| www.traumatoptsd.com/ |  162.255.119.140 | 302 Found | 57 B |
IP162.255.119.140:0
File typeHTML document, ASCII text Hashbcb3c3e2039e735c39a643c73a523667 1310726b3ecbbda2f3d859779524d3036be87fb1 35a1b4264a49a382e8dc157610746cea20c74ad88bd765f6e0de59b6cea13a40
| NIDS | Severity | Alert |
|---|
| suricata | low | ET INFO Namecheap URL Forward |
GET / HTTP/1.1
Host: www.traumatoptsd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 01 Feb 2023 17:19:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 57
Connection: keep-alive
Location: https://gumroad.com/l/TraumaToPTSD
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd2e72d45afe3d391c204b5391599607c 149d68b9d00a720b6f380fa2324779dca9dbe26d f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3456
Expires: Wed, 01 Feb 2023 18:16:51 GMT
Date: Wed, 01 Feb 2023 17:19:15 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash62de35a6c8e4efd7633fc5236b5b086f 6a92912a86dfcd0330d040cef06bef36889c76ab ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5202
Expires: Wed, 01 Feb 2023 18:45:57 GMT
Date: Wed, 01 Feb 2023 17:19:15 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 16:43:25 GMT
content-type: application/json
age: 2150
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha8d45deaa7ebfcd996c2055dae592ab8 55befe074589fe7b39757c145968058162a8fc6b 50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3145
Expires: Wed, 01 Feb 2023 18:11:40 GMT
Date: Wed, 01 Feb 2023 17:19:15 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lfeCmhXqf3p8bxrBYyVx1cpMIk7n9Ul6HfHHYWlN4xvK3szYGCmXTkrW1q2Br5BrXl5ZroxKjt4=
x-amz-request-id: JN2X4Z3MQMW737YE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 16:51:38 GMT
age: 1657
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 345 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasheacb4601ca875f5c22e74499118597c1 8a36620f0a194761fe79e1c473a8dc70243775e0 9dbd4a1188c13d01cdcc6d9054d0781dd3f107d337a92526acd61f7b10cb0117
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "9DBD4A1188C13D01CDCC6D9054D0781DD3F107D337A92526ACD61F7B10CB0117"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8155
Expires: Wed, 01 Feb 2023 19:35:10 GMT
Date: Wed, 01 Feb 2023 17:19:15 GMT
Connection: keep-alive
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 17:19:15 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| gumroad.com/l/TraumaToPTSD |  104.16.192.25 | 301 Moved Permanently | 0 B |
URL HTTP/2gumroad.com/l/TraumaToPTSD IP104.16.192.25:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /l/TraumaToPTSD HTTP/1.1
Host: gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Wed, 01 Feb 2023 17:19:15 GMT
content-length: 0
location: https://app.gumroad.com/l/TraumaToPTSD
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59d899bc1bfa-OSL
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 16:41:42 GMT
age: 2253
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8913af0be619500295008bb91f506660 a7b8068ba9aa506205a295b24458c2616997a0d1 6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3651
Expires: Wed, 01 Feb 2023 18:20:06 GMT
Date: Wed, 01 Feb 2023 17:19:15 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashd953f6b987a024c751ce57f670d3e148 7b44751d0faef3cb82a7bc6f210929523156aecf 0a7ba2e158fa00edbba9c774ed067bafd94d73ed61d3de4ea91907e2afce168e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3931
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:19:16 GMT
Last-Modified: Wed, 01 Feb 2023 16:13:45 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
|
|
| push.services.mozilla.com/ | 35.82.137.1 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.82.137.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: r2Kr7jP0tQG89lFDM3yTRg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FhF/tjvvJexuv1WN2usTH2RbIiY=
|
|
| public-files.gumroad.com/variants/89sti2980jtqrx9ymf6jl8rgbb4g/532b90e67d0f2b8d3f37ee46f365ac5444b519f35527f4d9d3c523dd33d2fd30 | 104.16.192.25 | 200 OK | 39 kB |
URL HTTP/2public-files.gumroad.com/variants/89sti2980jtqrx9ymf6jl8rgbb4g/532b90e67d0f2b8d3f37ee46f365ac5444b519f35527f4d9d3c523dd33d2fd30 IP104.16.192.25:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15], baseline, precision 8, 128x120, components 3\012- data Hash8561cd9abe6d1e75ca7edce6131c653f 7cf1b94240e9ed567dff4c61d6877872cb2c4e29 ffecd659634f39e1e70e22937b9f23e56b854d302b8a6551fb3443c8a26e1e8e
GET /variants/89sti2980jtqrx9ymf6jl8rgbb4g/532b90e67d0f2b8d3f37ee46f365ac5444b519f35527f4d9d3c523dd33d2fd30 HTTP/1.1
Host: public-files.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:16 GMT
content-type: image/jpeg
content-length: 38935
last-modified: Sat, 26 Jun 2021 19:27:20 GMT
etag: "8561cd9abe6d1e75ca7edce6131c653f"
x-amz-version-id: U.YU1OdrjXwZuXh.GqkHpLU5_MQxH_Qn
x-cache: Miss from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yWicsznVRo74zMxVETK8x9dztxteyHVeaCq0LTyfP0hjalt_o8ag6w==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:16 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dc9e461bfa-OSL
X-Firefox-Spdy: h2
|
|
| public-files.gumroad.com/variants/wpxv735whzgbglp1ore5bzcdfyta/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 | 104.16.192.25 | 200 OK | 275 kB |
URL HTTP/2public-files.gumroad.com/variants/wpxv735whzgbglp1ore5bzcdfyta/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 IP104.16.192.25:0
File typePNG image data, 1005 x 1005, 8-bit/color RGBA, non-interlaced\012- data Size275 kB (274900 bytes) Hash2618ee07d53e91748782258e41b9b4b7 b54e2ae1f92193c6b39a57f5db0045341d5ea031 0edc216c090f01edb5f858118f2d2add759b3c14bd424a1069023605b431e23a
GET /variants/wpxv735whzgbglp1ore5bzcdfyta/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 HTTP/1.1
Host: public-files.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:16 GMT
content-type: image/png
content-length: 274900
last-modified: Sat, 26 Jun 2021 19:11:30 GMT
etag: "2618ee07d53e91748782258e41b9b4b7"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: ZErUb5Wi5FsCOOoxcwsG12_8OqNFRzHB
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ca7LeMyLPJFdCyiZGB3RhXnMR7aFFmO44uRD2EMgnTqNageqk_wXPA==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:16 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dc8e1a1bfa-OSL
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe8e0173672ec76c01676a1ba4e1be857 3d01334320c94972440226cfe96c8c7646cae796 c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9325
Expires: Wed, 01 Feb 2023 19:54:42 GMT
