_ZbonF2xJ51DqD_bNe34e3ywjrMfsFX-eP_A6GIJjEcwIC11cR8nhS64CqlFWFeW2MtYqabJ8epl2kGtDiJuNQJfsV2vEmPObNM5I0itDT4JOl9MDDj1FnQzOMbIpqadubFSjLbbi492VeiHn3YrzjOdN0vv73coz7mrGDo0ndoBu0747WFl-o7yGqykCGJEofS8-HTtC_dASTmmg-E1K9AWV9Engm8cUOT2s3Oifei5flcgOI0eSqWWWHYMoIRjIXiex2hUVt3gUpONEGIG1sbZMhXi6nrWr_2E8oCkXsHp-aC_b-Yz8JRD1zOa_4ThcxEwdmRp1rclFH8HYe2ldkDE-GJifohWTm9ji6pY_gSG7QB7Q7ZWUXP1DpfTTHP4dKgilTOTBIGUe_3nTorteHjYlYldXkBVWde47JZvoyK5n4tHwkNSheT5vLTeKiI_xdCg0IYho5vQnsrAZwgsRO85X3DLMnmCMqPvq6NQvQAkKRELM&sai=AMfl-YSeFyF9CtuZWeOHTfhY_qoI-yIIe5rqIxj0x7aSjXcqYjh1Ozzlm90PeceWNhxJ2ItGAbzG1waYc0RVR3VZPs35ZoVDfEuYatdr3RNXf8uy64w5wu_35ZwZSavrUgrF2ogKIMSe9KNAreCVrA&sig=Cg0ArKJSzC6ZRgDrRsOMEAE&id=lidartos&mcvt=562&p=0,0,90,728&mtos=562,562,562,562,562&tos=562,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=803467372&rs=2&la=0&cr=0&vs=3&r=b&rst=1663701547687&rpt=1745&ec=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-10193151-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-10193151-1
IP
File type ASCII text, with very long lines (1720)
Hash 97e917ce0af85b767700a40382f9e066
83e1a5fc0b40cb87d1e9082746368ab37ded3123
e6bac4e9a75a60821890e582e21bddb427786b6b0674edbff33f7003f35e04a9
GET /gtag/js?id=UA-10193151-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 20 Sep 2022 19:19:10 GMT
expires: Tue, 20 Sep 2022 19:19:10 GMT
cache-control: private, max-age=900
last-modified: Tue, 20 Sep 2022 18:15:09 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL HTTP/2 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
File type JSON data\012- , ASCII text
Hash 0517a608635a116d279530f9e79f46c6
d039de7440a05934e6a9f517ef98c460efa701c4
fcdc48636aaf6e5c6123f43decdec565c7a7614a1729283815ecdfb7ae1bef63
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1663701549947
Content-Type: application/json
X-Goog-Visitor-Id: CgtkNGtoNnBWMmh5OCiqpKiZBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20220918.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1663701546878&flash=0&frm=2&u_tz&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C770%2C433&vis=1&wgl=true&ca_type=image
Content-Length: 656
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Tue, 20 Sep 2022 19:19:10 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+385; expires=Thu, 19-Sep-2024 19:19:10 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:10 GMT
cache-control: private
X-Firefox-Spdy: h2
www.youtube.com/api/stats/atr?ns=yt&el=embedded&cpn=MLtIUr-nocAvemob&ver=2&cmt=0&fs=0&rt=0&euri=https%3A%2F%2Fmahacet.com%2F&lact=2353&cl=475164724&mos=0&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20220918.00.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&epm=1&hl=en_US&cr=NO&len=505&fexp=23983296%2C24001373%2C24002022%2C24002025%2C24004644%2C24007246%2C24080738%2C24135310%2C24169501%2C24214616%2C24226335%2C24231054%2C24248385%2C24255165%2C24260441%2C24277988%2C24280303%2C39322399&feature=oembed&muted=0&docid=YC5q_PYBUgM
204 No Content 0 B URL HTTP/2 www.youtube.com/api/stats/atr?ns=yt&el=embedded&cpn=MLtIUr-nocAvemob&ver=2&cmt=0&fs=0&rt=0&euri=https%3A%2F%2Fmahacet.com%2F&lact=2353&cl=475164724&mos=0&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20220918.00.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&epm=1&hl=en_US&cr=NO&len=505&fexp=23983296%2C24001373%2C24002022%2C24002025%2C24004644%2C24007246%2C24080738%2C24135310%2C24169501%2C24214616%2C24226335%2C24231054%2C24248385%2C24255165%2C24260441%2C24277988%2C24280303%2C39322399&feature=oembed&muted=0&docid=YC5q_PYBUgM
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/stats/atr?ns=yt&el=embedded&cpn=MLtIUr-nocAvemob&ver=2&cmt=0&fs=0&rt=0&euri=https%3A%2F%2Fmahacet.com%2F&lact=2353&cl=475164724&mos=0&volume=100&cbr=Firefox&cbrver=96.0&c=WEB_EMBEDDED_PLAYER&cver=1.20220918.00.00&cplayer=UNIPLAYER&cos=X11&cplatform=DESKTOP&epm=1&hl=en_US&cr=NO&len=505&fexp=23983296%2C24001373%2C24002022%2C24002025%2C24004644%2C24007246%2C24080738%2C24135310%2C24169501%2C24214616%2C24226335%2C24231054%2C24248385%2C24255165%2C24260441%2C24277988%2C24280303%2C39322399&feature=oembed&muted=0&docid=YC5q_PYBUgM HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgtkNGtoNnBWMmh5OCiqpKiZBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20220918.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1663701547477&flash=0&frm=2&u_tz&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C770%2C433&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Content-Length: 1568
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
date: Tue, 20 Sep 2022 19:19:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2
IP
Hash 50ddbff6dd8267c5925f72d28d9e3e3e
66883831e6bfc896216d0d9e25eb850aadc91511
fc1ba62996ffaf271c949fced99155b08a63c99dc87152a2fcb50c2ea9ffd93f
GET /p.js?f=sync&lr=1&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Cookie: ID=a62a7767e8684aa595b9475b4c639c78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:10 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
propeller-tracking.com/fv.js?t=102123
200 OK 2.2 kB URL HTTP/2 propeller-tracking.com/fv.js?t=102123
IP
File type ASCII text, with very long lines (5213), with no line terminators
Hash 0254fb1dad74628b7ad0f97d304fac92
35f7af13a08eb87023ec7df4d3c35c21b2cde79d
47fb6ce428ca80ea69b772e4f66e4e5c622a4005db601746033d04511bd27536
GET /fv.js?t=102123 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:10 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 4b1bd2d0d6d4dccfbd0eaa040db85408
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=102123
204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=102123
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=102123 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mahacet.com
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 20 Sep 2022 19:19:10 GMT
access-control-allow-origin: https://mahacet.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: f79128d7b234222bcc90c9e5287f7661
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
mahacet.com/favicon.ico
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: mahacet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/offers-inline.html
Cookie: _ga=GA1.2.1566305660.1663701547; _gid=GA1.2.1145798401.1663701547; _gat_gtag_UA_10193151_1=1; __gads=ID=9a288f6d575bb406-2204778b28ce00f0:T=1663701547:RT=1663701547:S=ALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:10 GMT
content-type: text/html; charset=UTF-8
content-length: 0
link: <https://mahacet.com/wp-json/>; rel="https://api.w.org/"
expires: Sat, 19 Nov 2022 19:19:10 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: HIT
x-server-powered-by: Engintron
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5414070771498127
200 OK 62 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5414070771498127
IP
File type ASCII text, with very long lines (2903)
Hash c5d59855da2b66d700185d4c9f6b61f4
70e0fc0c6e08dcf00262c8421dd0200348e4dad4
04d3f9042b7ea9156e59a188553335042ad3cebacd568d982a0c55ca39d0ffd9
GET /pagead/js/adsbygoogle.js?client=ca-pub-5414070771498127 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mahacet.com
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
date: Tue, 20 Sep 2022 19:19:10 GMT
expires: Tue, 20 Sep 2022 19:19:10 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 6931202885610997915
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 62378
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Tue, 20 Sep 2022 18:29:41 GMT
expires: Tue, 20 Sep 2022 20:29:41 GMT
cache-control: public, max-age=7200
age: 2969
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/7577aaa2/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL HTTP/2 www.youtube.com/s/player/7577aaa2/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (570)
Hash 99dfba779db4190f6a484f19709b09e8
3fe5f6183c52548abec3484b154926f3b905aa6b
9cd782c0286aaa134f4935856bef05a7ed8ec04b1cad6775c7a3192f2be3ae5a
GET /s/player/7577aaa2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97969
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 14:50:44 GMT
expires: Tue, 19 Sep 2023 14:50:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 00:17:08 GMT
content-type: text/javascript
age: 102506
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/7577aaa2/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/7577aaa2/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/7577aaa2/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 14:50:44 GMT
expires: Tue, 19 Sep 2023 14:50:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 00:17:08 GMT
content-type: text/javascript
age: 102506
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/7577aaa2/player_ias.vflset/en_US/base.js
200 OK 590 kB URL HTTP/2 www.youtube.com/s/player/7577aaa2/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (554)
Size 590 kB (589772 bytes)
Hash 64c45ba03abe1a8dd0de9bfd036f8bff
037df9c536c729047021135db7b08664a3c3fb8d
6fb05ae4abd8102e8f2a8a1007fb87e3338d91db88f58ff8b8483cbf412602c5
GET /s/player/7577aaa2/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 589772
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 14:50:44 GMT
expires: Tue, 19 Sep 2023 14:50:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 00:17:08 GMT
content-type: text/javascript
age: 102506
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Sep 2022 12:31:58 GMT
expires: Sun, 17 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 283632
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
mahacet.com/offers-inline.html
200 OK 13 kB URL HTTP/2 mahacet.com/offers-inline.html
IP
ASN #24940 Hetzner Online GmbH
Hash 655e0cb4dadb72a65f37ead8bc5e2718
e18449764ae4a18d22980c9f0ed992b49d7c8a22
64d1c09dd4189cabe108fb7cdc2238668b7c0e89f08122ce6b94252103679d4e
GET /offers-inline.html HTTP/1.1
Host: mahacet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga=GA1.2.1566305660.1663701547; _gid=GA1.2.1145798401.1663701547; _gat_gtag_UA_10193151_1=1; __gads=ID=9a288f6d575bb406-2204778b28ce00f0:T=1663701547:RT=1663701547:S=ALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:09 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Sun, 18 Sep 2022 12:14:52 GMT
cache-control: max-age=300
expires: Tue, 20 Sep 2022 19:19:39 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: HIT
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/s/player/7577aaa2/www-player.css
200 OK 125 kB URL HTTP/2 www.youtube.com/s/player/7577aaa2/www-player.css
IP
Size 125 kB (124743 bytes)
Hash 560d69fb530268f36c01cfb574daac64
d0d83493768b0f56009a3cef4a75144c8f6e46f5
53b038f64c283c284a5b2e631370f30380ee3d78565ae62fb79e9b264ea33064
GET /s/player/7577aaa2/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
content-type: text/css
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49631
date: Tue, 20 Sep 2022 19:19:10 GMT
expires: Wed, 20 Sep 2023 19:19:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 00:17:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20220915/r20190131/zrt_lookup.html
200 OK 4.4 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20220915/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash 682bf699cccbc0ff817e1fcb7b95262a
11ad3edf0008f52b733c2d6d7199e1f052318d58
bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
GET /pagead/html/r20220915/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
date: Mon, 19 Sep 2022 20:13:56 GMT
expires: Mon, 03 Oct 2022 20:13:56 GMT
cache-control: public, max-age=1209600
age: 83114
etag: 9671129459699598864
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
my.rtmark.net/img.gif?f=sync&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2&ttl=&rurl=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2&ttl=&rurl=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=90168112b3ddf305f921e6f3de58e4fa045a948b2938945af70cbf81702a28a2&ttl=&rurl=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Cookie: ID=a62a7767e8684aa595b9475b4c639c78
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:10 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a62a7767e8684aa595b9475b4c639c78; expires=Wed, 20 Sep 2023 19:19:10 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&tn=DIV&cls=stickyads1&ign=false&pw=1280&ph=939&x=0&y=869.4
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&tn=DIV&cls=stickyads1&ign=false&pw=1280&ph=939&x=0&y=869.4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=ach_evt&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&tn=DIV&cls=stickyads1&ign=false&pw=1280&ph=939&x=0&y=869.4 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 20 Sep 2022 19:19:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&tn=DIV&id=side_left_ad&ign=false&pw=1280&ph=939&x=0&y=0
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&tn=DIV&id=side_left_ad&ign=false&pw=1280&ph=939&x=0&y=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=ach_evt&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&tn=DIV&id=side_left_ad&ign=false&pw=1280&ph=939&x=0&y=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 20 Sep 2022 19:19:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/407260/728x90?region=eu-central-1
200 OK 658 kB URL HTTP/2 static.a-ads.com/a-ads-banners/407260/728x90?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 728 x 90\012- data
Size 658 kB (658334 bytes)
Hash 96e1a1f6a465ffb1996646a4932ba18b
95316a340412448c7b2298022f95018a84bd06b9
3779aca15c0cd71ccd037bc921af5cf96adfc673d7f5ca6f4bf1f57080e499ef
GET /a-ads-banners/407260/728x90?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:10 GMT
content-type: image/gif
content-length: 658334
x-amz-id-2: 4fne9ZZVUsSwf7qv3/GnXjuCm7cbfOLPyc8f/eTQe4tiiMoNxjidPPmOi/UtYpwNjQy1grXuJ+M=
x-amz-request-id: A8TYQ13VW9QSPMSK
x-amz-replication-status: COMPLETED
last-modified: Fri, 05 Aug 2022 10:27:24 GMT
etag: "96e1a1f6a465ffb1996646a4932ba18b"
cache-control: max-age=315360000
x-amz-version-id: dygfyYD4qg8mP8_PyDI2yk4JSkWdwyEV
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=mahacet.com&callback=_gfp_s_&client=ca-pub-5414070771498127&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA
