Overview

URL bariatric-club.net/?p=26295
IP156.67.72.142
ASNHostinger International Limited
Location United States
Report completed2022-09-23 06:27:33 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-23 2 bariatric-club.net/?p=26295 Phishing
2022-09-23 2 bariatric-club.net/wp-content/plugins/visitors-traffic-real-time-statistics (...) Phishing
2022-09-23 2 bariatric-club.net/wp-content/plugins/native-ads-adnow/public/js/adnow-widg (...) Phishing
2022-09-23 2 bariatric-club.net/wp-content/plugins/taqyeem/js/tie.js Phishing
2022-09-23 2 bariatric-club.net/wp-content/plugins/wp-automatic/js/main-front.js Phishing
2022-09-23 2 bariatric-club.net/wp-content/themes/sahifa/js/postviews-cache.js Phishing
2022-09-23 2 bariatric-club.net/wp-content/themes/sahifa/js/tie-scripts.js Phishing
2022-09-23 2 bariatric-club.net/wp-content/themes/sahifa/js/ilightbox.packed.js Phishing
2022-09-23 2 bariatric-club.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jet (...) Phishing
2022-09-23 2 bariatric-club.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jet (...) Phishing
2022-09-23 2 bariatric-club.net/wp-content/themes/sahifa/js/search.js Phishing
2022-09-23 2 bariatric-club.net/wp-includes/js/wp-emoji-release.min.js Phishing
2022-09-23 2 bariatric-club.net/?p=26295 Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (35)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-22 04:31:50 UTC 142.250.74.72
mnemonic passive DNS z-na.amazon-adsystem.com (2) 6326 2015-03-11 13:02:50 UTC 2022-09-23 06:21:14 UTC 54.230.82.193
mnemonic passive DNS aax-us-east.amazon-adsystem.com (9) 905 2012-05-22 21:02:12 UTC 2022-09-23 06:18:07 UTC 209.54.180.61
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-23 05:06:00 UTC 143.204.55.35
mnemonic passive DNS ocsp.pki.goog (12) 175 2017-06-14 07:23:31 UTC 2022-09-23 04:02:50 UTC 142.250.74.3
mnemonic passive DNS fonts.gstatic.com (2) 0 2014-08-29 13:43:22 UTC 2022-09-23 04:33:31 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS st-n.ads1-adnow.com (1) 130648 2015-12-09 17:24:48 UTC 2022-09-23 03:05:25 UTC 92.223.97.97
mnemonic passive DNS translate.google.com (1) 1156 2012-05-30 01:30:32 UTC 2022-09-22 04:31:50 UTC 142.250.74.46
mnemonic passive DNS r3.o.lencr.org (13) 344 2020-12-02 08:52:13 UTC 2022-09-22 04:32:00 UTC 23.36.77.32
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-23 04:04:38 UTC 93.184.220.29
mnemonic passive DNS ae01.alicdn.com (2) 7254 2015-11-26 10:30:36 UTC 2022-09-23 04:28:57 UTC 23.38.200.42
mnemonic passive DNS affiliate-tools.s3.amazonaws.com (1) 0 2015-05-31 08:27:32 UTC 2022-09-14 20:02:11 UTC 52.217.46.60 Unknown ranking
mnemonic passive DNS translate.googleapis.com (1) 1005 2014-07-21 13:19:59 UTC 2022-09-23 00:13:10 UTC 142.250.74.74
mnemonic passive DNS fls-na.amazon-adsystem.com (2) 5951 2017-01-30 05:01:13 UTC 2022-09-22 23:12:18 UTC 52.94.233.131
mnemonic passive DNS m.media-amazon.com (2) 580 2017-01-30 07:16:30 UTC 2022-09-23 05:46:26 UTC 151.101.85.16
mnemonic passive DNS s3.amazonaws.com (1) 0 2020-05-13 21:01:38 UTC 2022-09-23 00:23:18 UTC 52.217.138.232 Unknown ranking
mnemonic passive DNS stats.wp.com (1) 2711 2017-01-30 05:06:59 UTC 2022-09-22 04:56:16 UTC 192.0.76.3
mnemonic passive DNS region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-22 05:38:43 UTC 216.239.32.36 Domain (google-analytics.com) ranked at: 8401
mnemonic passive DNS ocsp.sca1b.amazontrust.com (2) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.158
mnemonic passive DNS bariatric-club.net (20) 0 2018-12-18 19:08:31 UTC 2022-09-23 06:25:49 UTC 156.67.72.142 Unknown ranking
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-23 04:02:41 UTC 143.204.55.110
mnemonic passive DNS i0.wp.com (2) 3021 2013-09-17 06:14:42 UTC 2022-09-22 04:56:16 UTC 192.0.77.2
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-22 04:34:04 UTC 34.117.237.239
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-23 05:02:25 UTC 34.210.107.213
mnemonic passive DNS c0.wp.com (12) 6988 2018-09-24 15:59:05 UTC 2022-09-22 05:35:22 UTC 192.0.77.37
mnemonic passive DNS www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-23 05:31:45 UTC 142.250.74.174
mnemonic passive DNS ylx-1.com (7) 931694 2017-01-29 20:35:12 UTC 2022-09-21 09:23:33 UTC 185.66.200.221
mnemonic passive DNS st-n.ads3-adnow.com (1) 419213 2015-12-09 15:08:21 UTC 2022-09-21 20:54:08 UTC 92.223.97.97
mnemonic passive DNS ebaaa.xyz (1) 0 2022-01-23 17:19:07 UTC 2022-09-23 02:26:33 UTC 185.66.201.8 Unknown ranking
mnemonic passive DNS cdn-images.mailchimp.com (1) 5284 2013-08-01 03:40:12 UTC 2022-09-22 05:42:30 UTC 54.230.217.92
mnemonic passive DNS fonts.googleapis.com (1) 8877 2014-07-21 13:19:55 UTC 2022-09-23 04:02:55 UTC 142.250.74.10
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-22 14:28:12 UTC 34.120.237.76
mnemonic passive DNS pixel.wp.com (1) 2545 2017-01-30 05:31:40 UTC 2022-09-23 05:34:23 UTC 192.0.76.3
mnemonic passive DNS wms-na.amazon-adsystem.com (2) 17167 2014-03-25 19:35:48 UTC 2022-09-22 20:42:21 UTC 54.230.80.193
mnemonic passive DNS ylx-i.advertica-cdn2.com (2) 193063 2017-12-29 06:36:01 UTC 2022-09-23 02:26:33 UTC 185.66.200.127