Date: Wed, 01 Feb 2023 17:19:17 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe8e0173672ec76c01676a1ba4e1be857 3d01334320c94972440226cfe96c8c7646cae796 c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9325
Expires: Wed, 01 Feb 2023 19:54:42 GMT
Date: Wed, 01 Feb 2023 17:19:17 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe8e0173672ec76c01676a1ba4e1be857 3d01334320c94972440226cfe96c8c7646cae796 c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9325
Expires: Wed, 01 Feb 2023 19:54:42 GMT
Date: Wed, 01 Feb 2023 17:19:17 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash27e95b7912edc909d6b031e36fe83534 eb27fae0bb17dbe0929a620002195233ef50c1d0 b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:53:10 GMT
age: 33967
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash23db22ce2120fbb0ae6109e1a046062d 2068c8d9a5bc30a17be658e198e26c64a80703cf f307ba6c4929d9f0c9354334b7baea878da379138489d9689bb777c4da308dab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: f466c962-7b12-4923-a4be-7ff9fce372a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaWFP_IAMF9wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-7a8c027d58f5b9132bb68a33;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hjIm9dNf6UE9rpIlKWeLwWuF7Pm6yJeAZgbwchvJcuDy-zkXEr502w==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:18 GMT
age: 70079
etag: "2068c8d9a5bc30a17be658e198e26c64a80703cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3366ef4f8733cb9c89a5c88f63a0a441 7da46843b6d885f38a4759a08e6c899906ab7b97 7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 22:03:43 GMT
age: 69334
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2998f7f50ac0eec931c348e8a0fb0c60 f5e411cda74cb7fb4a662f4787e9543b9749c8b5 0c81413a819e379212bf757b1c9469415aec2ac8fdf47f94ff23c420a1da20e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5736
x-amzn-requestid: 895ee89b-8d2e-42f9-a392-466557f8a0d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffEtEGk_oAMFYPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e7ed-026a1b0d79dc7eb572317bd2;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:28:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 64EbarGrn6AIpXOE8TIfiBeGFQinx-P9lUIvmiQ1ivZgFrxl7_W4EQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:57:42 GMT
age: 69695
etag: "f5e411cda74cb7fb4a662f4787e9543b9749c8b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg | 34.120.237.76 | 200 OK | 7.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3c83dcdb618756ebbfeb69a8bff6d38c 5f909182ab6847690e7ebd100e3f0d2798e36192 2e29d0747fb973908228501178465ac09f6553ef8e50dd70ee617f3379eb733c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7049
x-amzn-requestid: bc6522f2-eb6b-4e59-9912-0c03d145f021
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk31LGE2IAMF8rw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839ba-67477ed1260c27f67e28043d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q_aVbWJKMbX1_bjggzbdnWbgmfooGvXj76t55QGGXRr_y6ZgW2gctw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:52:24 GMT
age: 70013
etag: "5f909182ab6847690e7ebd100e3f0d2798e36192"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg | 34.120.237.76 | 200 OK | 14 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash78fe9a77211d6f9a462f625af0c6f9bc ac0b58423d7578e7a1b60a62220c0a57924dda82 e047466c3ae0a55509f4ace49d0476f94271b5a25e71caa3b06ec468a238b652
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14041
x-amzn-requestid: 2be6655d-3b0e-4e65-b44b-11682610b640
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRGFpIAMFbMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-5554d18d5db235913afa77a2;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MeSOuCSjsjhK6FOS67rw6oF4rS08twjOACGbXJrNPH6vwZb8lZh9lw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:18 GMT
etag: "ac0b58423d7578e7a1b60a62220c0a57924dda82"
content-type: image/jpeg
age: 70079
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| public-files.gumroad.com/variants/8hsh2c8azm4t90qqyz8t13qo19xz/ca08db74568b0facd21c07efb46e54dc9c5633fd67346a84b6c50cf0c2790565 | 104.16.192.25 | 200 OK | 148 kB |
URL HTTP/2public-files.gumroad.com/variants/8hsh2c8azm4t90qqyz8t13qo19xz/ca08db74568b0facd21c07efb46e54dc9c5633fd67346a84b6c50cf0c2790565 IP104.16.192.25:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 905x1132, components 3\012- data Size148 kB (148035 bytes) Hasha2af4a08a3a3ab5ace825288b9232d91 dd906932bbc53cd7cdbd6c354f0df39e6e426b22 de73183d7da76fdebeee6d14c22606f21f607f8a2f23a75bc705d90fa6a6aea2
GET /variants/8hsh2c8azm4t90qqyz8t13qo19xz/ca08db74568b0facd21c07efb46e54dc9c5633fd67346a84b6c50cf0c2790565 HTTP/1.1
Host: public-files.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:17 GMT
content-type: image/jpeg
content-length: 148035
last-modified: Sun, 21 Aug 2022 16:20:53 GMT
etag: "a2af4a08a3a3ab5ace825288b9232d91"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: MAagJN.soNSWWfXmVOctOAT6Phtfm8ZW
x-cache: Miss from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y2hMaZnYo29o3wtG1Jy4E4ZFue0RLzijHdOLqdSclZo9m1xeGb0HHg==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:16 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dc8e231bfa-OSL
X-Firefox-Spdy: h2
|
|
| public-files.gumroad.com/variants/1a7srzwik1g27zf366daeyvcu24w/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 | 104.16.192.25 | 200 OK | 905 kB |
URL HTTP/2public-files.gumroad.com/variants/1a7srzwik1g27zf366daeyvcu24w/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 IP104.16.192.25:0
File typePNG image data, 1005 x 628, 8-bit/color RGBA, non-interlaced\012- data Size905 kB (905058 bytes) Hash043f956180ea56769fc564888d5ecb29 5c73e1dc14e54935b5cfbd51b6ee1b61dfa6f41e 11fde9b3caa606a5d789763ea2f968375649f2a571af33584be44d98ab1bc965
GET /variants/1a7srzwik1g27zf366daeyvcu24w/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 HTTP/1.1
Host: public-files.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:16 GMT
content-type: image/png
content-length: 905058
last-modified: Sat, 26 Jun 2021 19:11:32 GMT
etag: "043f956180ea56769fc564888d5ecb29"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: 4YOxwb1pj06xENlV_Yrg2fAIq0t2wrvf
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Dn3gONo7vAhdleTIZOp8p_mscuWUUjiCjpbC5GqAbqkGLVSWzL4Byg==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:16 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dc8e191bfa-OSL
X-Firefox-Spdy: h2
|
|
| public-files.gumroad.com/variants/3z541to09192oac7qgi6hsgpx0va/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 | 104.16.192.25 | 200 OK | 1.0 MB |