200 OK 32 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=mahacet.com&callback=_gfp_s_&client=ca-pub-5414070771498127&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA
IP
File type ASCII text, with no line terminators
Hash e003723bb43e8e216426c5cd897b3a9f
85f6260d04937794cddbf58b46caa5dd7a7dd489
ebb110f380b85f1eadd52e180b12c2ad3c10bba0edddda63a3a79d4ca3673b78
GET /gampad/cookie.js?domain=mahacet.com&callback=_gfp_s_&client=ca-pub-5414070771498127&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
cache-control: private
content-length: 32
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
adservice.google.com/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
adservice.google.no/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 20 Sep 2022 19:19:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:14:23 GMT
expires: Tue, 20 Sep 2022 19:29:23 GMT
cache-control: public, max-age=900
age: 288
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
googleads.g.doubleclick.net/pagead/id?slf_rd=1
200 OK 120 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id?slf_rd=1
IP
Hash 7dac02f9cb1c36a7bed354d63869bfb1
da9e043894a456360992afd445fcddf9f01c1d01
fd21a4d987aaf3d14b632c9797bef8e14934f7eb2ea2039825d9c4cf56282e6c
GET /pagead/id?slf_rd=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Referer: https://www.youtube.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
content-type: application/json; charset=UTF-8
date: Tue, 20 Sep 2022 19:19:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 120
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=60&slotname=2982789661&adk=1755673931&adf=2270175593&pi=t.ma~as.2982789661&w=468&lmt=1663503292&psa=1&format=468x60&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=923&idt=285&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=74&ady=1506&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7C%7CeEbr%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=7&uci=a!7&btvi=1&fsb=1&xpc=ItYXbKZzs0&p=https%3A//mahacet.com&dtd=344
200 OK 212 B URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=60&slotname=2982789661&adk=1755673931&adf=2270175593&pi=t.ma~as.2982789661&w=468&lmt=1663503292&psa=1&format=468x60&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=923&idt=285&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=74&ady=1506&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7C%7CeEbr%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=7&uci=a!7&btvi=1&fsb=1&xpc=ItYXbKZzs0&p=https%3A//mahacet.com&dtd=344
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (436), with no line terminators
Hash 2c2515279caa046968e6bac049c63b9d
f45d646bfab3de51877492b079ba3a7534452092
66ca2fda65ef9609d22693b8ea198a3602bb61cf3576634468a7f5b46e80f18d
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=60&slotname=2982789661&adk=1755673931&adf=2270175593&pi=t.ma~as.2982789661&w=468&lmt=1663503292&psa=1&format=468x60&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=923&idt=285&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=74&ady=1506&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7C%7CeEbr%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=7&uci=a!7&btvi=1&fsb=1&xpc=ItYXbKZzs0&p=https%3A//mahacet.com&dtd=344 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 212
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 00ab6695ed7c582f3611f30f8526e048
76838212c936e66ac53a3aa364ad18389b1c146c
9d80eac905e5f87877f3bbd5f88c4e58970e4ce56b1de089d23bd4dcbe60ad45
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:11 GMT
server: ESF
cache-control: private
content-length: 30907
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=643801748&adf=4123637310&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=4&bdt=924&idt=231&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=540&ady=0&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CleE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=2&uci=a!2&fsb=1&xpc=osDdfflR6p&p=https%3A//mahacet.com&dtd=314
200 OK 28 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=643801748&adf=4123637310&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=4&bdt=924&idt=231&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=540&ady=0&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CleE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=2&uci=a!2&fsb=1&xpc=osDdfflR6p&p=https%3A//mahacet.com&dtd=314
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash a9599db6a5bd0bf547b5fd1749ceec48
4c33c50cfce1c2afb92da6f15ad32d81b993e8da
46be5fa3ed4ccc64b42bef07aeec0ff6fdd90906ca7ddbf2f6f0534d744e93a3
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=643801748&adf=4123637310&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=4&bdt=924&idt=231&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=540&ady=0&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CleE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=2&uci=a!2&fsb=1&xpc=osDdfflR6p&p=https%3A//mahacet.com&dtd=314 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 28018
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=1646902164&adf=3671705910&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=2&bdt=924&idt=244&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=621&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CeE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=5&uci=a!5&fsb=1&xpc=ZwIljOnZPq&p=https%3A//mahacet.com&dtd=333
200 OK 30 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=1646902164&adf=3671705910&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=2&bdt=924&idt=244&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=621&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CeE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=5&uci=a!5&fsb=1&xpc=ZwIljOnZPq&p=https%3A//mahacet.com&dtd=333
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (61827)
Hash 2a77bdb190b522c7ac6d6329de8e5249
b4836f509d84c064e158d768a1b787fab9b3e296
34b98c58d2995a4506546244e7fa2aea91550125507e303d23d3aa53dd376c80
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=1646902164&adf=3671705910&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=2&bdt=924&idt=244&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=621&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CeE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=5&uci=a!5&fsb=1&xpc=ZwIljOnZPq&p=https%3A//mahacet.com&dtd=333 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 30007
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=2210784318&adf=2841456516&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=924&idt=266&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=64&ady=792&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=6&uci=a!6&fsb=1&xpc=5m9DokSdBS&p=https%3A//mahacet.com&dtd=339
200 OK 30 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=2210784318&adf=2841456516&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=924&idt=266&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=64&ady=792&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=6&uci=a!6&fsb=1&xpc=5m9DokSdBS&p=https%3A//mahacet.com&dtd=339
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (61827)
Hash 878ae59d4a3b121063e8326fff597549
3f51740b0877573923813e066d24a2f27b3a8392
e49637990203cd104bb9d3472fdbc5daaa13311e2d3abef2d4e07aaf6efcb56c
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=2210784318&adf=2841456516&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=924&idt=266&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=64&ady=792&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=6&uci=a!6&fsb=1&xpc=5m9DokSdBS&p=https%3A//mahacet.com&dtd=339 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 29991
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=850080377&adf=3262010199&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=924&idt=237&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=0&ady=96&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7Co%7CleE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=3&uci=a!3&fsb=1&xpc=22YLNvQD8W&p=https%3A//mahacet.com&dtd=320
200 OK 30 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=850080377&adf=3262010199&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=924&idt=237&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=0&ady=96&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7Co%7CleE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=3&uci=a!3&fsb=1&xpc=22YLNvQD8W&p=https%3A//mahacet.com&dtd=320
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (61827)
Hash e779937b0852d0a7dfbee458a42e6792
aa2e56f459170055da37a7879d79cc1ff6ecb260
0950157db64331d799b0b53ff9f6ea4163262aefcd12ec6f1ce52356817c9892
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=850080377&adf=3262010199&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=924&idt=237&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=0&ady=96&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7Co%7CleE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=3&uci=a!3&fsb=1&xpc=22YLNvQD8W&p=https%3A//mahacet.com&dtd=320 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 29855
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/YC5q_PYBUgM/maxresdefault.webp
200 OK 52 kB URL HTTP/2 i.ytimg.com/vi_webp/YC5q_PYBUgM/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ffff7aec0d84da2f77ca37ebca11d976
3dc8ba322eb87b8233a7680cd4153356925529bb
222b38319204f7b4f45c30b42601f26f7d53768645674fc0736be2629bc03c8d
GET /vi_webp/YC5q_PYBUgM/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 52270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:19:07 GMT
expires: Tue, 20 Sep 2022 21:19:07 GMT
cache-control: public, max-age=7200
age: 4
etag: "1609638413"
content-type: image/webp
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
yt3.ggpht.com/ytc/AMLnZu8bsu05GxMz5jmQzx9Xp7a1tHyWkHpKK-49a8M1=s68-c-k-c0x00ffffff-no-rj
200 OK 3.9 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu8bsu05GxMz5jmQzx9Xp7a1tHyWkHpKK-49a8M1=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 3586c7226022a1a763d81e391b25bc2d
77a89cb0ba9465ce4f1c8e1bd702598ce95815e7
5e8fb9fafd0abfafd523eeb90dfe362fdcac3a75ea079e7f1539b424ba5f9f5e
GET /ytc/AMLnZu8bsu05GxMz5jmQzx9Xp7a1tHyWkHpKK-49a8M1=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3947
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:20:17 GMT
expires: Sun, 31 Jul 2022 16:58:44 GMT
cache-control: public, max-age=86400, no-transform
age: 3534
etag: "vd"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1624)
Hash 85a90b8e0126b27c0822c49645a463df
45792c551fabfa14db90396c2c34337929011a3b
13fe815828a5dc11870c98db4957f2f59aaf7e0eaec4028d3d88fb4b6e82588e
GET /pagead/js/r20220915/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9550
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:32 GMT
expires: Tue, 04 Oct 2022 18:58:32 GMT
cache-control: public, max-age=1209600
etag: 715955199520789971
content-type: text/javascript; charset=UTF-8
age: 1239
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/0Q0sPaTf27KkVV0qBrYI7cmJeSJkpG4CF1zVddAZEjs.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/0Q0sPaTf27KkVV0qBrYI7cmJeSJkpG4CF1zVddAZEjs.js
IP
File type ASCII text, with very long lines (36110)
Hash d348ea7c67cf70cc27add8ec15920c5f
46b2db74425f5c6c10c69831277b83c76c8c24b8
e9198b139add4e4683e04549366c63b57000c4e9d719c0e5820124d63d0fccff
GET /js/th/0Q0sPaTf27KkVV0qBrYI7cmJeSJkpG4CF1zVddAZEjs.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14308
date: Tue, 20 Sep 2022 19:19:11 GMT
expires: Wed, 20 Sep 2023 19:19:11 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Sep 2022 11:00:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1494)
Hash c6ef0dcf21169e17aaffa059d38c2d49
2be7fa5127d37589157427293c2acededdbc009c
a2734b2074e51f52a7e9c604170acd71b311146d99d1640192f015f070b7df7f
GET /pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7552
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 1588701280721430806
content-type: text/javascript; charset=UTF-8
age: 887
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1624)
Hash 85a90b8e0126b27c0822c49645a463df
45792c551fabfa14db90396c2c34337929011a3b
13fe815828a5dc11870c98db4957f2f59aaf7e0eaec4028d3d88fb4b6e82588e
GET /pagead/js/r20220915/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9550
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:32 GMT
expires: Tue, 04 Oct 2022 18:58:32 GMT
cache-control: public, max-age=1209600
etag: 715955199520789971
content-type: text/javascript; charset=UTF-8
age: 1239
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1494)
Hash c6ef0dcf21169e17aaffa059d38c2d49
2be7fa5127d37589157427293c2acededdbc009c
a2734b2074e51f52a7e9c604170acd71b311146d99d1640192f015f070b7df7f
GET /pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7552
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 1588701280721430806
content-type: text/javascript; charset=UTF-8
age: 887
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1624)
Hash 85a90b8e0126b27c0822c49645a463df
45792c551fabfa14db90396c2c34337929011a3b
13fe815828a5dc11870c98db4957f2f59aaf7e0eaec4028d3d88fb4b6e82588e
GET /pagead/js/r20220915/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9550
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:32 GMT
expires: Tue, 04 Oct 2022 18:58:32 GMT
cache-control: public, max-age=1209600
etag: 715955199520789971
content-type: text/javascript; charset=UTF-8
age: 1239
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1494)
Hash c6ef0dcf21169e17aaffa059d38c2d49
2be7fa5127d37589157427293c2acededdbc009c
a2734b2074e51f52a7e9c604170acd71b311146d99d1640192f015f070b7df7f
GET /pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7552
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 1588701280721430806
content-type: text/javascript; charset=UTF-8
age: 887