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 156.67.72.142

Date UQ / IDS / BL URL IP
2022-11-24 08:43:20 +0000
0 - 0 - 15 bariatric-club.net/?p=3302 156.67.72.142
2022-09-23 06:27:33 +0000
0 - 0 - 13 bariatric-club.net/?p=26295 156.67.72.142
2022-09-15 17:04:02 +0000
0 - 0 - 2 bariatric-club.net/wp-content/uploads/2022/07 (...) 156.67.72.142
2022-09-14 20:01:37 +0000
0 - 0 - 12 bariatric-club.net/?p=13468 156.67.72.142
2022-09-08 05:32:32 +0000
0 - 0 - 13 bariatric-club.net/?p=42778 156.67.72.142

Last 5 reports on ASN: Hostinger International Limited

Date UQ / IDS / BL URL IP
2022-11-26 11:56:19 +0000
0 - 0 - 2 elearningman2.man2palembang.sch.id/__statics/ (...) 151.106.118.185
2022-11-26 11:56:11 +0000
0 - 0 - 1 elearningman2.man2palembang.sch.id/__statics/ (...) 151.106.118.185
2022-11-26 11:26:58 +0000
0 - 0 - 2 www.elearning.man2banjar.com/__statics/gudang (...) 153.92.9.126
2022-11-26 11:23:59 +0000
0 - 0 - 2 elr.manubaba.com/__statics/gudangsoal/files/f (...) 5.181.216.22
2022-11-26 11:14:48 +0000
0 - 0 - 5 blend.lt/css/js/fidel/emcome 45.88.196.247