URL HTTP/2public-files.gumroad.com/variants/3z541to09192oac7qgi6hsgpx0va/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 IP104.16.192.25:0
File typePNG image data, 1005 x 1005, 8-bit/color RGBA, non-interlaced\012- data Size1.0 MB (1003495 bytes) Hash438b42553ff2a68caa3dab4689433e15 e43d4211ed60d3acbe92ac06fb7db94865edf11f f63d4517d6ec08038edef14f6e43867ede0295cc27dc48c9274a13354af4b4d9
GET /variants/3z541to09192oac7qgi6hsgpx0va/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 HTTP/1.1
Host: public-files.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:17 GMT
content-type: image/png
content-length: 1003495
last-modified: Sat, 26 Jun 2021 19:21:42 GMT
etag: "438b42553ff2a68caa3dab4689433e15"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: d41iWNtxc_SPtj5NmRf_AKoZoaWKy9bG
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: W_bJXaSqRcB3ZryPg8UjfT0gFZvKGGPmID7Fxo0r8Lx7wbhlijU9SQ==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dc8e1e1bfa-OSL
X-Firefox-Spdy: h2
|
|
| public-files.gumroad.com/variants/zwpd7u8nlkqd3c6uuqb6936ynsvw/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 | 104.16.192.25 | 200 OK | 904 kB |
URL HTTP/2public-files.gumroad.com/variants/zwpd7u8nlkqd3c6uuqb6936ynsvw/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 IP104.16.192.25:0
File typePNG image data, 1005 x 1005, 8-bit/color RGBA, non-interlaced\012- data Size904 kB (904248 bytes) Hash83a8afc6b5089f038feef060c5467a3c 28e867d7f060091e0bd3bb16842fa392803618ca c67c1997cbc69761ceee70c3db61fa6704fb3b569cb0a285be48a5c7ba2eefbb
GET /variants/zwpd7u8nlkqd3c6uuqb6936ynsvw/3298c3eb001bbed90f1d616da66708480096a0a1b6e81bd4f8a2d6e9b831d301 HTTP/1.1
Host: public-files.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:17 GMT
content-type: image/png
content-length: 904248
last-modified: Sat, 26 Jun 2021 19:21:43 GMT
etag: "83a8afc6b5089f038feef060c5467a3c"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: KI_euBUKMzZTmFFKqmHZdtKBXTZaRwpg
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GJOexswkSzQe6SzNBlSBQQK-jEDS05bJvRRLWIyseRzRYMW-XCoKSA==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dc8e201bfa-OSL
X-Firefox-Spdy: h2
|
|
| public-files.gumroad.com/cv5rekvhcyb62hfyi64oujwprcdv | 104.16.192.25 | 200 OK | 989 kB |
URL HTTP/2public-files.gumroad.com/cv5rekvhcyb62hfyi64oujwprcdv IP104.16.192.25:0
File typeGIF image data, version 89a, 600 x 400\012- data Size989 kB (989428 bytes) Hash178d90fa79282ac7d3f66f2bbdc7de6b 33de2c49d90658031b98682b7a739de8539a663b 4033f573812c994b1dfaf242d322ea8d6c1c751201c7f095461a2a9a720a67b7
GET /cv5rekvhcyb62hfyi64oujwprcdv HTTP/1.1
Host: public-files.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:17 GMT
content-type: image/gif
content-length: 989428
last-modified: Sat, 26 Jun 2021 19:11:24 GMT
etag: "178d90fa79282ac7d3f66f2bbdc7de6b"
x-amz-storage-class: INTELLIGENT_TIERING
content-disposition: inline; filename="mock-01009 %281%29.gif"; filename*=UTF-8''mock-01009%20%281%29.gif
x-amz-version-id: 2prCdNUAHb3v.5svYbxQTB2AfeBEx844
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E3Z6Pel83fEm-We44f3su6PplEDq23wYJ9PBU-cqOc4ddTgBRhxJZg==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:16 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dc8e1b1bfa-OSL
X-Firefox-Spdy: h2
|
|
| public-files.gumroad.com/91yp5ehubpccdp5qapvac6d2l4jp | 104.16.192.25 | 200 OK | 944 kB |
URL HTTP/2public-files.gumroad.com/91yp5ehubpccdp5qapvac6d2l4jp IP104.16.192.25:0
File typeGIF image data, version 89a, 600 x 400\012- data Size944 kB (944114 bytes) Hashf787e7c25259cbaa0987b549a0a3b18d 4dad03dcd9fbabd1fc46b7a178895970463b6558 9ffa94af30a187cf22768b98e400f0a6a7146b77bb3e8ddc07014ddc6d2f6178
GET /91yp5ehubpccdp5qapvac6d2l4jp HTTP/1.1
Host: public-files.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:17 GMT
content-type: image/gif
content-length: 944114
last-modified: Sat, 26 Jun 2021 19:11:21 GMT
etag: "f787e7c25259cbaa0987b549a0a3b18d"
x-amz-storage-class: INTELLIGENT_TIERING
content-disposition: inline; filename="mock-01009 %282%29.gif"; filename*=UTF-8''mock-01009%20%282%29.gif
x-amz-version-id: ksZmXVqE_nzuWirKe9tefvF8WDyUoHm2
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O45RxHlhcp5ytIucQsKZ9TdyXxHYCoYzGWaEMLZOxfh3ju5yLd7O1Q==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:17 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dc8e1c1bfa-OSL
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/packs/static/e46dd10cef3c6fe137e8.png | 104.16.192.25 | 200 OK | 26 kB |
URL HTTP/2assets.gumroad.com/packs/static/e46dd10cef3c6fe137e8.png IP104.16.192.25:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash349a1e8b05e6f8d895128419c3c55ed1 6c60daf231c76abbbfd95f1e833570b0bdc5eeb5 6ef3ea5bbf01d5f22e0284f19366a8049a81245a49b3d2ea64216a753ee3768b
GET /packs/static/e46dd10cef3c6fe137e8.png HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.gumroad.com/packs/css/design-6c8d19b5.css
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:18 GMT
content-type: image/webp
content-length: 26278
cache-control: public, max-age=31536000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=63959
content-disposition: inline; filename="e46dd10cef3c6fe137e8.webp"
etag: "49cbcd8120dfbd3f51eb7607ca114d85"
last-modified: Tue, 24 May 2022 17:04:45 GMT
vary: Accept
via: 1.1 e5089b0e0858be18714ab2104dc8c370.cloudfront.net (CloudFront)
x-amz-cf-id: bM1rSsec9yVwbhjLkC3wbdiHj2GlndWNQ7sQUGgyal8Un2Jjodxq5Q==
x-amz-cf-pop: SFO5-C1
x-cache: Hit from cloudfront
cf-cache-status: HIT
age: 21155615
expires: Thu, 01 Feb 2024 17:19:18 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 792c59eeca0e1bfa-OSL
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/packs/static/aaec7850d09c0889a8b5.woff2 | 104.16.192.25 | 200 OK | 70 kB |
URL HTTP/2assets.gumroad.com/packs/static/aaec7850d09c0889a8b5.woff2 IP104.16.192.25:0
File typeWeb Open Font Format (Version 2), TrueType, length 69504, version 2.65\012- data Hash365ed9c6769f7377c3af5c5bfd4a64e2 c3965ef8f7dfde47def733c34cd9c770425d1c48 3ac938750db4baee3ae6a9ab1052af7b59962234d114ef46f5f0ab2e6cc25fa7
GET /packs/static/aaec7850d09c0889a8b5.woff2 HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://assets.gumroad.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:19 GMT
content-type: binary/octet-stream
content-length: 69504
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag, Accept-Ranges, Content-Encoding, Content-Length, Content-Range