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&slotname=2284788038&adk=1268289179&adf=3442147624&pi=t.ma~as.2284788038&w=970&lmt=1663503292&psa=1&format=970x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=7&bdt=923&idt=241&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=149&ady=293&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CeE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=4&uci=a!4&fsb=1&xpc=KzPttTNn2n&p=https%3A//mahacet.com&dtd=328
200 OK 32 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&slotname=2284788038&adk=1268289179&adf=3442147624&pi=t.ma~as.2284788038&w=970&lmt=1663503292&psa=1&format=970x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=7&bdt=923&idt=241&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=149&ady=293&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CeE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=4&uci=a!4&fsb=1&xpc=KzPttTNn2n&p=https%3A//mahacet.com&dtd=328
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Hash cddaef076f4533b347faf0e2aa8d3c48
70c2327b32927fd22df3807fbd9b5d6fd9bc6758
14f89ee3d35500703eb72ec21337f7001c199e078641c2adb3e2df0567b328b7
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&slotname=2284788038&adk=1268289179&adf=3442147624&pi=t.ma~as.2284788038&w=970&lmt=1663503292&psa=1&format=970x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=7&bdt=923&idt=241&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=149&ady=293&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CeE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=4&uci=a!4&fsb=1&xpc=KzPttTNn2n&p=https%3A//mahacet.com&dtd=328 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 32493
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 44 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash 1191238e4518bf6ffe3de5bd10369470
477feae219fa11d8f0404812eb1eeb62cc40cbda
e68823228e0f39a3ed549cae9e5a77dc0a56247eee02b3ea919a8da4a14a3086
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44544
date: Tue, 20 Sep 2022 19:19:11 GMT
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private, max-age=3000
etag: "1663587528796173"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 44 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash 1191238e4518bf6ffe3de5bd10369470
477feae219fa11d8f0404812eb1eeb62cc40cbda
e68823228e0f39a3ed549cae9e5a77dc0a56247eee02b3ea919a8da4a14a3086
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44544
date: Tue, 20 Sep 2022 19:19:11 GMT
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private, max-age=3000
etag: "1663587528796173"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 44 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash 1191238e4518bf6ffe3de5bd10369470
477feae219fa11d8f0404812eb1eeb62cc40cbda
e68823228e0f39a3ed549cae9e5a77dc0a56247eee02b3ea919a8da4a14a3086
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44544
date: Tue, 20 Sep 2022 19:19:11 GMT
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private, max-age=3000
etag: "1663587528796173"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 44 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash 1191238e4518bf6ffe3de5bd10369470
477feae219fa11d8f0404812eb1eeb62cc40cbda
e68823228e0f39a3ed549cae9e5a77dc0a56247eee02b3ea919a8da4a14a3086
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44544
date: Tue, 20 Sep 2022 19:19:11 GMT
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private, max-age=3000
etag: "1663587528796173"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1624)
Hash 85a90b8e0126b27c0822c49645a463df
45792c551fabfa14db90396c2c34337929011a3b
13fe815828a5dc11870c98db4957f2f59aaf7e0eaec4028d3d88fb4b6e82588e
GET /pagead/js/r20220915/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9550
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:32 GMT
expires: Tue, 04 Oct 2022 18:58:32 GMT
cache-control: public, max-age=1209600
etag: 715955199520789971
content-type: text/javascript; charset=UTF-8
age: 1239
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&adk=1812271804&adf=3025194257&lmt=1663503292&plat=1%3A16777216%2C2%3A16777216%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&ea=0&pra=5&wgl=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&dt=1663701550834&bpp=15&bdt=924&idt=187&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&nras=1&correlator=3546646937555&frm=20&pv=2&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=305
200 OK 46 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&adk=1812271804&adf=3025194257&lmt=1663503292&plat=1%3A16777216%2C2%3A16777216%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&ea=0&pra=5&wgl=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&dt=1663701550834&bpp=15&bdt=924&idt=187&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&nras=1&correlator=3546646937555&frm=20&pv=2&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=305
IP
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 8a33c719e75d22fd36c1a5bf3acf151b
e3fe1d6a6f58a7837442eed917c5ca71f86244c6
573e941eaa199a7e9f5e18d4c40ecc8f0e2b5f5c426a93eff408432ef49776ff
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&adk=1812271804&adf=3025194257&lmt=1663503292&plat=1%3A16777216%2C2%3A16777216%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&ea=0&pra=5&wgl=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&dt=1663701550834&bpp=15&bdt=924&idt=187&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&nras=1&correlator=3546646937555&frm=20&pv=2&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=305 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 46043
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=996803492&adf=3256513307&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550837&bpp=2&bdt=926&idt=469&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=768&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=8&uci=a!8&fsb=1&xpc=m01DpM4euG&p=https%3A//mahacet.com&dtd=611
200 OK 212 B URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=996803492&adf=3256513307&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550837&bpp=2&bdt=926&idt=469&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=768&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=8&uci=a!8&fsb=1&xpc=m01DpM4euG&p=https%3A//mahacet.com&dtd=611
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (436), with no line terminators
Hash 473b60da8f5c1d0eb14ffe425269c2aa
0797bf91880697303feec22bc04b5e5dedfb0271
be2b3ea95470927eb3cdfac24d67302813e1dfc46063be22c1b4483c6df26b92
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=996803492&adf=3256513307&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550837&bpp=2&bdt=926&idt=469&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=768&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=8&uci=a!8&fsb=1&xpc=m01DpM4euG&p=https%3A//mahacet.com&dtd=611 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:11 GMT
server: cafe
content-length: 212
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
200 OK 145 B URL HTTP/2 googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 92235b51835ea17fa6d313a73f3c2b8f
1e310139fd2be77b54f39c7c64e1616fd35785ad
2cf3e738572a24733a96c3be1d798e95e2bff434d37d6f28cde31ce53df8e333
GET /pagead/drt/s?v=r20120211 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=643801748&adf=4123637310&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=4&bdt=924&idt=231&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=540&ady=0&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CleE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=2&uci=a!2&fsb=1&xpc=osDdfflR6p&p=https%3A//mahacet.com&dtd=314
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 145
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:12:01 GMT
cache-control: public, max-age=3600
content-type: text/html; charset=UTF-8
age: 430
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
200 OK 1.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
IP
File type ASCII text, with very long lines (1120)
Hash 80cd5cb3c635786273462df0f5f46e1a
419d5c86598430982672063ef04bb4966c94b9e8
f7f4c535ed4b9713150261c1c37ad1c2a883d08aef0ed2d6ce38736dd28d7301
GET /pagead/js/r20220915/r20110914/client/window_focus_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1359
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:45 GMT
expires: Tue, 04 Oct 2022 18:58:45 GMT
cache-control: public, max-age=1209600
etag: 1484984001845508991
content-type: text/javascript; charset=UTF-8
age: 1227
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
200 OK 875 B URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
IP
File type ASCII text, with very long lines (748)
Hash 7f017195be529ea58c3ab78d8dc1be22
d2a8f25d05226f8b59f74573f2509612c00710f9
59acc2605c947c7e98d070701e01bc7813688e81ad022192bb5a9311e799aa24
GET /pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 875
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 16974406330603315520
content-type: text/javascript; charset=UTF-8
age: 888
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/2403938183095566627/6592766407814317453
200 OK 31 kB URL HTTP/2 tpc.googlesyndication.com/simgad/2403938183095566627/6592766407814317453
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x300, components 3\012- data
Hash 78e43bbce3bd07ed97f2059421216d4f
2b12403bc4d6d02668c54b35e5caee1a170c6e40
45552c82a9c6e9939cd43219a71e67a64c0c181975ed2cce43938c5ecc97396e
GET /simgad/2403938183095566627/6592766407814317453 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 31352
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 12:37:21 GMT
expires: Thu, 14 Sep 2023 12:37:21 GMT
cache-control: public, max-age=31536000
age: 542511
last-modified: Tue, 01 Mar 2022 11:34:22 GMT
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/17794363475189954975/downsize_200k_v1?w=100&h=100
200 OK 4.0 kB URL HTTP/2 tpc.googlesyndication.com/simgad/17794363475189954975/downsize_200k_v1?w=100&h=100
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 44545cc3b109bd30aa9c8c6a1012a077
fe3db1b766e428fa55b531d05a2bf4c42ea13432
8a336e01bfd452ac6639852be75b602011311a29b22c7fdc5d10648f5332c4e8
GET /simgad/17794363475189954975/downsize_200k_v1?w=100&h=100 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 4032
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 15:52:37 GMT
expires: Wed, 20 Sep 2023 15:52:37 GMT
cache-control: public, max-age=31536000
age: 12395
last-modified: Tue, 01 Mar 2022 11:06:15 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaQGem4tmoevhkyH9gJbqCjxR5fmVtjdFAAUiN3_qZTPBNSknMU8SRBQuQWZrKip1CfEcNIaOGwkMiz3ERXE6zL6x3d7EQ
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaQGem4tmoevhkyH9gJbqCjxR5fmVtjdFAAUiN3_qZTPBNSknMU8SRBQuQWZrKip1CfEcNIaOGwkMiz3ERXE6zL6x3d7EQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaQGem4tmoevhkyH9gJbqCjxR5fmVtjdFAAUiN3_qZTPBNSknMU8SRBQuQWZrKip1CfEcNIaOGwkMiz3ERXE6zL6x3d7EQ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/adview?ai=CjcNtLxIqY7-rC7WniQbbzaWYAtrV5pJs3N3C-9gPxISFngsQASDV9dIUYMOEgICYGKAB39j4ngLIAQmpAt9MjiXSxLA-qAMByAPLBKoE1QFP0DfZp-qpo3zCyW1f6m2yJniXi0eJKphytFfzEkpjo05UvKLA7xLQbusYnx6nzQ0W4t9TLcrIfG6yD6CcSHYunctfUHRgt-8FBd2fgAezqwLSc6_jEliOaw1eD5P1Lcb0HL8JU3JkSF1t2khD6Y5CJMR10dwteBio3F-x5C9n9Tk1zYIG59m0OZaMugquRKD0ZYPZmDxAV2_nENELlxbJ2tWgYKQUEzCXuYW0H9h5KRM-JJ9k_kJw2Im2peER3ee5hVDCsSGP-W9nQNNyvyo1ISuIm_DABJij5c38A6AGLoAHiaeH4QGoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAPIHAxCQNdIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAcgLAbgT5APYEwPQFQGAFwGyFxwKGggAEhRwdWItNTQxNDA3MDc3MTQ5ODEyNxgA&sigh=sTzOtGuHCgw&uach_m=[UACH]&template_id=484
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/adview?ai=CjcNtLxIqY7-rC7WniQbbzaWYAtrV5pJs3N3C-9gPxISFngsQASDV9dIUYMOEgICYGKAB39j4ngLIAQmpAt9MjiXSxLA-qAMByAPLBKoE1QFP0DfZp-qpo3zCyW1f6m2yJniXi0eJKphytFfzEkpjo05UvKLA7xLQbusYnx6nzQ0W4t9TLcrIfG6yD6CcSHYunctfUHRgt-8FBd2fgAezqwLSc6_jEliOaw1eD5P1Lcb0HL8JU3JkSF1t2khD6Y5CJMR10dwteBio3F-x5C9n9Tk1zYIG59m0OZaMugquRKD0ZYPZmDxAV2_nENELlxbJ2tWgYKQUEzCXuYW0H9h5KRM-JJ9k_kJw2Im2peER3ee5hVDCsSGP-W9nQNNyvyo1ISuIm_DABJij5c38A6AGLoAHiaeH4QGoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAPIHAxCQNdIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAcgLAbgT5APYEwPQFQGAFwGyFxwKGggAEhRwdWItNTQxNDA3MDc3MTQ5ODEyNxgA&sigh=sTzOtGuHCgw&uach_m=[UACH]&template_id=484
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/adview?ai=CjcNtLxIqY7-rC7WniQbbzaWYAtrV5pJs3N3C-9gPxISFngsQASDV9dIUYMOEgICYGKAB39j4ngLIAQmpAt9MjiXSxLA-qAMByAPLBKoE1QFP0DfZp-qpo3zCyW1f6m2yJniXi0eJKphytFfzEkpjo05UvKLA7xLQbusYnx6nzQ0W4t9TLcrIfG6yD6CcSHYunctfUHRgt-8FBd2fgAezqwLSc6_jEliOaw1eD5P1Lcb0HL8JU3JkSF1t2khD6Y5CJMR10dwteBio3F-x5C9n9Tk1zYIG59m0OZaMugquRKD0ZYPZmDxAV2_nENELlxbJ2tWgYKQUEzCXuYW0H9h5KRM-JJ9k_kJw2Im2peER3ee5hVDCsSGP-W9nQNNyvyo1ISuIm_DABJij5c38A6AGLoAHiaeH4QGoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAPIHAxCQNdIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAcgLAbgT5APYEwPQFQGAFwGyFxwKGggAEhRwdWItNTQxNDA3MDc3MTQ5ODEyNxgA&sigh=sTzOtGuHCgw&uach_m=[UACH]&template_id=484 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=1646902164&adf=3671705910&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=2&bdt=924&idt=244&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=621&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CeE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=5&uci=a!5&fsb=1&xpc=ZwIljOnZPq&p=https%3A//mahacet.com&dtd=333
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'none'; object-src 'none'
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:12 GMT
cache-control: private
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
IP
File type C++ source, ASCII text, with very long lines (1792)
Hash dc869492c13c6684ab4eb7bf97d94e03
12c6685c433c3eb68db7babb6074f65a86b81350
7e6f05d389449ba380ad360c900ee4e5d0a05f7e0aac3c52a99d7fc684654e3e
GET /mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 13684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 21:59:15 GMT
expires: Wed, 14 Dec 2022 21:59:15 GMT
cache-control: public, max-age=7776000
last-modified: Thu, 15 Sep 2022 20:14:13 GMT
content-type: text/javascript
age: 422397
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