Last 5 reports on domain: bariatric-club.net

Date UQ / IDS / BL URL IP
2022-11-24 08:43:20 +0000
0 - 0 - 15 bariatric-club.net/?p=3302 156.67.72.142
2022-09-23 06:27:33 +0000
0 - 0 - 13 bariatric-club.net/?p=26295 156.67.72.142
2022-09-15 17:04:02 +0000
0 - 0 - 2 bariatric-club.net/wp-content/uploads/2022/07 (...) 156.67.72.142
2022-09-14 20:01:37 +0000
0 - 0 - 12 bariatric-club.net/?p=13468 156.67.72.142
2022-09-08 05:32:32 +0000
0 - 0 - 13 bariatric-club.net/?p=42778 156.67.72.142

No other reports with similar screenshot



JavaScript

Executed Scripts (60)


Executed Evals (0)


Executed Writes (4)

#1 JavaScript::Write (size: 364, repeated: 1) - SHA256: 62c159682e902c2fd012384196c8944c2942d529a8096fe3f3470e9708ed1dc2

                                        < iframe src = "https://ylx-1.com/bnr_xload.php?section=General&pub=561739&format=160x600&ga=g&xt=166391444448121&xtt=6546085"
width = "160"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
style = "width:160px !important;height:600px !important;" > < /iframe>
                                    

#2 JavaScript::Write (size: 361, repeated: 1) - SHA256: bc20529d9aa39ff765fec40d1dc922b843c55c1adf538228abc2c3a40cdcd627

                                        < iframe src = "https://ylx-1.com/bnr_xload.php?section=General&pub=561739&format=728x90&ga=g&xt=166391444458937&xtt=1190593"
width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
style = "width:728px !important;height:90px !important;" > < /iframe>
                                    

#3 JavaScript::Write (size: 797, repeated: 1) - SHA256: 8651db1d779b603d6d6a7a0dd3155157f8a2598079f2c12bd740ce78445d25d9

                                        < iframe width = "160"
height = "600"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//ebaaa.xyz/87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCGjrijACxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_72210&adApiR=loaded_string_9366735b0bce9d250429df012c0426f88d0bd_2633299_1663914444.8602_37542&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&adApiR=loaded_string_9366735b0bce9d250429df012c0426f88d0bd_2633299_1663914444.8602_37542&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=160&height=600&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=1102648345983&realRef=bUZNbVNXdW9lWmh3dDcvUzBoMklpN1VuQTZQUUluRGZLYmtUZ2VUd3RWbz0=" > < /iframe>
                                    

#4 JavaScript::Write (size: 793, repeated: 1) - SHA256: 0cbcb055822b1e9cee2c0c6d5bddfd49c76fb3e712b4cd48b6cce19a92623cf7

                                        < iframe width = "728"
height = "90"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
src = "//ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCdZAdrrCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_51284&adApiR=loaded_string_119535b0bce9d250429df012c0426f88d0bd_2633299_1663914444.8481_89713&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&adApiR=loaded_string_119535b0bce9d250429df012c0426f88d0bd_2633299_1663914444.8481_89713&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=728&height=90&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=1389744120249&realRef=bUZNbVNXdW9lWmh3dDcvUzBoMklpN1VuQTZQUUluRGZLYmtUZ2VUd3RWbz0=" > < /iframe>
                                    


HTTP Transactions (117)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 06:12:49 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7KmgeZF3FIjsTLQY9pMWgjic1ghrnvW6BUlpz6SyhOSM7xz5LxcvRQ==
Age: 873


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            GET /?p=26295 HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         156.67.72.142
HTTP/1.1 301 Moved Permanently
content-type: text/html
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-length: 707
date: Fri, 23 Sep 2022 06:27:22 GMT
server: LiteSpeed
location: https://bariatric-club.net/?p=26295
platform: hostinger
content-security-policy: upgrade-insecure-requests


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   707
Md5:    1304294c0823ca486542ba408ed761e3
Sha1:   b2a70fb2d810ca13985882e6981f33998823e83e
Sha256: 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5891
Expires: Fri, 23 Sep 2022 08:05:33 GMT
Date: Fri, 23 Sep 2022 06:27:22 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vtyfQXCH3YHaVH4alp70n9c7YnG9D2bVDnFc66YxirqiQAfY7N3nEg==
age: 6728
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:22 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 23 Sep 2022 06:03:22 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 23 Sep 2022 06:24:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mr0D-T3Y20sy9Fbp3nhyfr5E4040fyZkjxgcJ8N-BQhGyJKC9MPZRA==
Age: 1440