access-control-max-age: 3000
last-modified: Wed, 01 Feb 2023 16:28:11 GMT
etag: "365ed9c6769f7377c3af5c5bfd4a64e2"
cache-control: public, max-age=31536000
vary: Origin, Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 17lUmJW1V5TzRB-u0FfaY9HeXPkqjt3AZWzoEb0q7BnG5MEcCexYUQ==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:19 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 792c59eee8aa1c0e-OSL
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/packs/static/f301b7100da17db3c2c0.woff2 | 104.16.192.25 | 200 OK | 67 kB |
URL HTTP/2assets.gumroad.com/packs/static/f301b7100da17db3c2c0.woff2 IP104.16.192.25:0
File typeWeb Open Font Format (Version 2), TrueType, length 67364, version 2.65\012- data Hash775e3fdfc6c4055284e7d1d994c167de 8127a880b045b243db16b3ebb0c4d2c0dfccf759 a523993e5201ca6ae81351719cb31d66670d2823769f5419e269b1ccff993f1a
GET /packs/static/f301b7100da17db3c2c0.woff2 HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://assets.gumroad.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:19 GMT
content-type: binary/octet-stream
content-length: 67364
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag, Accept-Ranges, Content-Encoding, Content-Length, Content-Range
access-control-max-age: 3000
last-modified: Wed, 01 Feb 2023 16:28:11 GMT
etag: "775e3fdfc6c4055284e7d1d994c167de"
cache-control: public, max-age=31536000
vary: Origin, Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YoqpY_tUmFvI0IUaxbtH-WThQtbNiPDVnGbGrD9BT1PRgftlw0QNwA==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:19 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 792c59eee8a51c0e-OSL
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/packs/static/19db990205089207b039.woff2 | 104.16.192.25 | 200 OK | 67 kB |
URL HTTP/2assets.gumroad.com/packs/static/19db990205089207b039.woff2 IP104.16.192.25:0
File typeWeb Open Font Format (Version 2), TrueType, length 67176, version 2.65\012- data Hashd64a48ba0b9752af91d3858d8a95d2ec 5b6f0cdf16970c5b26983173e8e0596dab23a057 da3a4a9ffefbd4c563fc28b1cb72a6b2cec089285f571e6c682e35a825d1ff76
GET /packs/static/19db990205089207b039.woff2 HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://assets.gumroad.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:19 GMT
content-type: binary/octet-stream
content-length: 67176
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag, Accept-Ranges, Content-Encoding, Content-Length, Content-Range
access-control-max-age: 3000
last-modified: Wed, 01 Feb 2023 16:28:10 GMT
etag: "d64a48ba0b9752af91d3858d8a95d2ec"
cache-control: public, max-age=31536000
vary: Origin, Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ur7o8Z5W7yvg_t2-CtdTOMkecbCAT9YuV2cO9EHaXfKiEVpfpJ8Bqg==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:19 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 792c59eee89e1c0e-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2751084b42dd111d0a7f28241a77201b 680a9ac2f4cf451c9a8449c4df3587595ed9cc4c 1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:19:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/analytics.js | 142.250.74.110 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.110:0
File typeASCII text, with very long lines (1490) Hashca7fbbfd120e3e329633044190bbf134 d17f81e03dd827554ddd207ea081fb46b3415445 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 01 Feb 2023 15:46:59 GMT
expires: Wed, 01 Feb 2023 17:46:59 GMT
cache-control: public, max-age=7200
age: 5540
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2751084b42dd111d0a7f28241a77201b 680a9ac2f4cf451c9a8449c4df3587595ed9cc4c 1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:19:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js | 142.250.74.40 | 200 OK | 38 kB |
URL HTTP/2www.googletagmanager.com/gtag/js IP142.250.74.40:0
File typeASCII text, with very long lines (1759) Hash59be2e905577252ef13fd11c7639f774 3e37e300b2c4aa5587539d382e885a1fadb7beb0 60666a3b81e5c4827335df1be629aee35eec3cc89c408d7616af45e7dad335b4
GET /gtag/js HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 17:19:20 GMT
expires: Wed, 01 Feb 2023 17:19:20 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Feb 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37816
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| universaltreehc.gumroad.com/cdn-cgi/rum? | 104.16.192.25 | 204 No Content | 0 B |
URL HTTP/2universaltreehc.gumroad.com/cdn-cgi/rum? IP104.16.192.25:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: universaltreehc.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 6492
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/l/TraumaToPTSD
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D; _mkra_stck=mysql%3A1675271960.7710884; _ga=GA1.2.886829198.1675271983; _gid=GA1.2.1004743792.1675271983
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Wed, 01 Feb 2023 17:19:20 GMT
access-control-allow-origin: https://universaltreehc.gumroad.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 792c59f78c091bfa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash692391704ca6e43f9fc0b364efcd1310 85bd8131554ed317aa7bd7fa212934a0806483fb ee2a00a29af72d317319234728d9705853547e617ab998366742910b36242cb5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2286
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:19:20 GMT
Last-Modified: Wed, 01 Feb 2023 16:41:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| js-agent.newrelic.com/nr-476.min.js | 151.101.194.137 | 200 OK | 7.1 kB |
URL HTTP/2js-agent.newrelic.com/nr-476.min.js IP151.101.194.137:0
File typeASCII text, with very long lines (18146), with no line terminators Hasha4ee7163f1b00a2b46de369c85438cbc eaf623e296b4c6dfb748cc1e172e2a96790face0 5d25d4a16b9c68169b74ff163d57cc1b8389a393b7137d000b3a894a3447bc09
GET /nr-476.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: O+EzdGk8NALsqTqbW+z5nHKOzu/U5bCfHDW2lDjwfIYVdvetjFS2v45rVnq5luZsnqI0Ka/vWNo=
x-amz-request-id: PRK0BVW51HARW7P0
last-modified: Wed, 28 Feb 2018 23:33:33 GMT
etag: "d131658362c40cedda15546bb81e9644"
x-amz-version-id: null
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 01 Feb 2023 17:19:20 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 1871
x-timer: S1675271960.283990,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 7069
X-Firefox-Spdy: h2
|
|
| connect.facebook.net/en_US/sdk.js |  157.240.205.11 | 200 OK | 1.7 kB |
URL HTTP/2connect.facebook.net/en_US/sdk.js IP157.240.205.11:0