200 OK 875 B URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
IP
File type ASCII text, with very long lines (748)
Hash 7f017195be529ea58c3ab78d8dc1be22
d2a8f25d05226f8b59f74573f2509612c00710f9
59acc2605c947c7e98d070701e01bc7813688e81ad022192bb5a9311e799aa24
GET /pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 875
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 16974406330603315520
content-type: text/javascript; charset=UTF-8
age: 888
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
IP
File type C++ source, ASCII text, with very long lines (1792)
Hash dc869492c13c6684ab4eb7bf97d94e03
12c6685c433c3eb68db7babb6074f65a86b81350
7e6f05d389449ba380ad360c900ee4e5d0a05f7e0aac3c52a99d7fc684654e3e
GET /mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 13684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 21:59:15 GMT
expires: Wed, 14 Dec 2022 21:59:15 GMT
cache-control: public, max-age=7776000
last-modified: Thu, 15 Sep 2022 20:14:13 GMT
content-type: text/javascript
age: 422397
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
200 OK 1.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
IP
File type ASCII text, with very long lines (1120)
Hash 80cd5cb3c635786273462df0f5f46e1a
419d5c86598430982672063ef04bb4966c94b9e8
f7f4c535ed4b9713150261c1c37ad1c2a883d08aef0ed2d6ce38736dd28d7301
GET /pagead/js/r20220915/r20110914/client/window_focus_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1359
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:45 GMT
expires: Tue, 04 Oct 2022 18:58:45 GMT
cache-control: public, max-age=1209600
etag: 1484984001845508991
content-type: text/javascript; charset=UTF-8
age: 1227
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/16722985108152378718/downsize_200k_v1?w=100&h=100
200 OK 4.3 kB URL HTTP/2 tpc.googlesyndication.com/simgad/16722985108152378718/downsize_200k_v1?w=100&h=100
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a67a4e74b5719807be5e38374b1dbca
472869b372d79744e8b4ae519ede77a2d38422e0
877eea3263e84eca5bc47a8ac97db28227769299a3bcff63c711507cc719464b
GET /simgad/16722985108152378718/downsize_200k_v1?w=100&h=100 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 4320
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 15:57:29 GMT
expires: Wed, 20 Sep 2023 15:57:29 GMT
cache-control: public, max-age=31536000
age: 12103
last-modified: Tue, 01 Mar 2022 11:06:15 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/16350164203126368675/6592766407814317453
200 OK 32 kB URL HTTP/2 tpc.googlesyndication.com/simgad/16350164203126368675/6592766407814317453
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x300, components 3\012- data
Hash 58202eeded6400c5c5d11e9a00de5845
0ff5f5e79be327460ad9a508b6bc2b42612a8329
103e8b6251b76577ae9516143f5e0c4132bb035737b2df29e88c6b90b15ff9d1
GET /simgad/16350164203126368675/6592766407814317453 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 31601
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 14:52:10 GMT
expires: Fri, 15 Sep 2023 14:52:10 GMT
cache-control: public, max-age=31536000
age: 448022
last-modified: Tue, 01 Mar 2022 11:15:25 GMT
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaS40z2tNKOYE21CpQo6Lrh6hIu7XXDSjH1azXF73WVTZnt1IDstz7y6qzecxX9WRZCQ8PnmwoeaJpwhHORGSmfs0U3byA
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaS40z2tNKOYE21CpQo6Lrh6hIu7XXDSjH1azXF73WVTZnt1IDstz7y6qzecxX9WRZCQ8PnmwoeaJpwhHORGSmfs0U3byA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaS40z2tNKOYE21CpQo6Lrh6hIu7XXDSjH1azXF73WVTZnt1IDstz7y6qzecxX9WRZCQ8PnmwoeaJpwhHORGSmfs0U3byA HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/adview?ai=C4RGQLxIqY4DCC6e6iQbQq5P4CdrV5pJsjN3C-9gPxISFngsQASDV9dIUYMOEgICYGKAB39j4ngLIAQmpAt9MjiXSxLA-qAMByAPLBKoE1QFP0M-MNJFZbluWt2NZM9GtURFkGZuqz1UCcNII9gn6keMOv5C3GZOKpOe1Op7DHzOIglrhoBhoX7RJYLYzcLJAb4kOD_TVor_3b-1Sm2Ez1vBPgeziiPrO2c9nYk8ikjgwPmRNZoE-VaMXTIs_btwXZSsImovObwsJhHC3oL4RWGsuD7DhrTqIKkaBH_BaDhLGtYHcw7q-n440Nc9nKVGHYxHzgHWlPEz0WcYETy5qNQnrudLuC8omO1NTpX_2WKTkql3fnd5GVBnNIY00y9SpsLUgC17ABMii5c38A6AGLoAHiaeH4QGoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAPIHAxCQNdIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAcgLAbgT5APYEwPQFQGAFwGyFxwKGggAEhRwdWItNTQxNDA3MDc3MTQ5ODEyNxgA&sigh=qjyq62NoZqI&uach_m=[UACH]&template_id=484
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/adview?ai=C4RGQLxIqY4DCC6e6iQbQq5P4CdrV5pJsjN3C-9gPxISFngsQASDV9dIUYMOEgICYGKAB39j4ngLIAQmpAt9MjiXSxLA-qAMByAPLBKoE1QFP0M-MNJFZbluWt2NZM9GtURFkGZuqz1UCcNII9gn6keMOv5C3GZOKpOe1Op7DHzOIglrhoBhoX7RJYLYzcLJAb4kOD_TVor_3b-1Sm2Ez1vBPgeziiPrO2c9nYk8ikjgwPmRNZoE-VaMXTIs_btwXZSsImovObwsJhHC3oL4RWGsuD7DhrTqIKkaBH_BaDhLGtYHcw7q-n440Nc9nKVGHYxHzgHWlPEz0WcYETy5qNQnrudLuC8omO1NTpX_2WKTkql3fnd5GVBnNIY00y9SpsLUgC17ABMii5c38A6AGLoAHiaeH4QGoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAPIHAxCQNdIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAcgLAbgT5APYEwPQFQGAFwGyFxwKGggAEhRwdWItNTQxNDA3MDc3MTQ5ODEyNxgA&sigh=qjyq62NoZqI&uach_m=[UACH]&template_id=484
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/adview?ai=C4RGQLxIqY4DCC6e6iQbQq5P4CdrV5pJsjN3C-9gPxISFngsQASDV9dIUYMOEgICYGKAB39j4ngLIAQmpAt9MjiXSxLA-qAMByAPLBKoE1QFP0M-MNJFZbluWt2NZM9GtURFkGZuqz1UCcNII9gn6keMOv5C3GZOKpOe1Op7DHzOIglrhoBhoX7RJYLYzcLJAb4kOD_TVor_3b-1Sm2Ez1vBPgeziiPrO2c9nYk8ikjgwPmRNZoE-VaMXTIs_btwXZSsImovObwsJhHC3oL4RWGsuD7DhrTqIKkaBH_BaDhLGtYHcw7q-n440Nc9nKVGHYxHzgHWlPEz0WcYETy5qNQnrudLuC8omO1NTpX_2WKTkql3fnd5GVBnNIY00y9SpsLUgC17ABMii5c38A6AGLoAHiaeH4QGoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAPIHAxCQNdIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAcgLAbgT5APYEwPQFQGAFwGyFxwKGggAEhRwdWItNTQxNDA3MDc3MTQ5ODEyNxgA&sigh=qjyq62NoZqI&uach_m=[UACH]&template_id=484 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=2210784318&adf=2841456516&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=924&idt=266&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=64&ady=792&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=6&uci=a!6&fsb=1&xpc=5m9DokSdBS&p=https%3A//mahacet.com&dtd=339
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'none'; object-src 'none'
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:12 GMT
cache-control: private
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
200 OK 1.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
IP
File type ASCII text, with very long lines (1120)
Hash 80cd5cb3c635786273462df0f5f46e1a
419d5c86598430982672063ef04bb4966c94b9e8
f7f4c535ed4b9713150261c1c37ad1c2a883d08aef0ed2d6ce38736dd28d7301
GET /pagead/js/r20220915/r20110914/client/window_focus_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1359
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:45 GMT
expires: Tue, 04 Oct 2022 18:58:45 GMT
cache-control: public, max-age=1209600
etag: 1484984001845508991
content-type: text/javascript; charset=UTF-8
age: 1227
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/10833800675353301943?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&rs=AOga4qnPFTzti3L0Xf3Q8l8_maWGMx74ww
200 OK 29 kB URL HTTP/2 tpc.googlesyndication.com/simgad/10833800675353301943?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&rs=AOga4qnPFTzti3L0Xf3Q8l8_maWGMx74ww
IP
File type PNG image data, 728 x 90, 8-bit colormap, non-interlaced\012- data
Hash 69474b5ceb4c959a50753ec4714b2e64
2a7d17d95d1d08047fdf66d3f12dc79dc5ea1b03
95ba6b7fb70d0a0b96e7774ec8c3c295cece4371bbb89f5fcb56f0d78f9355c8
GET /simgad/10833800675353301943?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&rs=AOga4qnPFTzti3L0Xf3Q8l8_maWGMx74ww HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 28618
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:12:43 GMT
expires: Wed, 20 Sep 2023 17:12:43 GMT
cache-control: public, max-age=31536000
age: 7589
last-modified: Tue, 29 Sep 2020 12:25:30 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/one_click_handler_one_afma_fy2021.js
200 OK 14 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/one_click_handler_one_afma_fy2021.js
IP
File type ASCII text, with very long lines (1863)
Hash d8c4b9c707651d06230544df6f730c16
1669939b47ac0733916911949203fcf8dad38d43
21256b69c521d07abc601b7c444ec6dc5b186ed6ec2484569183986ca7c14f49
GET /pagead/js/r20220915/r20110914/client/one_click_handler_one_afma_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 13561
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:26:57 GMT
expires: Tue, 04 Oct 2022 18:26:57 GMT
cache-control: public, max-age=1209600
age: 3135
etag: 2350513669966983282
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaT9b6GnrliNrKu8-m6sFksqGq2CBQLS7hcDP9ESh0UFp1oU9NnOnTaPh6W6Jcbf94A9xU13dV-bnZdx9pWrOQBvXg502w
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaT9b6GnrliNrKu8-m6sFksqGq2CBQLS7hcDP9ESh0UFp1oU9NnOnTaPh6W6Jcbf94A9xU13dV-bnZdx9pWrOQBvXg502w
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaT9b6GnrliNrKu8-m6sFksqGq2CBQLS7hcDP9ESh0UFp1oU9NnOnTaPh6W6Jcbf94A9xU13dV-bnZdx9pWrOQBvXg502w HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
IP
File type C++ source, ASCII text, with very long lines (1792)
Hash dc869492c13c6684ab4eb7bf97d94e03
12c6685c433c3eb68db7babb6074f65a86b81350
7e6f05d389449ba380ad360c900ee4e5d0a05f7e0aac3c52a99d7fc684654e3e
GET /mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 13684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 21:59:15 GMT
expires: Wed, 14 Dec 2022 21:59:15 GMT
cache-control: public, max-age=7776000
last-modified: Thu, 15 Sep 2022 20:14:13 GMT
content-type: text/javascript
age: 422397
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
200 OK 875 B URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
IP
File type ASCII text, with very long lines (748)
Hash 7f017195be529ea58c3ab78d8dc1be22
d2a8f25d05226f8b59f74573f2509612c00710f9
59acc2605c947c7e98d070701e01bc7813688e81ad022192bb5a9311e799aa24
GET /pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 875
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 16974406330603315520
content-type: text/javascript; charset=UTF-8
age: 888
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaSUcKAKHQuwFbgY_4YobOe39nCL47m6KvQEopGFR5nTJ8Og_3UJ7xRb1eW5GvaaoBX9XI2VZBdsj565SUTr7cbCIGIiuA
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaSUcKAKHQuwFbgY_4YobOe39nCL47m6KvQEopGFR5nTJ8Og_3UJ7xRb1eW5GvaaoBX9XI2VZBdsj565SUTr7cbCIGIiuA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaSUcKAKHQuwFbgY_4YobOe39nCL47m6KvQEopGFR5nTJ8Og_3UJ7xRb1eW5GvaaoBX9XI2VZBdsj565SUTr7cbCIGIiuA HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/adview?ai=CdYlVLxIqY-CaCsyS-cAPkfiggAPU84rrafiZ5Lq1DY6btY2MDhABINX10hRgw4SAgJgYoAH_nKeYAsgBAqkCWORxZ1YKgj6oAwHIA8kEqgTUAU_QIYw9WUFiF7iLrFUWqxqMqDowZ2b2Ddmv5-c2DZFsNqxTUCCyfm_W07pyJADJAQ7xy2uwXYZ3eGYGRoiyXaWU0r3LQ_Ty7raig1-pTHWLgew9GUQ-ct9-fzsBAwOhscz-ZIODQRLeypMBWbvBVw9hl3eK_szHgIkYnixytH8PJO7lMOoAvim4tV9n11NJ42BHeIoWuNR477sY6i0y5ZWuF-j-zaPNIrhiKVaBL3Jn_MUB7Bmgpxxn6PmlIFF8jqFK1ZaGSotQmXKjCfzAX1GssJXtwATTssLPrwOSBQQIBBgBkgUECAUYBKAGAoAH6eLY5wGoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAfIHAxDkTdIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAcgLAdgTAtAVAYAXAbIXHAoaCAASFHB1Yi01NDE0MDcwNzcxNDk4MTI3GAA&sigh=JRuHZve8Y8k&uach_m=[UACH]
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/adview?ai=CdYlVLxIqY-CaCsyS-cAPkfiggAPU84rrafiZ5Lq1DY6btY2MDhABINX10hRgw4SAgJgYoAH_nKeYAsgBAqkCWORxZ1YKgj6oAwHIA8kEqgTUAU_QIYw9WUFiF7iLrFUWqxqMqDowZ2b2Ddmv5-c2DZFsNqxTUCCyfm_W07pyJADJAQ7xy2uwXYZ3eGYGRoiyXaWU0r3LQ_Ty7raig1-pTHWLgew9GUQ-ct9-fzsBAwOhscz-ZIODQRLeypMBWbvBVw9hl3eK_szHgIkYnixytH8PJO7lMOoAvim4tV9n11NJ42BHeIoWuNR477sY6i0y5ZWuF-j-zaPNIrhiKVaBL3Jn_MUB7Bmgpxxn6PmlIFF8jqFK1ZaGSotQmXKjCfzAX1GssJXtwATTssLPrwOSBQQIBBgBkgUECAUYBKAGAoAH6eLY5wGoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAfIHAxDkTdIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAcgLAdgTAtAVAYAXAbIXHAoaCAASFHB1Yi01NDE0MDcwNzcxNDk4MTI3GAA&sigh=JRuHZve8Y8k&uach_m=[UACH]
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/adview?ai=CdYlVLxIqY-CaCsyS-cAPkfiggAPU84rrafiZ5Lq1DY6btY2MDhABINX10hRgw4SAgJgYoAH_nKeYAsgBAqkCWORxZ1YKgj6oAwHIA8kEqgTUAU_QIYw9WUFiF7iLrFUWqxqMqDowZ2b2Ddmv5-c2DZFsNqxTUCCyfm_W07pyJADJAQ7xy2uwXYZ3eGYGRoiyXaWU0r3LQ_Ty7raig1-pTHWLgew9GUQ-ct9-fzsBAwOhscz-ZIODQRLeypMBWbvBVw9hl3eK_szHgIkYnixytH8PJO7lMOoAvim4tV9n11NJ42BHeIoWuNR477sY6i0y5ZWuF-j-zaPNIrhiKVaBL3Jn_MUB7Bmgpxxn6PmlIFF8jqFK1ZaGSotQmXKjCfzAX1GssJXtwATTssLPrwOSBQQIBBgBkgUECAUYBKAGAoAH6eLY5wGoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAfIHAxDkTdIIEgiI4YAQEAEYHzIDqoIBOgKAQIAKAcgLAdgTAtAVAYAXAbIXHAoaCAASFHB1Yi01NDE0MDcwNzcxNDk4MTI3GAA&sigh=JRuHZve8Y8k&uach_m=[UACH] HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=643801748&adf=4123637310&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=4&bdt=924&idt=231&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=540&ady=0&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CleE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=2&uci=a!2&fsb=1&xpc=osDdfflR6p&p=https%3A//mahacet.com&dtd=314
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'none'; object-src 'none'
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:12 GMT
cache-control: private
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
200 OK 1.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
IP
File type ASCII text, with very long lines (1120)
Hash 80cd5cb3c635786273462df0f5f46e1a
419d5c86598430982672063ef04bb4966c94b9e8
f7f4c535ed4b9713150261c1c37ad1c2a883d08aef0ed2d6ce38736dd28d7301
GET /pagead/js/r20220915/r20110914/client/window_focus_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1359
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:45 GMT
expires: Tue, 04 Oct 2022 18:58:45 GMT
cache-control: public, max-age=1209600
etag: 1484984001845508991
content-type: text/javascript; charset=UTF-8
age: 1227