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2978
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 06:27:22 GMT
Last-Modified: Fri, 23 Sep 2022 05:37:44 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 66WD8+mHj56aNRhNb+qQ/A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.210.107.213
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bm7T7c+atykXYCOOOIeJkjHKb50=

                                        
                                            GET /embedcode/classic-10_7.css HTTP/1.1 
Host: cdn-images.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.217.92
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Dec 2015 16:52:30 GMT
x-amz-version-id: null
Server: AmazonS3
Content-Encoding: gzip
Date: Fri, 23 Sep 2022 01:25:29 GMT
ETag: W/"ae0fc9b84c30cada1784022044962394"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YOdpxQqBHUqi7uMyF77XGeegkhqhNQm4QLXy4QRuERqnA0SrlDSxvQ==
Age: 18115


--- Additional Info ---
Magic:  ASCII text, with very long lines (398)
Size:   1258
Md5:    c74ba4de1e990be8d3c913034c1ba5b4
Sha1:   67a33e92ecc8312ed6a60ddafe8eb61792d988bc
Sha256: e210f74d985ed4922d3dd7b60092b3daaf1382446438a5fab9aa002da16bf1cd
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "508EAF7E3C79D0E3F8080876CC5AFB292ED5FCCC352349CC3DE17ED93B3CB338"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6125
Expires: Fri, 23 Sep 2022 08:09:28 GMT
Date: Fri, 23 Sep 2022 06:27:23 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/native-ads-adnow/public/css/adnow-widget-admin.css HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Sat, 05 Jan 2019 07:49:44 GMT
etag: "3430-5c306198-dc1b07c7ac83e349;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2561
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (304)
Size:   2561
Md5:    938e1446a1636d2317de1b15f31eedb5
Sha1:   1a3fc70677980a18c036d918d5d2ea8a45f988b7
Sha256: 24c9f38de9c1566dbceac75c959d853e0fc5e9feee1798995d23e2ab096589d6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/taqyeem-buttons/assets/style.css HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Tue, 13 Nov 2018 17:51:36 GMT
etag: "102e-5beb0f28-43b26adc5dcbbd61;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 957
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   957
Md5:    bc48a99617e199a0014da518be17d085
Sha1:   c047ee62777faad12dd64b06b0c28da3f5ae1359
Sha256: 40bed694acaae9ed24520c2350e513068ebcd159fec6215a58accd7db1d27667
                                        
                                            GET /wp-content/plugins/taqyeem/style.css HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Tue, 13 Nov 2018 17:51:35 GMT
etag: "1afb-5beb0f27-2e299130e11816c5;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1502
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1502
Md5:    a7d266cafa34736e0be74938159fe8d7
Sha1:   d49ad442f56e2d11c79c70258815283f0d2447f5
Sha256: c08acbd5574c18622eb3d112a10a5a4eeb0a42cf30565224ae60a4c497f2e04f
                                        
                                            GET /wp-content/plugins/wp-automatic/css/wp-automatic.css HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Mon, 11 Nov 2019 20:52:33 GMT
etag: "a99-5dc9ca11-c160db1b30fa406b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 541
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   541
Md5:    8ace2dd592cce5346093d592914e2dcf
Sha1:   10a75d3b6cc0942b6a832c9d4d2fd164e9cc38d7
Sha256: 05fcbe5b4ed2c9b07908d7e0dfb09da4cfd34eec3b812556bbcccda002dd05a6
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35312D559F10665B977775DC93BD27EBE484B8AEAF9FADA6FF6389DB965D1158"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3101
Expires: Fri, 23 Sep 2022 07:19:04 GMT
Date: Fri, 23 Sep 2022 06:27:23 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/themes/sahifa/style.css HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "3119d-5beb0ed6-9cc4882c575c6cf4;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 34083
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (28229), with CRLF line terminators
Size:   34083
Md5:    c65fc19f99d0a24e013fdebe6537024d
Sha1:   8ac130e8b47956e0b591e77e5af6e63652800c67
Sha256: 0fba8aae773fda16b5725b97c6781053847732052738dad6113e1dc6f33d6eee
                                        