File typeASCII text, with very long lines (1957) Hash4198cebe4d264b674ff42636b4611ab8 bd296312f92f192b95c6d0379f86fa075d010616 e68d6de412be4600110f6377a525939f3334dfb7db74e1aa32a406f6b8104c6a
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: c30c71f363d478cb38025743f823cf6a
etag: "5f35cf048611cb67d0ab3c6ffd0b83e6"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 01 Feb 2023 17:35:07 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: QZjOvk0mS2dP9CY2tGEauA==
x-fb-debug: vlp44bOrwi1okjgLYQyT9c78ZWOujmi7PRlFvqPmh1xqBkrXWCGac0RR5dlEQJIVccTvPyFg3Ca5JztBdhhdiw==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1679558926
date: Wed, 01 Feb 2023 17:19:20 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash692391704ca6e43f9fc0b364efcd1310 85bd8131554ed317aa7bd7fa212934a0806483fb ee2a00a29af72d317319234728d9705853547e617ab998366742910b36242cb5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2286
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:19:20 GMT
Last-Modified: Wed, 01 Feb 2023 16:41:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd23184c7272f27eb369971c46e76ca8d 9caa5c7b53d8a400133fb54618dcdb1f0c5d0317 5700f07e3e6bdec87f5dbb80d2cffd5b39b4388fe6b25261e53b4b645cca4121
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5588
Cache-Control: max-age=112116
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:19:20 GMT
Etag: "63d99c38-1d7"
Expires: Fri, 03 Feb 2023 00:27:56 GMT
Last-Modified: Tue, 31 Jan 2023 22:54:48 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| connect.facebook.net/en_US/sdk.js?hash=e666a18fe4b396d2008806ad446134ec | 157.240.205.11 | 200 OK | 87 kB |
URL HTTP/2connect.facebook.net/en_US/sdk.js?hash=e666a18fe4b396d2008806ad446134ec IP157.240.205.11:0
File typeASCII text, with very long lines (13192) Hash1a0ff5ff13359bd733e937c20318f99f 9a34b1a9b4f17038e21c989a1c3b2975d32b237b de7fc79af46a71d8d13c1d2bfa5ef604f65a936f24dcb14612dde3570bba1fdf
GET /en_US/sdk.js?hash=e666a18fe4b396d2008806ad446134ec HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: cfe3bc2981889a1af8c4d61bcd7c4834
etag: "ba3b231611c0c63ce9b6d53b68344624"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 01 Feb 2024 10:50:48 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Gg/1/xM1m9cz6TfCAxj5nw==
x-fb-debug: 1OsT57lz0JB++owC1FVB6dabplO+OX3QZMc+Ktlhsmz3NPmUhRmyDClCP+BK0eTCuzZFZ/XghvQvTD7CbGEmPA==
priority: u=3,i
content-length: 86976
x-fb-trip-id: 1679558926
date: Wed, 01 Feb 2023 17:19:20 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2dc2e297877f6332a114de88eeeaca61 cc91e58f3dd132b078223d21cd3177f0819e40e7 94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:19:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-29108090-1&cid=886829198.1675271983&jid=1015110194&gjid=495783044&_gid=1004743792.1675271983&_u=aGBAiEITRAAAAEAAIC~&z=1217210788 | 173.194.73.155 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-29108090-1&cid=886829198.1675271983&jid=1015110194&gjid=495783044&_gid=1004743792.1675271983&_u=aGBAiEITRAAAAEAAIC~&z=1217210788 IP173.194.73.155:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-29108090-1&cid=886829198.1675271983&jid=1015110194&gjid=495783044&_gid=1004743792.1675271983&_u=aGBAiEITRAAAAEAAIC~&z=1217210788 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://universaltreehc.gumroad.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 01 Feb 2023 17:19:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| universaltreehc.gumroad.com/links/CILWP/increment_views | 104.16.192.25 | 200 OK | 16 B |
URL HTTP/2universaltreehc.gumroad.com/links/CILWP/increment_views IP104.16.192.25:0
File typeJSON data\012- , ASCII text, with no line terminators Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /links/CILWP/increment_views HTTP/1.1
Host: universaltreehc.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-CSRF-Token: Yw101cSXyVuLliGZ6k0jRc/jJ+sF0v66K7hPLuUNJFY=
X-Requested-With: XMLHttpRequest
Content-Length: 241
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/l/TraumaToPTSD
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D; _mkra_stck=mysql%3A1675271960.7710884; _ga=GA1.2.886829198.1675271983; _gid=GA1.2.1004743792.1675271983
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:20 GMT
content-type: application/json; charset=utf-8
content-length: 16
x-revision: a5a4f12c3e55
x-gr: PROD
vary: Accept, Origin
etag: W/"c955e57777ec0d73639dca6748560d00"
cache-control: max-age=0, private, must-revalidate
set-cookie: _gumroad_app_session=2uqj133EVFhKQZ8DRTh6mtTw4oxHRTscKnqNlerNtyJ80oDljrRTWKmophZOq4J0mZRHmVcwo3o42TnLK3zrkiZeimhAUDunQrLTMYPJ1QsM7pVqmOTnHMlvt8Gb39%2Fp5wfCsUrBBAYjiFb42duOeKm14BhNTgb%2BOfVMLKOg9Szkoq5uZPNAFEGLrzNfbIfx%2FkLiEU8fie1NoBxJKRWJpU2u6nID0MDn2pmEe%2Bbg7E7Uq0rVQCrxYRkBabxa2KNG21HyThOBulAe42PG7ZOdus4gq6fiscfwXbxxrvHEEjjRXVLHyv4Htfkjgw99JA%3D%3D--ECBpSMRTK6NupCg6--PFJcQ3ywK7aQVH3tytXAtA%3D%3D; domain=.gumroad.com; path=/; expires=Tue, 01 Feb 2033 17:19:20 GMT; secure; HttpOnly; SameSite=None
x-request-id: 2d2adda7-0ad8-42ee-bd7c-ff2a3c45cd69
x-runtime: 0.013173
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
content-security-policy: default-src https 'self'; child-src * data: blob:; connect-src 'self' bam.nr-data.net www.dropbox.com api.dropboxapi.com s3.amazonaws.com/gumroad s3.amazonaws.com/gumroad/ gumroad-public-storage.s3.amazonaws.com gumroad-public-storage.s3.amazonaws.com/ s3.amazonaws.com/gumroad-public-storage s3.amazonaws.com/gumroad-public-storage/ www.google.com www.gstatic.com *.facebook.com *.facebook.net *.google-analytics.com *.g.doubleclick.net www.googletagmanager.com files.gumroad.com/ d1bdh6c3ceakz5.cloudfront.net/ *.braintreegateway.com www.paypalobjects.com *.paypal.com *.braintree-api.com iframe.ly beaconapi.helpscout.net d3hb14vkzrxvla.cloudfront.net app.gumroad.com; font-src * data: blob:; frame-src * data: blob:; img-src * data: blob:; media-src * data: blob:; object-src * data: blob:; script-src 'self' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com js.stripe.com api.stripe.com *.braintreegateway.com *.braintree-api.com www.paypalobjects.com *.paypal.com *.google-analytics.com www.googletagmanager.com optimize.google.com www.googleadservices.com www.google.com www.gstatic.com *.facebook.net *.facebook.com *.newrelic.com *.nr-data.net www.dropbox.com s.ytimg.com cdn.iframe.ly platform.twitter.com *.jwpcdn.com content.jwplatform.com/libraries/3vz4Z4wu.js *.jwpsrv.com blob: 'self' data: gumroad.us3.list-manage.com analytics.twitter.com beacon-v2.helpscout.net app.gumroad.com assets.gumroad.com; style-src 'self' 'unsafe-inline' s.ytimg.com ssl.p.jwpcdn.com optimize.google.com fonts.googleapis.com assets.gumroad.com; worker-src * data: blob:
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792c59f79c201bfa-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash2dc2e297877f6332a114de88eeeaca61 cc91e58f3dd132b078223d21cd3177f0819e40e7 94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:19:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.facebook.com/x/oauth/status?client_id=149071038533330&input_token&origin=1&redirect_uri=https%3A%2F%2Funiversaltreehc.gumroad.com%2Fl%2FTraumaToPTSD&sdk=joey&wants_cookie_data=false |  31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/x/oauth/status?client_id=149071038533330&input_token&origin=1&redirect_uri=https%3A%2F%2Funiversaltreehc.gumroad.com%2Fl%2FTraumaToPTSD&sdk=joey&wants_cookie_data=false IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x/oauth/status?client_id=149071038533330&input_token&origin=1&redirect_uri=https%3A%2F%2Funiversaltreehc.gumroad.com%2Fl%2FTraumaToPTSD&sdk=joey&wants_cookie_data=false HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://universaltreehc.gumroad.com/
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
access-control-expose-headers: fb-s
access-control-allow-credentials: true
access-control-allow-origin: https://universaltreehc.gumroad.com
fb-s: unknown
x-fb-rlafr: 0
document-policy: force-load-at-top
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
strict-transport-security: max-age=15552000; preload
x-fb-debug: fa/IvcOhflXanJnGVOl9MAVKnGQDXhNEUqQqHDIddIa0heYNlGXXSKyP687uYGCJKiiOzD1s1FnQAt85VViVVA==
content-length: 0
date: Wed, 01 Feb 2023 17:19:20 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bam.nr-data.net/1/423bd51c23?a=395017&sa=1&pl=1675271977115&v=476.c73f3a6&t=Unnamed%20Transaction&be=5133&fe=276&dc=269&f=%5B%22err%22,%22xhr%22,%22stn%22%5D&perf=%7B%22timing%22:%7B%22of%22:1675271977115,%22n%22:0,%22dl%22:1070,%22di%22:1121,%22ds%22:4109,%22de%22:4112,%22dc%22:5115,%22l%22:5115,%22le%22:5116,%22f%22:755,%22dn%22:755,%22dne%22:755,%22c%22:755,%22ce%22:755,%22s%22:755,%22rq%22:781,%22rp%22:1064,%22rpe%22:1080%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken | 162.247.241.14 | 200 OK | 77 B |
URL HTTP/1.1bam.nr-data.net/1/423bd51c23?a=395017&sa=1&pl=1675271977115&v=476.c73f3a6&t=Unnamed%20Transaction&be=5133&fe=276&dc=269&f=%5B%22err%22,%22xhr%22,%22stn%22%5D&perf=%7B%22timing%22:%7B%22of%22:1675271977115,%22n%22:0,%22dl%22:1070,%22di%22:1121,%22ds%22:4109,%22de%22:4112,%22dc%22:5115,%22l%22:5115,%22le%22:5116,%22f%22:755,%22dn%22:755,%22dne%22:755,%22c%22:755,%22ce%22:755,%22s%22:755,%22rq%22:781,%22rp%22:1064,%22rpe%22:1080%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken IP162.247.241.14:0
File typeASCII text, with no line terminators Hashf1442f5831dbbe0210da2d7a4180d6b8 2ade23c6c7a001c66f0c0a9a101ec152747b434e c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/423bd51c23?a=395017&sa=1&pl=1675271977115&v=476.c73f3a6&t=Unnamed%20Transaction&be=5133&fe=276&dc=269&f=%5B%22err%22,%22xhr%22,%22stn%22%5D&perf=%7B%22timing%22:%7B%22of%22:1675271977115,%22n%22:0,%22dl%22:1070,%22di%22:1121,%22ds%22:4109,%22de%22:4112,%22dc%22:5115,%22l%22:5115,%22le%22:5116,%22f%22:755,%22dn%22:755,%22dne%22:755,%22c%22:755,%22ce%22:755,%22s%22:755,%22rq%22:781,%22rp%22:1064,%22rpe%22:1080%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:19:20 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 792c59f9bd93b523-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=da0407687d8d12ad; Path=/; Domain=.nr-data.net; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-6LJN6D94N6>m=2oe1u0&_p=1021037332&cid=886829198.1675271983&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675271982&sct=1&seg=0&dl=https%3A%2F%2Funiversaltreehc.gumroad.com%2Fl%2FTraumaToPTSD&dt=Trauma%20to%20PTSD%3A%20Root%20Causes%20to%20Healing%20Branches&en=page_view&_fv=1&_ss=1&_ee=1&ep.dimension1=Not%20logged%20in | 216.239.34.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-6LJN6D94N6>m=2oe1u0&_p=1021037332&cid=886829198.1675271983&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675271982&sct=1&seg=0&dl=https%3A%2F%2Funiversaltreehc.gumroad.com%2Fl%2FTraumaToPTSD&dt=Trauma%20to%20PTSD%3A%20Root%20Causes%20to%20Healing%20Branches&en=page_view&_fv=1&_ss=1&_ee=1&ep.dimension1=Not%20logged%20in IP216.239.34.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-6LJN6D94N6>m=2oe1u0&_p=1021037332&cid=886829198.1675271983&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675271982&sct=1&seg=0&dl=https%3A%2F%2Funiversaltreehc.gumroad.com%2Fl%2FTraumaToPTSD&dt=Trauma%20to%20PTSD%3A%20Root%20Causes%20to%20Healing%20Branches&en=page_view&_fv=1&_ss=1&_ee=1&ep.dimension1=Not%20logged%20in HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://universaltreehc.gumroad.com
date: Wed, 01 Feb 2023 17:19:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| public-files.gumroad.com/1a7srzwik1g27zf366daeyvcu24w | 104.16.192.25 | 200 OK | 2.1 MB |
URL HTTP/2public-files.gumroad.com/1a7srzwik1g27zf366daeyvcu24w IP104.16.192.25:0
File typePNG image data, 1595 x 997, 8-bit/color RGBA, non-interlaced\012- data Size2.1 MB (2093675 bytes) Hash7918aa9cb562234312bb7d0c3a3f71be 7c3ca8ffa161bccc0898bef4c93cc8807a1adc74 22a19da43f508eb92d8238742eb8763d3bcfceaa0b5cc2d8ec06a7a6d15a1914
GET /1a7srzwik1g27zf366daeyvcu24w HTTP/1.1
Host: public-files.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D; _ga=GA1.2.886829198.1675271983; _gid=GA1.2.1004743792.1675271983
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:21 GMT
content-type: image/png
content-length: 2093675
last-modified: Sat, 26 Jun 2021 19:11:31 GMT
etag: "7918aa9cb562234312bb7d0c3a3f71be"
x-amz-storage-class: INTELLIGENT_TIERING
content-disposition: inline; filename="mock-00037.png"; filename*=UTF-8''mock-00037.png
x-amz-version-id: HE7VVcqAE0boNXYNvGwNpvjz7P.8lh8G
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cXn2FPcZPtth2k2UHuOhi3Df64VXxpouSpzhGVGAFEXEo-_Eqfzh8Q==
cf-cache-status: HIT
age: 0
expires: Thu, 01 Feb 2024 17:19:21 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59f7bc491bfa-OSL
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4bb3a6fba496d54cdbbccaf2b9600386 8e30002699e9fbf2047f9ac11a36d2175fc9c591 927bf3a04b011b4e3bc8d8772a3d5813507f7f523312d43627767b64615562f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pU_436f27nMZKPxZZWqZekERHFTvcG5NT5p_CYEXHRPtIWjDtSA-uA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:15:18 GMT