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/adview?ai=Co7UwLxIqY7y1CoupZuvOu8AC2tXmkmyM3cL72A_EhIWeCxABINX10hRgw4SAgJgYoAHf2PieAsgBCakC30yOJdLEsD6oAwHIA8sEqgTVAU_Qji9upKmHpHJDe0dWgsj0Fz1QN2fycmnSjdH-c81dk19_XOjvIXM2xKk55qnB5eV3o-x9r9ZxSVuT1kRFJs4Z7SsYowA08_rFpHe77tsSWvNwiTEl9RpW84oap-PSoKfUkCCcvYmGdUzxh7YTZR2KXQ37UPUf4Im-SKE82wOn-2-jkjGsjDeiGL97xUNNjUhEtZS_cs4ddi2erfqMlK9ONNDNy_GDVBxDp4ZbEoz-sN4dgrVGt-Mre_SJzac3uYEYZwXj24hhl1D9ltPr_IoYpWirc8AEyKLlzfwDoAYugAeJp4fhAagHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4b2AcA8gcDEJA10ggSCIjhgBAQARgfMgOqggE6AoBAgAoByAsBuBPkA9gTA9AVAYAXAbIXHAoaCAASFHB1Yi01NDE0MDcwNzcxNDk4MTI3GAA&sigh=vqSGyFvu178&uach_m=[UACH]&template_id=484
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/adview?ai=Co7UwLxIqY7y1CoupZuvOu8AC2tXmkmyM3cL72A_EhIWeCxABINX10hRgw4SAgJgYoAHf2PieAsgBCakC30yOJdLEsD6oAwHIA8sEqgTVAU_Qji9upKmHpHJDe0dWgsj0Fz1QN2fycmnSjdH-c81dk19_XOjvIXM2xKk55qnB5eV3o-x9r9ZxSVuT1kRFJs4Z7SsYowA08_rFpHe77tsSWvNwiTEl9RpW84oap-PSoKfUkCCcvYmGdUzxh7YTZR2KXQ37UPUf4Im-SKE82wOn-2-jkjGsjDeiGL97xUNNjUhEtZS_cs4ddi2erfqMlK9ONNDNy_GDVBxDp4ZbEoz-sN4dgrVGt-Mre_SJzac3uYEYZwXj24hhl1D9ltPr_IoYpWirc8AEyKLlzfwDoAYugAeJp4fhAagHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4b2AcA8gcDEJA10ggSCIjhgBAQARgfMgOqggE6AoBAgAoByAsBuBPkA9gTA9AVAYAXAbIXHAoaCAASFHB1Yi01NDE0MDcwNzcxNDk4MTI3GAA&sigh=vqSGyFvu178&uach_m=[UACH]&template_id=484
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/adview?ai=Co7UwLxIqY7y1CoupZuvOu8AC2tXmkmyM3cL72A_EhIWeCxABINX10hRgw4SAgJgYoAHf2PieAsgBCakC30yOJdLEsD6oAwHIA8sEqgTVAU_Qji9upKmHpHJDe0dWgsj0Fz1QN2fycmnSjdH-c81dk19_XOjvIXM2xKk55qnB5eV3o-x9r9ZxSVuT1kRFJs4Z7SsYowA08_rFpHe77tsSWvNwiTEl9RpW84oap-PSoKfUkCCcvYmGdUzxh7YTZR2KXQ37UPUf4Im-SKE82wOn-2-jkjGsjDeiGL97xUNNjUhEtZS_cs4ddi2erfqMlK9ONNDNy_GDVBxDp4ZbEoz-sN4dgrVGt-Mre_SJzac3uYEYZwXj24hhl1D9ltPr_IoYpWirc8AEyKLlzfwDoAYugAeJp4fhAagHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4b2AcA8gcDEJA10ggSCIjhgBAQARgfMgOqggE6AoBAgAoByAsBuBPkA9gTA9AVAYAXAbIXHAoaCAASFHB1Yi01NDE0MDcwNzcxNDk4MTI3GAA&sigh=vqSGyFvu178&uach_m=[UACH]&template_id=484 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=850080377&adf=3262010199&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=3&bdt=924&idt=237&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=0&ady=96&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7Co%7CleE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=3&uci=a!3&fsb=1&xpc=22YLNvQD8W&p=https%3A//mahacet.com&dtd=320
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'none'; object-src 'none'
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:12 GMT
cache-control: private
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/16350164203126368675/6592766407814317453
200 OK 32 kB URL HTTP/2 tpc.googlesyndication.com/simgad/16350164203126368675/6592766407814317453
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x300, components 3\012- data
Hash 58202eeded6400c5c5d11e9a00de5845
0ff5f5e79be327460ad9a508b6bc2b42612a8329
103e8b6251b76577ae9516143f5e0c4132bb035737b2df29e88c6b90b15ff9d1
GET /simgad/16350164203126368675/6592766407814317453 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 31601
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 14:52:10 GMT
expires: Fri, 15 Sep 2023 14:52:10 GMT
cache-control: public, max-age=31536000
age: 448022
last-modified: Tue, 01 Mar 2022 11:15:25 GMT
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/16722985108152378718/downsize_200k_v1?w=100&h=100
200 OK 4.3 kB URL HTTP/2 tpc.googlesyndication.com/simgad/16722985108152378718/downsize_200k_v1?w=100&h=100
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a67a4e74b5719807be5e38374b1dbca
472869b372d79744e8b4ae519ede77a2d38422e0
877eea3263e84eca5bc47a8ac97db28227769299a3bcff63c711507cc719464b
GET /simgad/16722985108152378718/downsize_200k_v1?w=100&h=100 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 4320
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 15:57:29 GMT
expires: Wed, 20 Sep 2023 15:57:29 GMT
cache-control: public, max-age=31536000
age: 12103
last-modified: Tue, 01 Mar 2022 11:06:15 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/generate_204?z_tlTQ
204 No Content 0 B URL HTTP/2 www.youtube.com/generate_204?z_tlTQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?z_tlTQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Tue, 20 Sep 2022 19:19:12 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1624)
Hash 85a90b8e0126b27c0822c49645a463df
45792c551fabfa14db90396c2c34337929011a3b
13fe815828a5dc11870c98db4957f2f59aaf7e0eaec4028d3d88fb4b6e82588e
GET /pagead/js/r20220915/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9550
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:32 GMT
expires: Tue, 04 Oct 2022 18:58:32 GMT
cache-control: public, max-age=1209600
etag: 715955199520789971
content-type: text/javascript; charset=UTF-8
age: 1240
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1494)
Hash c6ef0dcf21169e17aaffa059d38c2d49
2be7fa5127d37589157427293c2acededdbc009c
a2734b2074e51f52a7e9c604170acd71b311146d99d1640192f015f070b7df7f
GET /pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7552
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 1588701280721430806
content-type: text/javascript; charset=UTF-8
age: 888
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 44 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash 1191238e4518bf6ffe3de5bd10369470
477feae219fa11d8f0404812eb1eeb62cc40cbda
e68823228e0f39a3ed549cae9e5a77dc0a56247eee02b3ea919a8da4a14a3086
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44544
date: Tue, 20 Sep 2022 19:19:12 GMT
expires: Tue, 20 Sep 2022 19:19:12 GMT
cache-control: private, max-age=3000
etag: "1663587528796173"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 517504
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
200 OK 17 kB URL HTTP/2 fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
IP
Hash 5958ee2e2c26eea7e3dd8a1bd348ce11
100b2e92919f6de9ba20b98b72b0a9693bdcdc93
bf2793eb7bb7d5f6d802dab912c0e1b9aefbb5d935c8632131fff1310fff0e91
GET /css?family=Google%20Sans%3A400%2C500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Sep 2022 19:19:12 GMT
date: Tue, 20 Sep 2022 19:19:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 517504
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 517504
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 517504
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 517504
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
200 OK 875 B URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
IP
File type ASCII text, with very long lines (748)
Hash 7f017195be529ea58c3ab78d8dc1be22
d2a8f25d05226f8b59f74573f2509612c00710f9
59acc2605c947c7e98d070701e01bc7813688e81ad022192bb5a9311e799aa24
GET /pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 875
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 16974406330603315520
content-type: text/javascript; charset=UTF-8
age: 888
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
IP
File type C++ source, ASCII text, with very long lines (1792)
Hash dc869492c13c6684ab4eb7bf97d94e03
12c6685c433c3eb68db7babb6074f65a86b81350
7e6f05d389449ba380ad360c900ee4e5d0a05f7e0aac3c52a99d7fc684654e3e
GET /mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 13684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 21:59:15 GMT
expires: Wed, 14 Dec 2022 21:59:15 GMT
cache-control: public, max-age=7776000
last-modified: Thu, 15 Sep 2022 20:14:13 GMT
content-type: text/javascript
age: 422397
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
200 OK 1.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
IP
File type ASCII text, with very long lines (1120)
Hash 80cd5cb3c635786273462df0f5f46e1a
419d5c86598430982672063ef04bb4966c94b9e8
f7f4c535ed4b9713150261c1c37ad1c2a883d08aef0ed2d6ce38736dd28d7301
GET /pagead/js/r20220915/r20110914/client/window_focus_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1359
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:45 GMT
expires: Tue, 04 Oct 2022 18:58:45 GMT
cache-control: public, max-age=1209600
etag: 1484984001845508991
content-type: text/javascript; charset=UTF-8
age: 1227
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaQNImVY0eHRr9_piGF-0mCrxlcITTAfNDkgDbxnfCdcXCqex6El8zFCRsJmXikiqeIjZDhy40FgFareXAVVqTeuKqC22Q
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaQNImVY0eHRr9_piGF-0mCrxlcITTAfNDkgDbxnfCdcXCqex6El8zFCRsJmXikiqeIjZDhy40FgFareXAVVqTeuKqC22Q
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaQNImVY0eHRr9_piGF-0mCrxlcITTAfNDkgDbxnfCdcXCqex6El8zFCRsJmXikiqeIjZDhy40FgFareXAVVqTeuKqC22Q HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/adview?ai=CChotLxIqY8rvCsSdiQbYvrC4CYaKicNsyp7zld4Q-quJ5o4OEAEg1fXSFGDDhICAmBigAcuYo8oDyAEJqQLfTI4l0sSwPqgDAcgDywSqBOUBT9CnNRNrx_YaAcHk9w2-3BEdkmwPmVo3uiF7bL0UlVk4oqsH295q8-VU9_D_BwxYb494fOZZtaXAjkohWvI3tcMBuEYiTcmDsdPrMye8j3huZrU6hBVctlRGHrJ-SPXhnAZDzcigIuVhBlo8oM9kmsbV89K70wERzRGCi7P_53vE50qbDcRwJ50Vo0XcaUAiqNbFIA97PjJD3BVxOaPmasSqtuIYtzmYLW_yAkrBVw4KGqlMtl48wcDRjH9op7XP_PGhGYvf7z8yqISdJZo6a8UYy-951xLu-OsrMiWRVfjhHPgs_8AE0eeyx5kEoAYugAed59w1qAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhvYBwDyBwMQqGLSCBIIiOGAEBABGB8yA6qCAToCgECACgHICwHYEwPQFQGAFwGyFxwKGggAEhRwdWItNTQxNDA3MDc3MTQ5ODEyNxgA&sigh=mEMIMP6rgkI&uach_m=[UACH]&template_id=5000
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/adview?ai=CChotLxIqY8rvCsSdiQbYvrC4CYaKicNsyp7zld4Q-quJ5o4OEAEg1fXSFGDDhICAmBigAcuYo8oDyAEJqQLfTI4l0sSwPqgDAcgDywSqBOUBT9CnNRNrx_YaAcHk9w2-3BEdkmwPmVo3uiF7bL0UlVk4oqsH295q8-VU9_D_BwxYb494fOZZtaXAjkohWvI3tcMBuEYiTcmDsdPrMye8j3huZrU6hBVctlRGHrJ-SPXhnAZDzcigIuVhBlo8oM9kmsbV89K70wERzRGCi7P_53vE50qbDcRwJ50Vo0XcaUAiqNbFIA97PjJD3BVxOaPmasSqtuIYtzmYLW_yAkrBVw4KGqlMtl48wcDRjH9op7XP_PGhGYvf7z8yqISdJZo6a8UYy-951xLu-OsrMiWRVfjhHPgs_8AE0eeyx5kEoAYugAed59w1qAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhvYBwDyBwMQqGLSCBIIiOGAEBABGB8yA6qCAToCgECACgHICwHYEwPQFQGAFwGyFxwKGggAEhRwdWItNTQxNDA3MDc3MTQ5ODEyNxgA&sigh=mEMIMP6rgkI&uach_m=[UACH]&template_id=5000
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/adview?ai=CChotLxIqY8rvCsSdiQbYvrC4CYaKicNsyp7zld4Q-quJ5o4OEAEg1fXSFGDDhICAmBigAcuYo8oDyAEJqQLfTI4l0sSwPqgDAcgDywSqBOUBT9CnNRNrx_YaAcHk9w2-3BEdkmwPmVo3uiF7bL0UlVk4oqsH295q8-VU9_D_BwxYb494fOZZtaXAjkohWvI3tcMBuEYiTcmDsdPrMye8j3huZrU6hBVctlRGHrJ-SPXhnAZDzcigIuVhBlo8oM9kmsbV89K70wERzRGCi7P_53vE50qbDcRwJ50Vo0XcaUAiqNbFIA97PjJD3BVxOaPmasSqtuIYtzmYLW_yAkrBVw4KGqlMtl48wcDRjH9op7XP_PGhGYvf7z8yqISdJZo6a8UYy-951xLu-OsrMiWRVfjhHPgs_8AE0eeyx5kEoAYugAed59w1qAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhvYBwDyBwMQqGLSCBIIiOGAEBABGB8yA6qCAToCgECACgHICwHYEwPQFQGAFwGyFxwKGggAEhRwdWItNTQxNDA3MDc3MTQ5ODEyNxgA&sigh=mEMIMP6rgkI&uach_m=[UACH]&template_id=5000 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&slotname=2284788038&adk=1268289179&adf=3442147624&pi=t.ma~as.2284788038&w=970&lmt=1663503292&psa=1&format=970x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550834&bpp=7&bdt=923&idt=241&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=149&ady=293&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7Co%7CeE%7C&abl=NS&pfx=0&fu=0&bc=31&ifi=4&uci=a!4&fsb=1&xpc=KzPttTNn2n&p=https%3A//mahacet.com&dtd=328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'none'; object-src 'none'
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:12 GMT
cache-control: private
X-Firefox-Spdy: h2
www.google.com/pagead/drt/ui
302 Found 0 B URL HTTP/2 www.google.com/pagead/drt/ui
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/si?st=NO_DATA HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:12 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: DSID=NO_DATA; expires=Tue, 20-Sep-2022 20:19:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:12 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:12 GMT
cache-control: private
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/2972962262555746595/downsize_200k_v1?w=600&h=314
200 OK 37 kB URL HTTP/2 tpc.googlesyndication.com/simgad/2972962262555746595/downsize_200k_v1?w=600&h=314
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3\012- data
Hash 2c02dd77b4377a8b3201cb8efdcfdfa0
52ee98bbabf0526697f3d81cc2b47100f4d36423
c7cc5efbfd839c5f5a4805cfec2ee6ba8ba2cddfce0d7ebc73490067d66883c2
GET /simgad/2972962262555746595/downsize_200k_v1?w=600&h=314 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 37162
date: Tue, 20 Sep 2022 19:19:12 GMT
expires: Wed, 20 Sep 2023 19:19:12 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 08:13:10 GMT
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=102123&bid=undefined&aid=undefined
204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=102123&bid=undefined&aid=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=102123&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mahacet.com
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 20 Sep 2022 19:19:13 GMT
access-control-allow-origin: https://mahacet.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 9de412f65500aa740e6bc2606727033d
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20220915&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20220915&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14805), with no line terminators
Hash c32e524d48b5102ae374bca608209074
b7351344b15f0b80162e7b69167da71aea93ee40
51f3805ad2708e36bf42425e248bc83090214e6eb1d8b402334a46c8589594e5
GET /getconfig/sodar?sv=200&tid=gda&tv=r20220915&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mahacet.com
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
cache-control: private
content-length: 11242
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20220915/r20110914/zrt_lookup.html?fsb=1
200 OK 4.4 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20220915/r20110914/zrt_lookup.html?fsb=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash 682bf699cccbc0ff817e1fcb7b95262a
11ad3edf0008f52b733c2d6d7199e1f052318d58
bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
GET /pagead/html/r20220915/r20110914/zrt_lookup.html?fsb=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
date: Tue, 20 Sep 2022 13:49:50 GMT
expires: Tue, 04 Oct 2022 13:49:50 GMT
cache-control: public, max-age=1209600
age: 19763
etag: 9671129459699598864