                                            GET /wp-content/themes/sahifa/css/ilightbox/light-skin/skin.css HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Tue, 13 Nov 2018 17:50:22 GMT
etag: "1d1b-5beb0ede-38346f765cf73e89;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1183
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1183
Md5:    c35ff7f5126862905ea0d6d3a9c44148
Sha1:   47cd325768093be1619cb00ab1e80bdd638c7ae0
Sha256: 64b2c96c6655c7b3073a7b572ae2c456f756eccbd3c5b668df1fd41579649b94
                                        
                                            GET /wp-content/plugins/visitors-traffic-real-time-statistics/js/front.js HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Thu, 20 Jan 2022 14:46:38 GMT
etag: "37a-61e975ce-fb3fb1103e9b9b22;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 355
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   355
Md5:    31ad02480c28b09eff04210574ae76c7
Sha1:   621619fa50d108acac9fd5bc859334ef43f4c364
Sha256: 8c7af7ff985e035bbacf171ecbfe98915dabdc19864b89c3d29217efabab6d7e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/native-ads-adnow/public/js/adnow-widget-public.js HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Sat, 05 Jan 2019 07:49:43 GMT
etag: "c2-5c306197-b5a8bddf433016da;;;"
accept-ranges: bytes
content-length: 194
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   194
Md5:    499d2b25c00da28f6c4978475dcb7254
Sha1:   aeffe23ba7044b6ea29629733dfbf01930022637
Sha256: 854e9b5ab344a8a84f819524e153e7c53fa3c1b0e33963b0709bbbf23087dfb3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/taqyeem/js/tie.js HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Tue, 13 Nov 2018 17:51:33 GMT
etag: "9e8-5beb0f25-2af564a4e47f0ae2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 772
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   772
Md5:    0c6006b90df34ea4a7d0e512af90698e
Sha1:   5b84bc249e979f5372ac891c3e5b9fb36a0460bb
Sha256: 24383e3e67c2d626b1dcd9f82fad18c16bc86cc0fffedf36ff4fc91da3f49f36

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/wp-automatic/js/main-front.js HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Mon, 11 Nov 2019 20:52:30 GMT
etag: "378-5dc9ca0e-403903ad07401769;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 270
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   270
Md5:    3cd3b04d0b54484f43f3294184382485
Sha1:   1391a7ba59c91d643e8e927206d67b9caaacc344
Sha256: 5192e7b4f0862c582f135cad9cd561cf21a2f571372981a3ec67a3ea9d46c099

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /kf/HTB1bf4ahYZnBKNjSZFG762t3FXa1/EN_725_90.png HTTP/1.1 
Host: ae01.alicdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.38.200.42
HTTP/2 200 OK
content-type: image/webp
                                        
access-control-allow-origin: *
last-modified: Sun, 10 Jul 2022 09:40:53 GMT
server: Akamai Image Manager
content-length: 15286
cache-control: private, no-transform, max-age=627612
expires: Fri, 30 Sep 2022 12:47:35 GMT
date: Fri, 23 Sep 2022 06:27:23 GMT
from-req-dns-type: NA
network_info: NO_OSLO_50304
served-from: 23.36.79.28
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 725x90, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   15286
Md5:    6e4a2a04b542b55c46da2d22551ee97f
Sha1:   5d2a16bf137284c1fdae0c693707c0c9fe8c4d64
Sha256: 3b5e1c9d21afacf805a12f336f4a89f18b26949e6956fc92066c086e4979b892
                                        
                                            GET /kf/HTB1Djt5X7KWBuNjy1zj763OypXar/EN_500_500.png HTTP/1.1 
Host: ae01.alicdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.38.200.42
HTTP/2 200 OK
content-type: image/webp
                                        
access-control-allow-origin: *
last-modified: Thu, 16 Jun 2022 19:10:43 GMT
server: Akamai Image Manager
x-serial: 84
x-check-cacheable: YES
content-length: 41552
cache-control: private, no-transform, max-age=967330
expires: Tue, 04 Oct 2022 11:09:33 GMT
date: Fri, 23 Sep 2022 06:27:23 GMT
from-req-dns-type: NA
network_info: NO_OSLO_50304
served-from: 23.36.79.28
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   41552
Md5:    2780806f4d52231dbf000dce11f26c28
Sha1:   bba0456e5335c28863d39dbba485d9e1b1ea37d1
Sha256: 438bd19d77b6d4d583baf9f25dab178025db22ecfa34b6d446a269f6fa70eba7
                                        