age: 36246
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/packs/css/design-6c8d19b5.css | 104.16.192.25 | 200 OK | 0 B |
URL HTTP/2assets.gumroad.com/packs/css/design-6c8d19b5.css IP104.16.192.25:0
GET /packs/css/design-6c8d19b5.css HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:18 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers: ETag, Accept-Ranges, Content-Encoding, Content-Length, Content-Range
access-control-max-age: 3000
last-modified: Wed, 01 Feb 2023 16:17:05 GMT
etag: W/"8cd727180b116e6ea8510f1416148abb"
cache-control: public, max-age=31536000
vary: Origin, Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3aErehs5qaUj6vnALoRkI87-BSpuBLvJfh7FZJqnmwMfnT7_6lghqA==
cf-cache-status: MISS
expires: Thu, 01 Feb 2024 17:19:17 GMT
server: cloudflare
cf-ray: 792c59dcfde11c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/assets/application-57329222fde6300cfaa31905412077901afb8abb0c5334c35ac780c21a414211.js | 104.16.192.25 | 200 OK | 0 B |
URL HTTP/2assets.gumroad.com/assets/application-57329222fde6300cfaa31905412077901afb8abb0c5334c35ac780c21a414211.js IP104.16.192.25:0
GET /assets/application-57329222fde6300cfaa31905412077901afb8abb0c5334c35ac780c21a414211.js HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:18 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=129808
etag: W/"d854bab1aaa4873a211aa9f9092a016a"
last-modified: Wed, 18 Jan 2023 08:42:39 GMT
via: 1.1 d5dc130df504729356d2dede87be3764.cloudfront.net (CloudFront)
x-amz-cf-id: SVVaHX09Foio6Jg0tGj7fAQFrQNLXxrs1ytB68hKfWWmXK-ydAQFVA==
x-amz-cf-pop: WAW51-P2
x-cache: Miss from cloudfront
cf-cache-status: HIT
age: 1232255
expires: Thu, 01 Feb 2024 17:19:18 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59eeda211bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/packs/js/webpack-commons-e6d17cee3ef649ace64f.js | 104.16.192.25 | 200 OK | 0 B |
URL HTTP/2assets.gumroad.com/packs/js/webpack-commons-e6d17cee3ef649ace64f.js IP104.16.192.25:0
GET /packs/js/webpack-commons-e6d17cee3ef649ace64f.js HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:18 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=1865802
etag: W/"9aad004ef6d3daae6ee34c630e17b090"
last-modified: Tue, 31 Jan 2023 04:17:45 GMT
via: 1.1 2a2fa0b54f96e81274810bd8cdd127ac.cloudfront.net (CloudFront)
x-amz-cf-id: b7hRxeA5AEgIRbIdgC-vpmMYut00xVMsTt_WU3w9PHBk__7naDaOdA==
x-amz-cf-pop: LAX3-C4
x-cache: Miss from cloudfront
cf-cache-status: HIT
age: 130913
expires: Thu, 01 Feb 2024 17:19:18 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59eeda171bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| app.gumroad.com/l/TraumaToPTSD | 104.16.192.25 | 301 Moved Permanently | 0 B |
URL HTTP/2app.gumroad.com/l/TraumaToPTSD IP104.16.192.25:0
GET /l/TraumaToPTSD HTTP/1.1
Host: app.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 01 Feb 2023 17:19:15 GMT
content-type: text/html; charset=utf-8
location: https://universaltreehc.gumroad.com/l/TraumaToPTSD
strict-transport-security: max-age=31536000
x-revision: a5a4f12c3e55
x-gr: PROD
cache-control: no-cache
x-request-id: 59e50f56-e406-4908-bb7d-2aae35e7f2ba
x-runtime: 0.020170
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
content-security-policy: default-src https 'self'; child-src * data: blob:; connect-src 'self' bam.nr-data.net www.dropbox.com api.dropboxapi.com s3.amazonaws.com/gumroad s3.amazonaws.com/gumroad/ gumroad-public-storage.s3.amazonaws.com gumroad-public-storage.s3.amazonaws.com/ s3.amazonaws.com/gumroad-public-storage s3.amazonaws.com/gumroad-public-storage/ www.google.com www.gstatic.com *.facebook.com *.facebook.net *.google-analytics.com *.g.doubleclick.net www.googletagmanager.com files.gumroad.com/ d1bdh6c3ceakz5.cloudfront.net/ *.braintreegateway.com www.paypalobjects.com *.paypal.com *.braintree-api.com iframe.ly beaconapi.helpscout.net d3hb14vkzrxvla.cloudfront.net app.gumroad.com; font-src * data: blob:; frame-src * data: blob:; img-src * data: blob:; media-src * data: blob:; object-src * data: blob:; script-src 'self' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com js.stripe.com api.stripe.com *.braintreegateway.com *.braintree-api.com www.paypalobjects.com *.paypal.com *.google-analytics.com www.googletagmanager.com optimize.google.com www.googleadservices.com www.google.com www.gstatic.com *.facebook.net *.facebook.com *.newrelic.com *.nr-data.net www.dropbox.com s.ytimg.com cdn.iframe.ly platform.twitter.com *.jwpcdn.com content.jwplatform.com/libraries/3vz4Z4wu.js *.jwpsrv.com blob: 'self' data: gumroad.us3.list-manage.com analytics.twitter.com beacon-v2.helpscout.net app.gumroad.com assets.gumroad.com; style-src 'self' 'unsafe-inline' s.ytimg.com ssl.p.jwpcdn.com optimize.google.com fonts.googleapis.com assets.gumroad.com; worker-src * data: blob:
vary: Origin
set-cookie: _mkra_stck=mysql%3A1675271960.4596946; path=/; max-age=10; expires=Wed, 01 Feb 2023 17:19:25 GMT; HttpOnly; secure; SameSite=None
_gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; domain=.gumroad.com; path=/; expires=Tue, 01 Feb 2033 17:19:15 GMT; HttpOnly; secure; SameSite=None
_gumroad_app_session=oIkWr5iW4DezEpf6iPNQh2NfTedg7w3qs78pe8wedANJzmthMHMV%2BAszziS%2F0YNvzj2jrjN1eOiRysqHbFEE4wZ8nIMyjoD1e%2F%2F6w%2B2PrHkbPc5Zv84NVcCi1cEy3RWA%2FEi7hiSyeF4821kDWmOnk2%2BOMTf8OL%2BOvQFczQDJt0OZMXTeN9fGM3cS2217JD%2FoVldZfY2ivMa1%2BKVQNilCZSDqCer28%2FeTWRDBcr%2FxGjnC1jxusKzMN%2B3B2u9jzSj%2Fgt6dxU4SVbPIlI8JSm%2BaWFCY3E4MZjEmgr17aX2Z6J64DCtA2LWM0lerG9Ea%2Fg%3D%3D--DHs1ifnkwQct8bPQ--r85cfXwHfV8pY0UdzTCHqw%3D%3D; domain=.gumroad.com; path=/; expires=Tue, 01 Feb 2033 17:19:15 GMT; secure; HttpOnly; SameSite=None
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792c59d91a5b1bfa-OSL
X-Firefox-Spdy: h2
|
|
| universaltreehc.gumroad.com/l/TraumaToPTSD | 104.16.192.25 | 200 OK | 0 B |
URL HTTP/2universaltreehc.gumroad.com/l/TraumaToPTSD IP104.16.192.25:0
GET /l/TraumaToPTSD HTTP/1.1
Host: universaltreehc.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=oIkWr5iW4DezEpf6iPNQh2NfTedg7w3qs78pe8wedANJzmthMHMV%2BAszziS%2F0YNvzj2jrjN1eOiRysqHbFEE4wZ8nIMyjoD1e%2F%2F6w%2B2PrHkbPc5Zv84NVcCi1cEy3RWA%2FEi7hiSyeF4821kDWmOnk2%2BOMTf8OL%2BOvQFczQDJt0OZMXTeN9fGM3cS2217JD%2FoVldZfY2ivMa1%2BKVQNilCZSDqCer28%2FeTWRDBcr%2FxGjnC1jxusKzMN%2B3B2u9jzSj%2Fgt6dxU4SVbPIlI8JSm%2BaWFCY3E4MZjEmgr17aX2Z6J64DCtA2LWM0lerG9Ea%2Fg%3D%3D--DHs1ifnkwQct8bPQ--r85cfXwHfV8pY0UdzTCHqw%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:15 GMT
content-type: text/html; charset=utf-8