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=109964780&adf=556213967&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550839&bpp=2&bdt=928&idt=2513&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=1643&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7C%7CeEbr%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=9&uci=a!9&btvi=2&fsb=1&xpc=l8TIaynD2E&p=https%3A//mahacet.com&dtd=2553
200 OK 212 B URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=109964780&adf=556213967&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550839&bpp=2&bdt=928&idt=2513&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=1643&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7C%7CeEbr%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=9&uci=a!9&btvi=2&fsb=1&xpc=l8TIaynD2E&p=https%3A//mahacet.com&dtd=2553
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (436), with no line terminators
Hash 48eb3cbb63f7e043ac5903fff811e8a4
5e6f38869d37e8102c2033f3ff09707939d4b674
9aa8201b13aea00788710f7fb5e5c6c1432324d6b8ed4b3218c8decc654b2fab
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=109964780&adf=556213967&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550839&bpp=2&bdt=928&idt=2513&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=1643&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7C%7CeEbr%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=9&uci=a!9&btvi=2&fsb=1&xpc=l8TIaynD2E&p=https%3A//mahacet.com&dtd=2553 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 212
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:13 GMT
cache-control: private
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Sep 2022 16:23:47 GMT
expires: Mon, 18 Sep 2023 16:23:47 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 183326
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/aframe
200 OK 512 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 9c12524a62fb62c68b2735e2f6580896
b16e0704c937a066f94d71332b6770157dc871b7
19a2c87783bd8a75ecfd794ec7f35f27a76af180b6326453c050729d8ef7b6a5
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 20 Sep 2022 19:19:13 GMT
date: Tue, 20 Sep 2022 19:19:13 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-osqiISil2nHlVC-x0jUzHQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 512
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL HTTP/2 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
File type JSON data\012- , ASCII text
Hash 0517a608635a116d279530f9e79f46c6
d039de7440a05934e6a9f517ef98c460efa701c4
fcdc48636aaf6e5c6123f43decdec565c7a7614a1729283815ecdfb7ae1bef63
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1663701553568
Content-Type: application/json
X-Goog-Visitor-Id: CgtVakRsSjR2TDRPMCiupKiZBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20220918.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1663701551226&flash=0&frm=2&u_tz&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C770%2C433&vis=1&wgl=true&ca_type=image
Content-Length: 10403
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Tue, 20 Sep 2022 19:19:13 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+333; expires=Thu, 19-Sep-2024 19:19:13 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:13 GMT
cache-control: private
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssJw6ZRVXQmD5LNGecLOITjIBoM1X_qokqhbUcldNFzRZ_Akyg0cUhXRtGacRCCgo97-yXjhtIzKK80hb53jaKrJJ6D9ollAj5Q17lHmb6ia0FuOZfw5VLXLD_n_XYjlhgGjPej4EJ0Dswk2Zc_zOMTP_bz1bfxnZ_CHw&sai=AMfl-YSCwc9QilKy_KS8MwHAZqIB_yHDEPALn5VsFMGCqzryjtg0VnUbmIi38sHKlWpfxbdyes7MtY5_2lcOF7L1hcCja5YZqLwYYkDNVResyniZsNalqdyM-cYIAk4GU9bC&sig=Cg0ArKJSzHlN_u6lBOzNEAE&id=lidar2&mcvt=1038&p=0,0,90,728&mtos=1038,1038,1038,1038,1038&tos=1038,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=643801748&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551149&rpt=1336&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssJw6ZRVXQmD5LNGecLOITjIBoM1X_qokqhbUcldNFzRZ_Akyg0cUhXRtGacRCCgo97-yXjhtIzKK80hb53jaKrJJ6D9ollAj5Q17lHmb6ia0FuOZfw5VLXLD_n_XYjlhgGjPej4EJ0Dswk2Zc_zOMTP_bz1bfxnZ_CHw&sai=AMfl-YSCwc9QilKy_KS8MwHAZqIB_yHDEPALn5VsFMGCqzryjtg0VnUbmIi38sHKlWpfxbdyes7MtY5_2lcOF7L1hcCja5YZqLwYYkDNVResyniZsNalqdyM-cYIAk4GU9bC&sig=Cg0ArKJSzHlN_u6lBOzNEAE&id=lidar2&mcvt=1038&p=0,0,90,728&mtos=1038,1038,1038,1038,1038&tos=1038,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=643801748&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551149&rpt=1336&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjssJw6ZRVXQmD5LNGecLOITjIBoM1X_qokqhbUcldNFzRZ_Akyg0cUhXRtGacRCCgo97-yXjhtIzKK80hb53jaKrJJ6D9ollAj5Q17lHmb6ia0FuOZfw5VLXLD_n_XYjlhgGjPej4EJ0Dswk2Zc_zOMTP_bz1bfxnZ_CHw&sai=AMfl-YSCwc9QilKy_KS8MwHAZqIB_yHDEPALn5VsFMGCqzryjtg0VnUbmIi38sHKlWpfxbdyes7MtY5_2lcOF7L1hcCja5YZqLwYYkDNVResyniZsNalqdyM-cYIAk4GU9bC&sig=Cg0ArKJSzHlN_u6lBOzNEAE&id=lidar2&mcvt=1038&p=0,0,90,728&mtos=1038,1038,1038,1038,1038&tos=1038,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=643801748&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551149&rpt=1336&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=mahacet.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=mahacet.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mahacet.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=996803492&adf=3256513307&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550837&bpp=2&bdt=926&idt=469&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=768&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=8&uci=a!8&fsb=1&xpc=m01DpM4euG&p=https%3A//mahacet.com&dtd=611
200 OK 212 B URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=996803492&adf=3256513307&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550837&bpp=2&bdt=926&idt=469&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=768&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=8&uci=a!8&fsb=1&xpc=m01DpM4euG&p=https%3A//mahacet.com&dtd=611
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (436), with no line terminators
Hash d3e87675a13e87798dbe610a550074eb
8a2c39400a640b042bff329bb83236afc0f63e55
749f703ac41ae08600ef32a6078c24ec09dc37c44c56648aa015270286a2e76d
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=996803492&adf=3256513307&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550837&bpp=2&bdt=926&idt=469&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=768&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7Co%7CeE%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=8&uci=a!8&fsb=1&xpc=m01DpM4euG&p=https%3A//mahacet.com&dtd=611 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 212
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:13 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=109964780&adf=556213967&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550839&bpp=2&bdt=928&idt=2513&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=1643&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7C%7CeEbr%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=9&uci=a!9&btvi=2&fsb=1&xpc=l8TIaynD2E&p=https%3A//mahacet.com&dtd=2553
200 OK 212 B URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=109964780&adf=556213967&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550839&bpp=2&bdt=928&idt=2513&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=1643&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7C%7CeEbr%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=9&uci=a!9&btvi=2&fsb=1&xpc=l8TIaynD2E&p=https%3A//mahacet.com&dtd=2553
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (436), with no line terminators
Hash c0f6ea3fd069389c473e80c0b1dd0381
a37f45ec4ae032efc21f50c363ffe81031093a40
65371a31bfcea8c38b4315dfbdf5fd66e373c03256856840d9cf97b143743321
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=250&adk=109964780&adf=556213967&w=300&lmt=1663503292&psa=1&format=300x250&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550839&bpp=2&bdt=928&idt=2513&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250&nras=1&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=942&ady=1643&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=d%7C%7CeEbr%7Cp&abl=XS&pfx=0&fu=0&bc=31&ifi=9&uci=a!9&btvi=2&fsb=1&xpc=l8TIaynD2E&p=https%3A//mahacet.com&dtd=2553 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 212
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:13 GMT
cache-control: private
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/elements/html/interstitial_ad_frame_fy2021.js
200 OK 8.2 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/elements/html/interstitial_ad_frame_fy2021.js
IP
File type ASCII text, with very long lines (1831)
Hash e76efe12d42288eb43b9d82847a260c0
0653502591b0fe9b6740aa7a3bf2d444b06b8203
767ce5178ae6af7c0c778219204969cf0f61ae5316c9302fb2070d44ddd28c32
GET /pagead/js/r20220915/r20110914/elements/html/interstitial_ad_frame_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 8202
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:30:29 GMT
expires: Tue, 04 Oct 2022 18:30:29 GMT
cache-control: public, max-age=1209600
etag: 12420716543898108158
content-type: text/javascript; charset=UTF-8
age: 2924
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=803467372&adf=943920009&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550847&bpp=2&bdt=936&idt=2788&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250%2C300x250%2C1268x939%2C155x600%2C160x600&nras=2&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=842&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CfeE%7C&abl=CF&pfx=0&fu=0&bc=31&ifi=12&uci=a!c&fsb=1&xpc=IC2uBwll8o&p=https%3A//mahacet.com&dtd=2806
200 OK 30 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=803467372&adf=943920009&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550847&bpp=2&bdt=936&idt=2788&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250%2C300x250%2C1268x939%2C155x600%2C160x600&nras=2&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=842&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CfeE%7C&abl=CF&pfx=0&fu=0&bc=31&ifi=12&uci=a!c&fsb=1&xpc=IC2uBwll8o&p=https%3A//mahacet.com&dtd=2806
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (61827)
Hash 08f81763e2ded6e570089319e63d5b10
c563d47fc2e769c3b74d7128ca71d3fb1db0b701
5595b7ec8672e00f97b4d54eb48e585f7aed26c58c94f706bd91342aeda3ab32
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=90&adk=803467372&adf=943920009&w=728&lmt=1663503292&psa=1&format=728x90&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550847&bpp=2&bdt=936&idt=2788&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250%2C300x250%2C1268x939%2C155x600%2C160x600&nras=2&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=842&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CfeE%7C&abl=CF&pfx=0&fu=0&bc=31&ifi=12&uci=a!c&fsb=1&xpc=IC2uBwll8o&p=https%3A//mahacet.com&dtd=2806 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 29985
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:13 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=600&twa=1&adk=1843790409&adf=782179303&w=155&fwrn=4&fwrnh=100&lmt=1663503292&psa=1&format=155x600&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&fwr=0&rh=600&rw=155&wgl=1&dt=1663701550841&bpp=3&bdt=930&idt=2695&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250%2C300x250%2C1268x939&nras=2&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=1113&ady=32&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CfeE%7C&abl=CF&pfx=0&fu=0&bc=31&ifi=10&uci=a!a&fsb=1&xpc=RSsrcahS82&p=https%3A//mahacet.com&dtd=2707
200 OK 30 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=600&twa=1&adk=1843790409&adf=782179303&w=155&fwrn=4&fwrnh=100&lmt=1663503292&psa=1&format=155x600&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&fwr=0&rh=600&rw=155&wgl=1&dt=1663701550841&bpp=3&bdt=930&idt=2695&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250%2C300x250%2C1268x939&nras=2&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=1113&ady=32&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CfeE%7C&abl=CF&pfx=0&fu=0&bc=31&ifi=10&uci=a!a&fsb=1&xpc=RSsrcahS82&p=https%3A//mahacet.com&dtd=2707
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (61931)
Hash 802919f9bc3f6048336d2615b5b010fd
78fc2cc8e8c52949aeea89178a0b85f7ca853d8b
9cd092c12da79f6dac5e9d6177f76fc117ee9a65f6c89aa52495b7a4013da537
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=600&twa=1&adk=1843790409&adf=782179303&w=155&fwrn=4&fwrnh=100&lmt=1663503292&psa=1&format=155x600&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&fwr=0&rh=600&rw=155&wgl=1&dt=1663701550841&bpp=3&bdt=930&idt=2695&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250%2C300x250%2C1268x939&nras=2&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=1113&ady=32&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CfeE%7C&abl=CF&pfx=0&fu=0&bc=31&ifi=10&uci=a!a&fsb=1&xpc=RSsrcahS82&p=https%3A//mahacet.com&dtd=2707 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:13 GMT
server: cafe
content-length: 30018
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:13 GMT
cache-control: private