                                            GET /gtag/js?id=UA-233695947-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Sep 2022 06:27:23 GMT
expires: Fri, 23 Sep 2022 06:27:23 GMT
cache-control: private, max-age=900
last-modified: Fri, 23 Sep 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42265
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1720)
Size:   42265
Md5:    56e54bf9473c8c3f6148c0f919495620
Sha1:   aa09655810cfa3a497adac6a14959f8beb66c211
Sha256: 5bfe959f5a05f70f7031074ad9bb72129b7c37649f497bec210bf1c5b8a7e626
                                        
                                            GET /wp-content/themes/sahifa/js/postviews-cache.js HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "8b-5beb0ed6-af36a99b909f98b9;;;"
accept-ranges: bytes
content-length: 139
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   139
Md5:    76591f91de8e1ba757c75f2ed652aa08
Sha1:   edccb6c8b113f6d1ad76cdba1a2499e13bae45ae
Sha256: e4146dc61fb3064bed9359d9717141388f3a37b1fe3c2bd179c15776e84aff51

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/sahifa/js/tie-scripts.js HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "13356-5beb0ed6-4569c95454ec70aa;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 22344
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15465), with CRLF line terminators
Size:   22344
Md5:    88df8f2c83b7667906df64d48dbbdb3f
Sha1:   ab1390127815026a71786967b513583103cf3a0d
Sha256: fed30c7538918c060e758ad82f60a8e2613c66f43a9eb2dd657ab6fb253bb3dc

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/sahifa/js/ilightbox.packed.js HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "12cdc-5beb0ed6-e9f10cd9f667a7b4;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 21866
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65336)
Size:   21866
Md5:    c07d37dda40da01a199ee0894ccaa9a7
Sha1:   7f27ac97daea06c5930efd8458e2f2b496198f92
Sha256: 26b5025e8458ea724e57c5c2ae6c7579c32302d9adbb2a1bb983771ea5624b99

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Thu, 20 Jan 2022 14:46:35 GMT
etag: "2317-61e975cb-1a4697ce59ea9a55;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2887
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8983), with no line terminators
Size:   2887
Md5:    36b1a92c39eadea655a54d658857f049
Sha1:   d007530eb0a8e73702ab9a314eaf66a9fcd2e253
Sha256: 6fc616bf8b2baa36aa9a9d6f606c715faf5fd7cd677b6732a1bf536eedcf56c1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Thu, 20 Jan 2022 14:46:35 GMT
etag: "925-61e975cb-2261a9db7f1779d3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 899
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2341), with no line terminators
Size:   899
Md5:    566f157e1247f5d57533369ce7c5ddae
Sha1:   3f54f6a0e4ab28c0634763cf671512a1a497523f
Sha256: 1dc2bcbe63aaaac5d4c0108cf1f7987ce06f92999d456a37974522aaf40af62e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/sahifa/js/search.js HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Tue, 13 Nov 2018 17:50:14 GMT
etag: "3aa2-5beb0ed6-53728ffa1a4bd05e;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3357
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   3357
Md5:    ae99fac98a59ca9c3b3c3dac035bd8d7
Sha1:   bfb03ca0cd02883572908e1c9cbf3b4dcaeb6584
Sha256: 738e78f9c6813d5d6444f10bc1e18f8f53a960b0c78de4b0d04f355981be0019