x-revision: a5a4f12c3e55
x-gr: PROD
cache-control: max-age=0, private, must-revalidate
x-request-id: a12fcf41-985f-45bd-b389-a741e3cf6ae3
x-runtime: 0.154887
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
content-security-policy: default-src https 'self'; child-src * data: blob:; connect-src 'self' bam.nr-data.net www.dropbox.com api.dropboxapi.com s3.amazonaws.com/gumroad s3.amazonaws.com/gumroad/ gumroad-public-storage.s3.amazonaws.com gumroad-public-storage.s3.amazonaws.com/ s3.amazonaws.com/gumroad-public-storage s3.amazonaws.com/gumroad-public-storage/ www.google.com www.gstatic.com *.facebook.com *.facebook.net *.google-analytics.com *.g.doubleclick.net www.googletagmanager.com files.gumroad.com/ d1bdh6c3ceakz5.cloudfront.net/ *.braintreegateway.com www.paypalobjects.com *.paypal.com *.braintree-api.com iframe.ly beaconapi.helpscout.net d3hb14vkzrxvla.cloudfront.net app.gumroad.com; font-src * data: blob:; frame-src * data: blob:; img-src * data: blob:; media-src * data: blob:; object-src * data: blob:; script-src 'self' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com js.stripe.com api.stripe.com *.braintreegateway.com *.braintree-api.com www.paypalobjects.com *.paypal.com *.google-analytics.com www.googletagmanager.com optimize.google.com www.googleadservices.com www.google.com www.gstatic.com *.facebook.net *.facebook.com *.newrelic.com *.nr-data.net www.dropbox.com s.ytimg.com cdn.iframe.ly platform.twitter.com *.jwpcdn.com content.jwplatform.com/libraries/3vz4Z4wu.js *.jwpsrv.com blob: 'self' data: gumroad.us3.list-manage.com analytics.twitter.com beacon-v2.helpscout.net app.gumroad.com assets.gumroad.com; style-src 'self' 'unsafe-inline' s.ytimg.com ssl.p.jwpcdn.com optimize.google.com fonts.googleapis.com assets.gumroad.com; worker-src * data: blob:
vary: Origin
set-cookie: _mkra_stck=mysql%3A1675271960.7710884; path=/; max-age=10; expires=Wed, 01 Feb 2023 17:19:25 GMT; HttpOnly; secure; SameSite=None
_gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D; domain=.gumroad.com; path=/; expires=Tue, 01 Feb 2033 17:19:15 GMT; secure; HttpOnly; SameSite=None
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792c59da2b631bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/packs/js/product-104051856eb6e4f881ca.js | 104.16.192.25 | 200 OK | 0 B |
URL HTTP/2assets.gumroad.com/packs/js/product-104051856eb6e4f881ca.js IP104.16.192.25:0
GET /packs/js/product-104051856eb6e4f881ca.js HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:18 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=40521
etag: W/"5f8ed81eb5c0a621a1bd3703c225b231"
last-modified: Tue, 24 Jan 2023 09:49:47 GMT
via: 1.1 a0fb1c3995ef4da6581cce47df6405c4.cloudfront.net (CloudFront)
x-amz-cf-id: 8xRumxcXCzbsUcbmYtnE-ZSzfUuY1JZcFJLRy_XlUfhXE9nNp9Tmpw==
x-amz-cf-pop: LAX50-P1
x-cache: Miss from cloudfront
cf-cache-status: HIT
age: 716344
expires: Thu, 01 Feb 2024 17:19:18 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59eeda151bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/packs/js/webpack-runtime-aeeaf998c9c4430308bc.js | 104.16.192.25 | 200 OK | 0 B |
URL HTTP/2assets.gumroad.com/packs/js/webpack-runtime-aeeaf998c9c4430308bc.js IP104.16.192.25:0
GET /packs/js/webpack-runtime-aeeaf998c9c4430308bc.js HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:18 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=1881
etag: W/"3b2a8455a42755f9f0e01c65f99c2215"
last-modified: Tue, 24 Jan 2023 02:31:04 GMT
via: 1.1 1a8a4035c43730d51cd59bb3551e25c0.cloudfront.net (CloudFront)
x-amz-cf-id: gsUvZk7YjmHTjK_uufDh-8nmVcSfrJB8Ti41kbGHKPLONJRpP8veeA==
x-amz-cf-pop: LAX50-P1
x-cache: Miss from cloudfront
cf-cache-status: HIT
age: 740905
expires: Thu, 01 Feb 2024 17:19:18 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59eeda1f1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| assets.gumroad.com/assets/i18n/en-bb35d6e08299780df2e4ad67da0069620650d88bf39e5355772ee98a054db924.js | 104.16.192.25 | 200 OK | 0 B |
URL HTTP/2assets.gumroad.com/assets/i18n/en-bb35d6e08299780df2e4ad67da0069620650d88bf39e5355772ee98a054db924.js IP104.16.192.25:0
GET /assets/i18n/en-bb35d6e08299780df2e4ad67da0069620650d88bf39e5355772ee98a054db924.js HTTP/1.1
Host: assets.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:18 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=327425
etag: W/"9edb97f2f2a98062959d02c16b8069d3"
last-modified: Tue, 31 Jan 2023 15:09:38 GMT
via: 1.1 8988ac4ba052e2403132359fee301d5e.cloudfront.net (CloudFront)
x-amz-cf-id: SOyyK1DxifpEAYtJtyt2-I1hi_SH_FjdKwn-cqh-uHjHpKoFvi9AZA==
x-amz-cf-pop: ORD56-P7
x-cache: Miss from cloudfront
cf-cache-status: HIT
age: 92177
expires: Thu, 01 Feb 2024 17:19:18 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59eeda201bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| universaltreehc.gumroad.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js | 104.16.192.25 | 200 OK | 0 B |
URL HTTP/2universaltreehc.gumroad.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP104.16.192.25:0
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: universaltreehc.gumroad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/l/TraumaToPTSD
Cookie: _gumroad_guid=883bec72-8f40-4195-ba30-2f3a6cad609e; _gumroad_app_session=4U0LHdy%2FB0LALM%2F6REqoE4Pz8pAqblx3BbQCXAR0NMgpfukCxy88zLESlc2sGckZNaHu%2F%2B%2FYs9WPvf36vkOsISSmBcpanFnZrKOqApYAGYrrfP3BiZCZK7fWJWoEUWbbq9ythpf9XUtl75FLeuq6nhOawcl2GrW4i7Riekc5AGtquQ95gQWYj%2FtbVzYsNeSaB1k6ZkXlr0cHbKxnKT2y6RInga9PwXA9EGGHU05nY2Z3JfebZ%2B%2B%2B6a4BMYao1Qt7YH%2BPQ06zkX8dMTTq8ZQ%2Fb%2Bm8utH5QnjvFkDPaHEx3mi4KEybeXvNLOaXPg294w%3D%3D--zRP1d0%2B2Bykntjzs--Hx%2Fe2J05jfxbMk%2B1gEVyag%3D%3D; _mkra_stck=mysql%3A1675271960.7710884
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:15 GMT
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 14:59:41 GMT
etag: W/"63d7db5d-302c"
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dc9e4a1bfa-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 03 Feb 2023 17:19:15 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 | 104.16.56.101 | 200 OK | 0 B |
URL HTTP/2static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 IP104.16.56.101:0
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://universaltreehc.gumroad.com
Connection: keep-alive
Referer: https://universaltreehc.gumroad.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:19:16 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c59dd29d40b69-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|