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsstaJHGHwuJQQ76AjjM0ybqvTuY_l5s9mwbVqQ3zRASoEXDiC79dmQjHROgNXINvdPC4WlGJCo9dc7NUxmGNezScYq6t2vrvtF4n0DOcyLn7z0wQ5TYe74XdCrrejskUQfynFgWDExfaNoOwLxxSgD1ELK7pgkaIKs-7CzA0WX0Sm2oRpaYjza4litNobocgOcTYkvTvs7L2tMc7F9aOqVqRGP4A8HT9sQoZVUA5Igm5-yFiHZnT59oyWz9QqxviwWxr1pbqMVlfbZjxiicDXfB27n-bVm-iSvvJhwvQHfw0ryp4BR-i3sbC1fznJA0XkBDriHuVmQ9JqQQrFeDwqGPDdX9DFKZ8b5COF9JUsVjRMb2ojYllzbnL3PkG8e9_i4qN0KuRz8p6D4RvcviC3HZ9oD8vLlLnHNpJZ3yPWw9EW_GkBcpYRsqMT9vV2RZFdJk_aWvnMUXA25SnaOXLwLmTtQPZDgIUIVhyi3MECBtV-Fsg0h-zZP-4zMOiB3Y251PbgViEyKAq_dHxSALKUuVDzp9U-dzA1xkz_t0cgDignOsIL3cptrLujuSHaK_bMbQGc0FR3NOnhFvGEK_jzj96JLRIem79k9UWoE2q-PiIF69xWF6gZPIVSnnsBHfTA88rnCM65mIop7r69JKiIJt-9n_LLZHaE5JWulbDp0znULRMo7fllLaEnEM0mKOeyGc3kyTF3bwh9BlD-wMfj0YBjC8etMQP24-6RFfEl6OCXj0IC8ppha5LyRIKRGlzMHT9LjWLeu75pD3ofw3PACNIQwKp5fOMFRfyfOQ_aepPyatWGQSvH-4e1ZNaupjqfrBqCEmvq3YdtBVx575kfFIU6enpjSN1UKHm4FE4s6LSzZwij1WV5xQng7yaIQwdrArDJ1gLBn9sZ3kdFAAq54APGGhhVwKrkY30FMBHjLB4e4GNNGD_9yqUtyHaGuttVMVk03Xeji2&sai=AMfl-YSJLpQZazj-ySldDt6F2RvrfmdahidcR7UN_RjxIX2CGU4urQXGdapwjrCAkwJxdiI9VsAERDqWgeo9B7NWt3MfRAd64n8sPKEuhSc07xbswJcT1bA6JlCc7Bk5TmfwrKa4mRY_b_GEuiv8vQ&sig=Cg0ArKJSzO4JS-H_2U-bEAE&id=lidar2&mcvt=1304&p=0,0,90,728&mtos=1304,1304,1304,1304,1304&tos=1304,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=850080377&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551154&rpt=1458&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsstaJHGHwuJQQ76AjjM0ybqvTuY_l5s9mwbVqQ3zRASoEXDiC79dmQjHROgNXINvdPC4WlGJCo9dc7NUxmGNezScYq6t2vrvtF4n0DOcyLn7z0wQ5TYe74XdCrrejskUQfynFgWDExfaNoOwLxxSgD1ELK7pgkaIKs-7CzA0WX0Sm2oRpaYjza4litNobocgOcTYkvTvs7L2tMc7F9aOqVqRGP4A8HT9sQoZVUA5Igm5-yFiHZnT59oyWz9QqxviwWxr1pbqMVlfbZjxiicDXfB27n-bVm-iSvvJhwvQHfw0ryp4BR-i3sbC1fznJA0XkBDriHuVmQ9JqQQrFeDwqGPDdX9DFKZ8b5COF9JUsVjRMb2ojYllzbnL3PkG8e9_i4qN0KuRz8p6D4RvcviC3HZ9oD8vLlLnHNpJZ3yPWw9EW_GkBcpYRsqMT9vV2RZFdJk_aWvnMUXA25SnaOXLwLmTtQPZDgIUIVhyi3MECBtV-Fsg0h-zZP-4zMOiB3Y251PbgViEyKAq_dHxSALKUuVDzp9U-dzA1xkz_t0cgDignOsIL3cptrLujuSHaK_bMbQGc0FR3NOnhFvGEK_jzj96JLRIem79k9UWoE2q-PiIF69xWF6gZPIVSnnsBHfTA88rnCM65mIop7r69JKiIJt-9n_LLZHaE5JWulbDp0znULRMo7fllLaEnEM0mKOeyGc3kyTF3bwh9BlD-wMfj0YBjC8etMQP24-6RFfEl6OCXj0IC8ppha5LyRIKRGlzMHT9LjWLeu75pD3ofw3PACNIQwKp5fOMFRfyfOQ_aepPyatWGQSvH-4e1ZNaupjqfrBqCEmvq3YdtBVx575kfFIU6enpjSN1UKHm4FE4s6LSzZwij1WV5xQng7yaIQwdrArDJ1gLBn9sZ3kdFAAq54APGGhhVwKrkY30FMBHjLB4e4GNNGD_9yqUtyHaGuttVMVk03Xeji2&sai=AMfl-YSJLpQZazj-ySldDt6F2RvrfmdahidcR7UN_RjxIX2CGU4urQXGdapwjrCAkwJxdiI9VsAERDqWgeo9B7NWt3MfRAd64n8sPKEuhSc07xbswJcT1bA6JlCc7Bk5TmfwrKa4mRY_b_GEuiv8vQ&sig=Cg0ArKJSzO4JS-H_2U-bEAE&id=lidar2&mcvt=1304&p=0,0,90,728&mtos=1304,1304,1304,1304,1304&tos=1304,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=850080377&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551154&rpt=1458&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsstaJHGHwuJQQ76AjjM0ybqvTuY_l5s9mwbVqQ3zRASoEXDiC79dmQjHROgNXINvdPC4WlGJCo9dc7NUxmGNezScYq6t2vrvtF4n0DOcyLn7z0wQ5TYe74XdCrrejskUQfynFgWDExfaNoOwLxxSgD1ELK7pgkaIKs-7CzA0WX0Sm2oRpaYjza4litNobocgOcTYkvTvs7L2tMc7F9aOqVqRGP4A8HT9sQoZVUA5Igm5-yFiHZnT59oyWz9QqxviwWxr1pbqMVlfbZjxiicDXfB27n-bVm-iSvvJhwvQHfw0ryp4BR-i3sbC1fznJA0XkBDriHuVmQ9JqQQrFeDwqGPDdX9DFKZ8b5COF9JUsVjRMb2ojYllzbnL3PkG8e9_i4qN0KuRz8p6D4RvcviC3HZ9oD8vLlLnHNpJZ3yPWw9EW_GkBcpYRsqMT9vV2RZFdJk_aWvnMUXA25SnaOXLwLmTtQPZDgIUIVhyi3MECBtV-Fsg0h-zZP-4zMOiB3Y251PbgViEyKAq_dHxSALKUuVDzp9U-dzA1xkz_t0cgDignOsIL3cptrLujuSHaK_bMbQGc0FR3NOnhFvGEK_jzj96JLRIem79k9UWoE2q-PiIF69xWF6gZPIVSnnsBHfTA88rnCM65mIop7r69JKiIJt-9n_LLZHaE5JWulbDp0znULRMo7fllLaEnEM0mKOeyGc3kyTF3bwh9BlD-wMfj0YBjC8etMQP24-6RFfEl6OCXj0IC8ppha5LyRIKRGlzMHT9LjWLeu75pD3ofw3PACNIQwKp5fOMFRfyfOQ_aepPyatWGQSvH-4e1ZNaupjqfrBqCEmvq3YdtBVx575kfFIU6enpjSN1UKHm4FE4s6LSzZwij1WV5xQng7yaIQwdrArDJ1gLBn9sZ3kdFAAq54APGGhhVwKrkY30FMBHjLB4e4GNNGD_9yqUtyHaGuttVMVk03Xeji2&sai=AMfl-YSJLpQZazj-ySldDt6F2RvrfmdahidcR7UN_RjxIX2CGU4urQXGdapwjrCAkwJxdiI9VsAERDqWgeo9B7NWt3MfRAd64n8sPKEuhSc07xbswJcT1bA6JlCc7Bk5TmfwrKa4mRY_b_GEuiv8vQ&sig=Cg0ArKJSzO4JS-H_2U-bEAE&id=lidar2&mcvt=1304&p=0,0,90,728&mtos=1304,1304,1304,1304,1304&tos=1304,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=850080377&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551154&rpt=1458&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuGlAWSY0y022V8uMeZQSOu71s8DEVSGj2pnAw-Em9A8fOdPVT9esxsd1tFt3oP22Skv9OCRFRqZrNVWWhpePu2yzlSw4p4VdFRrvwu93Xh-Yc5PwHgkSgUOLN-FVJFHRf0829ddMluEP5mtiJI9pZg3GnSqRe9ykeZYU8PljTnSXFWgWDflahRViTD-VeZ1wfZMaZDcXiZ-ddGYtibQyPEAcOPT5Gp6chDTp5zO3JsdAqShZgZzH52HBRi_YRodO570nWVtByd7prvb8xcMglDecTkI94EFSAeWy0StFU-0s9TImxpWbTSTALbW993HkChh4PNzyrK00zDx949nm12SL05_O1t7OPIdWe1kAYWofCyH7FrA_SPfKMqyIa8tr3TpQMeakp9UEibG2JuxrHHqS2gSD-6jFTme1eyQLfSG09YLma3UP_VFtb9ElwFa_v-950HCwiHoFAuk2Z4lJAkepjyribwdcVUkoRQhy-2yli5PsEcauK8CSS-2UtqmgeYh8BlKoQ626m4E8byTSB_GzS7qWtmddf7z0OSN-tB3mimBGNQ9RdpALoojzU75aQG_mcj-BnbGPRqXug2eSj1G1oEnkt5W427DurOiffweF2cnZ80IQDegRLLTUJiszjft9Y5mLaYkaEgSRKD7ZfpmeSZCryvK2k1GeCASNZVWEaUfb_sg4ivygn3V5_4Wj92L8jxvvQzBONF3RQoeJWlOAzgMcueihbs1_RIm3Mm353IcnMXEqO6-PrRspxj9Cou7u2x0mS4UD9Ftz6vlMv229q5x1vp7sULM17HfC1OWzJYrTzOegLHM1NI_5i0-zZqrxGIdf7ZCnBQqA4E3w2WmF-ujfm2JfILhw7DF5UuYyB_1GZuUTidiK5GhZj8v1kSTlphDy919xCQVyNjP8dBl-adx_Hdc9El-yBkkUegNqu56veiZaCDBF0WKpQmfmJm0ceEGUMIQg&sai=AMfl-YTfojMeMCpIIjg3iYAPaaKkgPTVT9Ilqgry27MEmugUyFkTLGa-_Kyl4OZWppvIknbvBVTaGZL0p3WFJgOu8Iv0ieZ_wMGQa2YNoGG-xFiPFRQqcVMXG1W_2RkQB96XdGS-Gx-_KfHmn_SiCg&sig=Cg0ArKJSzBoBQR59XOAAEAE&id=lidar2&mcvt=1336&p=0,0,90,728&mtos=1336,1336,1336,1336,1336&tos=1336,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1646902164&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551167&rpt=1482&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuGlAWSY0y022V8uMeZQSOu71s8DEVSGj2pnAw-Em9A8fOdPVT9esxsd1tFt3oP22Skv9OCRFRqZrNVWWhpePu2yzlSw4p4VdFRrvwu93Xh-Yc5PwHgkSgUOLN-FVJFHRf0829ddMluEP5mtiJI9pZg3GnSqRe9ykeZYU8PljTnSXFWgWDflahRViTD-VeZ1wfZMaZDcXiZ-ddGYtibQyPEAcOPT5Gp6chDTp5zO3JsdAqShZgZzH52HBRi_YRodO570nWVtByd7prvb8xcMglDecTkI94EFSAeWy0StFU-0s9TImxpWbTSTALbW993HkChh4PNzyrK00zDx949nm12SL05_O1t7OPIdWe1kAYWofCyH7FrA_SPfKMqyIa8tr3TpQMeakp9UEibG2JuxrHHqS2gSD-6jFTme1eyQLfSG09YLma3UP_VFtb9ElwFa_v-950HCwiHoFAuk2Z4lJAkepjyribwdcVUkoRQhy-2yli5PsEcauK8CSS-2UtqmgeYh8BlKoQ626m4E8byTSB_GzS7qWtmddf7z0OSN-tB3mimBGNQ9RdpALoojzU75aQG_mcj-BnbGPRqXug2eSj1G1oEnkt5W427DurOiffweF2cnZ80IQDegRLLTUJiszjft9Y5mLaYkaEgSRKD7ZfpmeSZCryvK2k1GeCASNZVWEaUfb_sg4ivygn3V5_4Wj92L8jxvvQzBONF3RQoeJWlOAzgMcueihbs1_RIm3Mm353IcnMXEqO6-PrRspxj9Cou7u2x0mS4UD9Ftz6vlMv229q5x1vp7sULM17HfC1OWzJYrTzOegLHM1NI_5i0-zZqrxGIdf7ZCnBQqA4E3w2WmF-ujfm2JfILhw7DF5UuYyB_1GZuUTidiK5GhZj8v1kSTlphDy919xCQVyNjP8dBl-adx_Hdc9El-yBkkUegNqu56veiZaCDBF0WKpQmfmJm0ceEGUMIQg&sai=AMfl-YTfojMeMCpIIjg3iYAPaaKkgPTVT9Ilqgry27MEmugUyFkTLGa-_Kyl4OZWppvIknbvBVTaGZL0p3WFJgOu8Iv0ieZ_wMGQa2YNoGG-xFiPFRQqcVMXG1W_2RkQB96XdGS-Gx-_KfHmn_SiCg&sig=Cg0ArKJSzBoBQR59XOAAEAE&id=lidar2&mcvt=1336&p=0,0,90,728&mtos=1336,1336,1336,1336,1336&tos=1336,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1646902164&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551167&rpt=1482&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsuGlAWSY0y022V8uMeZQSOu71s8DEVSGj2pnAw-Em9A8fOdPVT9esxsd1tFt3oP22Skv9OCRFRqZrNVWWhpePu2yzlSw4p4VdFRrvwu93Xh-Yc5PwHgkSgUOLN-FVJFHRf0829ddMluEP5mtiJI9pZg3GnSqRe9ykeZYU8PljTnSXFWgWDflahRViTD-VeZ1wfZMaZDcXiZ-ddGYtibQyPEAcOPT5Gp6chDTp5zO3JsdAqShZgZzH52HBRi_YRodO570nWVtByd7prvb8xcMglDecTkI94EFSAeWy0StFU-0s9TImxpWbTSTALbW993HkChh4PNzyrK00zDx949nm12SL05_O1t7OPIdWe1kAYWofCyH7FrA_SPfKMqyIa8tr3TpQMeakp9UEibG2JuxrHHqS2gSD-6jFTme1eyQLfSG09YLma3UP_VFtb9ElwFa_v-950HCwiHoFAuk2Z4lJAkepjyribwdcVUkoRQhy-2yli5PsEcauK8CSS-2UtqmgeYh8BlKoQ626m4E8byTSB_GzS7qWtmddf7z0OSN-tB3mimBGNQ9RdpALoojzU75aQG_mcj-BnbGPRqXug2eSj1G1oEnkt5W427DurOiffweF2cnZ80IQDegRLLTUJiszjft9Y5mLaYkaEgSRKD7ZfpmeSZCryvK2k1GeCASNZVWEaUfb_sg4ivygn3V5_4Wj92L8jxvvQzBONF3RQoeJWlOAzgMcueihbs1_RIm3Mm353IcnMXEqO6-PrRspxj9Cou7u2x0mS4UD9Ftz6vlMv229q5x1vp7sULM17HfC1OWzJYrTzOegLHM1NI_5i0-zZqrxGIdf7ZCnBQqA4E3w2WmF-ujfm2JfILhw7DF5UuYyB_1GZuUTidiK5GhZj8v1kSTlphDy919xCQVyNjP8dBl-adx_Hdc9El-yBkkUegNqu56veiZaCDBF0WKpQmfmJm0ceEGUMIQg&sai=AMfl-YTfojMeMCpIIjg3iYAPaaKkgPTVT9Ilqgry27MEmugUyFkTLGa-_Kyl4OZWppvIknbvBVTaGZL0p3WFJgOu8Iv0ieZ_wMGQa2YNoGG-xFiPFRQqcVMXG1W_2RkQB96XdGS-Gx-_KfHmn_SiCg&sig=Cg0ArKJSzBoBQR59XOAAEAE&id=lidar2&mcvt=1336&p=0,0,90,728&mtos=1336,1336,1336,1336,1336&tos=1336,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1646902164&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551167&rpt=1482&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20220915&jk=4446043975581509&rc=
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20220915&jk=4446043975581509&rc=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&li=gda_r20220915&jk=4446043975581509&rc= HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:14 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstWeIMWr7sUgEx1D4B3pv4uIekppokP05KoRzi0sFh_yRuQ5W4DCjlpTGoF_3y8gu2jdYp11pyyXuiLtyOG5Q99eJGs3kORbqUWMnMm0o74iUdGaQtr-EngeuO8OFfnNnRKaVgGL7WhwQFLQycK5gts3jbilY6aUe7PjQtUA521ymMKKVneU4RoCHHAC4fdo8jWSUYOjmwKf8kwKip8h8tNZFIoY2JaSy2OD0t0VPEaip10ljWVfa_oevaY-9hogC-DoN7kReIGLsIRZu_-3txrpObc3D1wWS_93tYqXEsnaWKT2y3dcVFuGdXB7yej7P6qFDbD9gggYO8hJsklqx996JRbXl0QUDXN8iJ5Gp9i-8aKOO6yr9MZtnA05nFs4wxucUnYu5NB7l0CQ05l6K0aC_5OVKQzplMaT2qrR40I_0YYvWpuiCfmCBSreCR7KaKy2x3b_uH8I3Wr-0zlstZOIfl5qpkEqE4jLg5sywgRCob9XzSQZLXqdsvc5Ud3W3IlT7PqZjc5bL-D6HwfsJ6NRDn7Y6sT-1WlEJTxqkKbr6CRkZsXSTcuwYaqHCOZDNgRaSrOlQcMdnAw7nt6x7RFQ7XSN3T_QtVKNwb6hQz-qyUlRDvg4fJsL2eLn6z7ZSeQoFXXlVdbpefW9VC9PuXXGhDfpUfgdXldU5w_WcXvU57Ep8pPXXaK2fLLOC8W8dFnngbnJ2lc-yoGr0qq7UVbcedKl42pEWRYMieDWg8p92pLupQONV9sFQ8Vx1i6SD4KoCCswZ37-GtpCRqggsE6PTWy6AjqfbqitwSEldl34XEOz-e-espk9W-Y_iwJEF33NFh8Kz4NuPMPE07O-R6CvPE4KuvrB9ve5eO08HmM4e3mHod18u3QRj7gDQui3SF9QNwLk8Ldk2nTRyBg1XMXeZ2a6-Cxwid7xCgvpc0KqlDKIRqJeCC-EmiUSrL5ukvgFXoZnoFnxw&sai=AMfl-YTVrG9gl-fw3sToZ9skBUMXIxsgqF-6CpdleW8KfVmc-EfG8khw-Z8Ox5GMEHqIM90C_xQ4775ms872gs4YUiYcfXeqTk-LIJdWZjwWIKnf3k6_wkvqfSAjR4Ar_j2U-MbjPA_wOAChyeeo7A&sig=Cg0ArKJSzJxn0h7Ed5_CEAE&id=lidar2&mcvt=1370&p=0,0,90,728&mtos=1370,1370,1370,1370,1370&tos=1370,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=2210784318&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551173&rpt=1459&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstWeIMWr7sUgEx1D4B3pv4uIekppokP05KoRzi0sFh_yRuQ5W4DCjlpTGoF_3y8gu2jdYp11pyyXuiLtyOG5Q99eJGs3kORbqUWMnMm0o74iUdGaQtr-EngeuO8OFfnNnRKaVgGL7WhwQFLQycK5gts3jbilY6aUe7PjQtUA521ymMKKVneU4RoCHHAC4fdo8jWSUYOjmwKf8kwKip8h8tNZFIoY2JaSy2OD0t0VPEaip10ljWVfa_oevaY-9hogC-DoN7kReIGLsIRZu_-3txrpObc3D1wWS_93tYqXEsnaWKT2y3dcVFuGdXB7yej7P6qFDbD9gggYO8hJsklqx996JRbXl0QUDXN8iJ5Gp9i-8aKOO6yr9MZtnA05nFs4wxucUnYu5NB7l0CQ05l6K0aC_5OVKQzplMaT2qrR40I_0YYvWpuiCfmCBSreCR7KaKy2x3b_uH8I3Wr-0zlstZOIfl5qpkEqE4jLg5sywgRCob9XzSQZLXqdsvc5Ud3W3IlT7PqZjc5bL-D6HwfsJ6NRDn7Y6sT-1WlEJTxqkKbr6CRkZsXSTcuwYaqHCOZDNgRaSrOlQcMdnAw7nt6x7RFQ7XSN3T_QtVKNwb6hQz-qyUlRDvg4fJsL2eLn6z7ZSeQoFXXlVdbpefW9VC9PuXXGhDfpUfgdXldU5w_WcXvU57Ep8pPXXaK2fLLOC8W8dFnngbnJ2lc-yoGr0qq7UVbcedKl42pEWRYMieDWg8p92pLupQONV9sFQ8Vx1i6SD4KoCCswZ37-GtpCRqggsE6PTWy6AjqfbqitwSEldl34XEOz-e-espk9W-Y_iwJEF33NFh8Kz4NuPMPE07O-R6CvPE4KuvrB9ve5eO08HmM4e3mHod18u3QRj7gDQui3SF9QNwLk8Ldk2nTRyBg1XMXeZ2a6-Cxwid7xCgvpc0KqlDKIRqJeCC-EmiUSrL5ukvgFXoZnoFnxw&sai=AMfl-YTVrG9gl-fw3sToZ9skBUMXIxsgqF-6CpdleW8KfVmc-EfG8khw-Z8Ox5GMEHqIM90C_xQ4775ms872gs4YUiYcfXeqTk-LIJdWZjwWIKnf3k6_wkvqfSAjR4Ar_j2U-MbjPA_wOAChyeeo7A&sig=Cg0ArKJSzJxn0h7Ed5_CEAE&id=lidar2&mcvt=1370&p=0,0,90,728&mtos=1370,1370,1370,1370,1370&tos=1370,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=2210784318&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551173&rpt=1459&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjstWeIMWr7sUgEx1D4B3pv4uIekppokP05KoRzi0sFh_yRuQ5W4DCjlpTGoF_3y8gu2jdYp11pyyXuiLtyOG5Q99eJGs3kORbqUWMnMm0o74iUdGaQtr-EngeuO8OFfnNnRKaVgGL7WhwQFLQycK5gts3jbilY6aUe7PjQtUA521ymMKKVneU4RoCHHAC4fdo8jWSUYOjmwKf8kwKip8h8tNZFIoY2JaSy2OD0t0VPEaip10ljWVfa_oevaY-9hogC-DoN7kReIGLsIRZu_-3txrpObc3D1wWS_93tYqXEsnaWKT2y3dcVFuGdXB7yej7P6qFDbD9gggYO8hJsklqx996JRbXl0QUDXN8iJ5Gp9i-8aKOO6yr9MZtnA05nFs4wxucUnYu5NB7l0CQ05l6K0aC_5OVKQzplMaT2qrR40I_0YYvWpuiCfmCBSreCR7KaKy2x3b_uH8I3Wr-0zlstZOIfl5qpkEqE4jLg5sywgRCob9XzSQZLXqdsvc5Ud3W3IlT7PqZjc5bL-D6HwfsJ6NRDn7Y6sT-1WlEJTxqkKbr6CRkZsXSTcuwYaqHCOZDNgRaSrOlQcMdnAw7nt6x7RFQ7XSN3T_QtVKNwb6hQz-qyUlRDvg4fJsL2eLn6z7ZSeQoFXXlVdbpefW9VC9PuXXGhDfpUfgdXldU5w_WcXvU57Ep8pPXXaK2fLLOC8W8dFnngbnJ2lc-yoGr0qq7UVbcedKl42pEWRYMieDWg8p92pLupQONV9sFQ8Vx1i6SD4KoCCswZ37-GtpCRqggsE6PTWy6AjqfbqitwSEldl34XEOz-e-espk9W-Y_iwJEF33NFh8Kz4NuPMPE07O-R6CvPE4KuvrB9ve5eO08HmM4e3mHod18u3QRj7gDQui3SF9QNwLk8Ldk2nTRyBg1XMXeZ2a6-Cxwid7xCgvpc0KqlDKIRqJeCC-EmiUSrL5ukvgFXoZnoFnxw&sai=AMfl-YTVrG9gl-fw3sToZ9skBUMXIxsgqF-6CpdleW8KfVmc-EfG8khw-Z8Ox5GMEHqIM90C_xQ4775ms872gs4YUiYcfXeqTk-LIJdWZjwWIKnf3k6_wkvqfSAjR4Ar_j2U-MbjPA_wOAChyeeo7A&sig=Cg0ArKJSzJxn0h7Ed5_CEAE&id=lidar2&mcvt=1370&p=0,0,90,728&mtos=1370,1370,1370,1370,1370&tos=1370,0,0,0,0&v=20220919&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=2210784318&rs=2&la=0&cr=0&vs=4&r=v&rst=1663701551173&rpt=1459&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 20 Sep 2022 19:19:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=600&adk=1520397898&adf=3222070930&w=160&lmt=1663503292&psa=1&format=160x600&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550845&bpp=2&bdt=935&idt=2743&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250%2C300x250%2C1268x939%2C155x600&nras=2&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=0&ady=32&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CfeE%7C&abl=CF&pfx=0&fu=0&bc=31&ifi=11&uci=a!b&fsb=1&xpc=4brL0TBGTh&p=https%3A//mahacet.com&dtd=2753
200 OK 32 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5414070771498127&output=html&h=600&adk=1520397898&adf=3222070930&w=160&lmt=1663503292&psa=1&format=160x600&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550845&bpp=2&bdt=935&idt=2743&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250%2C300x250%2C1268x939%2C155x600&nras=2&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=0&ady=32&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CfeE%7C&abl=CF&pfx=0&fu=0&bc=31&ifi=11&uci=a!b&fsb=1&xpc=4brL0TBGTh&p=https%3A//mahacet.com&dtd=2753
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Hash 0fcb059f271e086c1a1e2a25ba6ea519
6bdce0b0994deb36e514acad47614768f4063488
17d5ecd51c47211dd69533c09548f37085647b2176ded8c69528c84bc14e35ff
GET /pagead/ads?client=ca-pub-5414070771498127&output=html&h=600&adk=1520397898&adf=3222070930&w=160&lmt=1663503292&psa=1&format=160x600&url=https%3A%2F%2Fmahacet.com%2Foffers-inline.html%23loaded&wgl=1&dt=1663701550845&bpp=2&bdt=935&idt=2743&shv=r20220915&mjsv=m202209080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9a288f6d575bb406-2204778b28ce00f0%3AT%3D1663701547%3ART%3D1663701547%3AS%3DALNI_MaLiozAjH8lSxbedNnTC0fTMRapDA&prev_fmts=0x0%2C728x90%2C728x90%2C970x250%2C728x90%2C728x90%2C468x60%2C300x250%2C300x250%2C1268x939%2C155x600&nras=2&correlator=3546646937555&frm=20&pv=1&ga_vid=1566305660.1663701547&ga_sid=1663701551&ga_hid=362576593&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=0&ady=32&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069632%2C42531706%2C21066429%2C44770766%2C31067825&oid=2&psts=APxP-9Bs-IL0tqIOoWjlFWvo5xQ8EgNz5F7ZmBj5BQJP-1krftbEnpbum10e1azI3G5U-YKzffsFLFOY-fZH3ws%2CAPxP-9A2ZXTs3vsROak7qFqxlbUEUOs4a3IvAsJK47WLeszXvl6sG4utQQZg6PofQwOdKdLt8Ehg_c3OFXOv8eQp%2CAPxP-9C2RLG-xblHHKAOiLqjndrx6xwyUeLjCkUUpo0hB9Ta9rqecl7vFLv2ddyrxjEqbVlnznusPw9Vk-WJgTiJcw%2CAPxP-9Ap8lVkrqwJY9hD1Lg1SVtUhkQ9aLX8okbTaikSFfCEzLsAOI2-vZHeRreB4JN7hPHg2JGgFGQIL_CGC_jw%2CAPxP-9CTYZH0re4HiKVEcAq__qq3ulyXdM318sBL-YjOAjYWIUPPeuIruZBYT3-lPMsh_PpCPnzvPhWCoA1YmgY&pvsid=4446043975581509&tmod=1168685723&nvt=2&eae=0&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CfeE%7C&abl=CF&pfx=0&fu=0&bc=31&ifi=11&uci=a!b&fsb=1&xpc=4brL0TBGTh&p=https%3A//mahacet.com&dtd=2753 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Tue, 20 Sep 2022 19:19:14 GMT
server: cafe
content-length: 31911
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 19:34:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:14 GMT
cache-control: private
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
200 OK 813 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
IP
Hash 4eab06ddaa9ffac5cad935766fae3c12
fa06c9e7cc1c69fb275e07be4ca7f384449dc0e5
20593f70c2161f67d7f0e57a567f7ea134646afd9596b13b3856257463ff167b
GET /css2?family=Roboto:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Sep 2022 19:19:13 GMT
date: Tue, 20 Sep 2022 19:19:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
200 OK 604 B URL HTTP/2 www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 7bd42e5a35b5fb3ff852d6ea9191ca83
8a141eb392a05a2dea3dcd83b97940ef70a81ebc
5c4a713ee4250851232be9f9f68d41586be39b299528cfc7266e0b0e7e582e1b
GET /images/icons/material/system/2x/settings_grey600_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 16:51:40 GMT
expires: Wed, 20 Sep 2023 16:51:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
age: 8854
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1624)
Hash 85a90b8e0126b27c0822c49645a463df
45792c551fabfa14db90396c2c34337929011a3b
13fe815828a5dc11870c98db4957f2f59aaf7e0eaec4028d3d88fb4b6e82588e
GET /pagead/js/r20220915/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9550
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:32 GMT
expires: Tue, 04 Oct 2022 18:58:32 GMT
cache-control: public, max-age=1209600
etag: 715955199520789971
content-type: text/javascript; charset=UTF-8
age: 1242
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1494)
Hash c6ef0dcf21169e17aaffa059d38c2d49
2be7fa5127d37589157427293c2acededdbc009c
a2734b2074e51f52a7e9c604170acd71b311146d99d1640192f015f070b7df7f
GET /pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7552
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 1588701280721430806
content-type: text/javascript; charset=UTF-8
age: 890
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 44 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash 1191238e4518bf6ffe3de5bd10369470
477feae219fa11d8f0404812eb1eeb62cc40cbda
e68823228e0f39a3ed549cae9e5a77dc0a56247eee02b3ea919a8da4a14a3086
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44544
date: Tue, 20 Sep 2022 19:19:14 GMT
expires: Tue, 20 Sep 2022 19:19:14 GMT
cache-control: private, max-age=3000
etag: "1663587528796173"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1624)
Hash 85a90b8e0126b27c0822c49645a463df
45792c551fabfa14db90396c2c34337929011a3b
13fe815828a5dc11870c98db4957f2f59aaf7e0eaec4028d3d88fb4b6e82588e
GET /pagead/js/r20220915/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9550
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:32 GMT
expires: Tue, 04 Oct 2022 18:58:32 GMT
cache-control: public, max-age=1209600
etag: 715955199520789971
content-type: text/javascript; charset=UTF-8
age: 1242
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1494)
Hash c6ef0dcf21169e17aaffa059d38c2d49
2be7fa5127d37589157427293c2acededdbc009c
a2734b2074e51f52a7e9c604170acd71b311146d99d1640192f015f070b7df7f
GET /pagead/js/r20220915/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7552
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 1588701280721430806
content-type: text/javascript; charset=UTF-8
age: 890
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 44 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash 1191238e4518bf6ffe3de5bd10369470
477feae219fa11d8f0404812eb1eeb62cc40cbda
e68823228e0f39a3ed549cae9e5a77dc0a56247eee02b3ea919a8da4a14a3086
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44544
date: Tue, 20 Sep 2022 19:19:14 GMT
expires: Tue, 20 Sep 2022 19:19:14 GMT
cache-control: private, max-age=3000
etag: "1663587528796173"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A400%2C700
200 OK 593 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A400%2C700
IP
Hash 7b6c2a26085deda787fc946f1fc5f5db
cdf77d71bc1da1958e07d7667f77a4fcb0dadd36
11ccaeea764811a3e6b17d618775cc9840132fddeac4f70a85c72c23e4971a26
GET /css?family=Roboto%3A400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Sep 2022 19:19:11 GMT
date: Tue, 20 Sep 2022 19:19:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL HTTP/2 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
File type JSON data\012- , ASCII text
Hash 0517a608635a116d279530f9e79f46c6
d039de7440a05934e6a9f517ef98c460efa701c4
fcdc48636aaf6e5c6123f43decdec565c7a7614a1729283815ecdfb7ae1bef63
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1663701554357
Content-Type: application/json
X-Goog-Visitor-Id: CgtVakRsSjR2TDRPMCiupKiZBg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20220918.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1663701550950&flash=0&frm=2&u_tz&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C770%2C433&vis=1&wgl=true&ca_type=image
Content-Length: 505
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Tue, 20 Sep 2022 19:19:14 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+151; expires=Thu, 19-Sep-2024 19:19:14 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 20 Sep 2022 19:19:14 GMT
cache-control: private
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A400%2C700
200 OK 635 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A400%2C700
IP
Hash 70fc4df100116ae587c5966d8a6bab82
2f86b3f325dc4d0c77384a161ef2638cdcb123f3
5c4b632fb35dbc66ab5f9ff8ad7b044540806b39aa2c5e56bf565923ab055f60
GET /css?family=Roboto%3A400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Sep 2022 19:19:14 GMT
date: Tue, 20 Sep 2022 19:19:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
200 OK 875 B URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
IP
File type ASCII text, with very long lines (748)
Hash 7f017195be529ea58c3ab78d8dc1be22
d2a8f25d05226f8b59f74573f2509612c00710f9
59acc2605c947c7e98d070701e01bc7813688e81ad022192bb5a9311e799aa24
GET /pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 875
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 16974406330603315520
content-type: text/javascript; charset=UTF-8
age: 890
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
200 OK 1.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/window_focus_fy2021.js
IP
File type ASCII text, with very long lines (1120)
Hash 80cd5cb3c635786273462df0f5f46e1a
419d5c86598430982672063ef04bb4966c94b9e8
f7f4c535ed4b9713150261c1c37ad1c2a883d08aef0ed2d6ce38736dd28d7301
GET /pagead/js/r20220915/r20110914/client/window_focus_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1359
x-xss-protection: 0
date: Tue, 20 Sep 2022 18:58:45 GMT
expires: Tue, 04 Oct 2022 18:58:45 GMT
cache-control: public, max-age=1209600
etag: 1484984001845508991
content-type: text/javascript; charset=UTF-8
age: 1229
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/2403938183095566627/6592766407814317453
200 OK 31 kB URL HTTP/2 tpc.googlesyndication.com/simgad/2403938183095566627/6592766407814317453
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x300, components 3\012- data
Hash 78e43bbce3bd07ed97f2059421216d4f
2b12403bc4d6d02668c54b35e5caee1a170c6e40
45552c82a9c6e9939cd43219a71e67a64c0c181975ed2cce43938c5ecc97396e
GET /simgad/2403938183095566627/6592766407814317453 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 31352
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 12:37:21 GMT
expires: Thu, 14 Sep 2023 12:37:21 GMT
cache-control: public, max-age=31536000
age: 542513
last-modified: Tue, 01 Mar 2022 11:34:22 GMT
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
200 OK 14 kB URL HTTP/2 fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
IP
File type ASCII text, with very long lines (1792)
Hash aa7228394732342c9bd941640cd64d89
2724d0994d34f577e8bed13bf6a17d7df62fb698
24cc7751e67269645c96675e319936ac62a76badde27dc16c4a4d8ae644a0abf
GET /css?family=Google%20Sans%3A400%2C500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Sep 2022 19:19:07 GMT
date: Tue, 20 Sep 2022 19:19:07 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/17794363475189954975/downsize_200k_v1?w=100&h=100
200 OK 4.0 kB URL HTTP/2 tpc.googlesyndication.com/simgad/17794363475189954975/downsize_200k_v1?w=100&h=100
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 44545cc3b109bd30aa9c8c6a1012a077
fe3db1b766e428fa55b531d05a2bf4c42ea13432
8a336e01bfd452ac6639852be75b602011311a29b22c7fdc5d10648f5332c4e8
GET /simgad/17794363475189954975/downsize_200k_v1?w=100&h=100 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 4032
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 15:52:37 GMT
expires: Wed, 20 Sep 2023 15:52:37 GMT
cache-control: public, max-age=31536000
age: 12397
last-modified: Tue, 01 Mar 2022 11:06:15 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaRwJC1QCpbjJMpfSR-20egw6-cCXHeHZShE9HPGLbERthukUw3SXoDkSA2vfw5VSUIOpSvGtHp0cAI0nx0VPrGPpR3MAw
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaRwJC1QCpbjJMpfSR-20egw6-cCXHeHZShE9HPGLbERthukUw3SXoDkSA2vfw5VSUIOpSvGtHp0cAI0nx0VPrGPpR3MAw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaRwJC1QCpbjJMpfSR-20egw6-cCXHeHZShE9HPGLbERthukUw3SXoDkSA2vfw5VSUIOpSvGtHp0cAI0nx0VPrGPpR3MAw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:14 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019
IP
File type C++ source, ASCII text, with very long lines (1792)
Hash dc869492c13c6684ab4eb7bf97d94e03
12c6685c433c3eb68db7babb6074f65a86b81350
7e6f05d389449ba380ad360c900ee4e5d0a05f7e0aac3c52a99d7fc684654e3e
GET /mysidia/b6810b6596f7ed55ed76c68d0358aca1.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 13684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 21:59:15 GMT
expires: Wed, 14 Dec 2022 21:59:15 GMT
cache-control: public, max-age=7776000
last-modified: Thu, 15 Sep 2022 20:14:13 GMT
content-type: text/javascript
age: 422399
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
200 OK 875 B URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js
IP
File type ASCII text, with very long lines (748)
Hash 7f017195be529ea58c3ab78d8dc1be22
d2a8f25d05226f8b59f74573f2509612c00710f9
59acc2605c947c7e98d070701e01bc7813688e81ad022192bb5a9311e799aa24
GET /pagead/js/r20220915/r20110914/client/load_preloaded_resource_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 875
x-xss-protection: 0
date: Tue, 20 Sep 2022 19:04:24 GMT
expires: Tue, 04 Oct 2022 19:04:24 GMT
cache-control: public, max-age=1209600
etag: 16974406330603315520
content-type: text/javascript; charset=UTF-8
age: 890
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaRI0Rs-ZhBbRnZIo0SmRdvT7YxqAhERM9Ksajm2f620LRJhAsyRiSD4N6TiGMFJMEVW0R8o86I2LIw6B0WrpTj8h0xX3Q
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaRI0Rs-ZhBbRnZIo0SmRdvT7YxqAhERM9Ksajm2f620LRJhAsyRiSD4N6TiGMFJMEVW0R8o86I2LIw6B0WrpTj8h0xX3Q
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaRI0Rs-ZhBbRnZIo0SmRdvT7YxqAhERM9Ksajm2f620LRJhAsyRiSD4N6TiGMFJMEVW0R8o86I2LIw6B0WrpTj8h0xX3Q HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 19:19:14 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
propeller-tracking.com/fv.js?t=102123
200 OK 0 B URL HTTP/2 propeller-tracking.com/fv.js?t=102123
IP
GET /fv.js?t=102123 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 19:19:06 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: b1f6de1814f0e5a0cfd2b4a3596ce288
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
200 OK 0 B URL HTTP/2 www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
IP
GET /embed/YC5q_PYBUgM?feature=oembed HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 20 Sep 2022 19:19:06 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=BC8kDL22Ibg; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=d4kh6pV2hy8; Domain=.youtube.com; Expires=Sun, 19-Mar-2023 19:19:06 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+322; expires=Thu, 19-Sep-2024 19:19:06 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
IP
GET /css?family=Roboto%3A300%2C400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Sep 2022 19:19:14 GMT
date: Tue, 20 Sep 2022 19:19:14 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/7577aaa2/player_ias.vflset/en_US/base.js
200 OK 0 B URL HTTP/2 www.youtube.com/s/player/7577aaa2/player_ias.vflset/en_US/base.js
IP
GET /s/player/7577aaa2/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 589772
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 14:50:44 GMT
expires: Tue, 19 Sep 2023 14:50:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 00:17:08 GMT
content-type: text/javascript
age: 102502
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
200 OK 0 B URL HTTP/2 www.youtube.com/embed/YC5q_PYBUgM?feature=oembed
IP
GET /embed/YC5q_PYBUgM?feature=oembed HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mahacet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 20 Sep 2022 19:19:10 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=3Y0vdO14_gA; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=UjDlJ4vL4O0; Domain=.youtube.com; Expires=Sun, 19-Mar-2023 19:19:10 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+326; expires=Thu, 19-Sep-2024 19:19:10 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
5.9.96.241
143.204.55.27
93.184.220.29
23.36.76.226
0.0.0.0