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/?p=26295
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Fri, 30 Sep 2022 06:27:23 GMT
last-modified: Thu, 20 Jan 2022 14:46:07 GMT
etag: "4705-61e975af-dc8dbca5ca32594a;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4499
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15224)
Size:   4499
Md5:    9336a67615b8765497b6efb3b0ce86af
Sha1:   8e9f93d0e91889a28040f9f8f8d2acf71a0acdbb
Sha256: 4834743cf8467e0159799d7c291fe7ef0db3d96323b60fe1bccdaa7d932a7de3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2018/11/icons-3.jpg HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         156.67.72.142
HTTP/2 404 Not Found
content-type: text/html
                                        
last-modified: Tue, 05 Jan 2021 12:14:52 GMT
etag: "999-5ff4583c-8a32e12e0ea81fed;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 912
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
platform: hostinger
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (355)
Size:   912
Md5:    8a204ca9bcb961b8eb0270d9f55b924b
Sha1:   16481e8337acf5b7bb8548d0e0da2e95fde325d3
Sha256: 759a05cc8383f275f7e32294ae2471f3c3a1571aa5d4d95e043cd9b4bfbf66ee
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p/jetpack/10.5/_inc/build/related-posts/related-posts.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5644), with no line terminators
Size:   2201
Md5:    8495a40661d2a34b928ae067eab53323
Sha1:   dbff9655cc11919e2306fa70be54a959d2660544
Sha256: c8f1bb7559284ce2527d09721a6bce7315fd3434bc6e02116d4574dfe46bdf0c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "995FE21ED9940890A2FFC721EF92BDC80BD1B8F54FA18FADC72AFB4DE2D3121A"
Last-Modified: Thu, 22 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20856
Expires: Fri, 23 Sep 2022 12:15:00 GMT
Date: Fri, 23 Sep 2022 06:27:24 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "995FE21ED9940890A2FFC721EF92BDC80BD1B8F54FA18FADC72AFB4DE2D3121A"
Last-Modified: Thu, 22 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18019
Expires: Fri, 23 Sep 2022 11:27:43 GMT
Date: Fri, 23 Sep 2022 06:27:24 GMT
Connection: keep-alive

                                        
                                            GET /s/droidsans/v18/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bariatric-club.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21224
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 23:13:25 GMT
expires: Wed, 20 Sep 2023 23:13:25 GMT
cache-control: public, max-age=31536000
age: 198839
last-modified: Tue, 19 Apr 2022 18:04:18 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 21224, version 1.0\012- data
Size:   21224
Md5:    13bdfb843f942ccd9f485eb6c0bc1934
Sha1:   2bad44362ff7569f24f2a3df2521b27a97ec1297
Sha256: 7a291479495fbb281655d5e870c6d118dc6b7ed18e8c235aef5974c1e9de4e6c
                                        
                                            GET /s/droidsans/v18/SlGWmQWMvZQIdix7AFxXmMh3eDs1Zw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bariatric-club.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22376
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 14:52:19 GMT
expires: Thu, 21 Sep 2023 14:52:19 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:25:01 GMT
age: 142505
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22376, version 1.0\012- data
Size:   22376
Md5:    e6af16165f9bfda6aafd0088b8c01daa
Sha1:   c9c0ee8309619643e65ba1b22bfffcd1a7ca1e51
Sha256: e803cd8c5031ac6b0d099a2d96ba1c3ee44782649a7f7c6f0d09b6410d93e216
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p/jetpack/10.5/_inc/build/widgets/google-translate/google-translate.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Tue, 04 Jan 2022 22:15:08 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (822), with no line terminators
Size:   859
Md5:    d8e587a8490b5a027f34bfde2a3a256a
Sha1:   f69f3ca9aadc22364c6c2dc0073924782c14f085
Sha256: 760661cdaf0418853c28a137c96951c15b37b553feecbf9bf1142d1a2fb97a07
                                        
                                            GET /eg/dod/en/728x90/img0000273.gif HTTP/1.1 
Host: affiliate-tools.s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.217.46.60
HTTP/1.1 404 Not Found
Content-Type: application/xml
                                        
x-amz-request-id: 9BDEBS9GQK60FTTS
x-amz-id-2: qnOCgPyIAPU27SyJj5yyYy1dL9Hpuo8RwQWIDPm9LA+ChdzMuBGrqE7AjOIl0lOMisQGRocToRU=
Transfer-Encoding: chunked
Date: Fri, 23 Sep 2022 06:27:23 GMT
Server: AmazonS3


--- Additional Info ---
Magic:  XML 1.0 document text\012- XML document, ASCII text
Size:   305
Md5:    acdb1434d8850c60881c6008239be3ce
Sha1:   1e1043e441888766b0eef5ab83b1b5ea4c167f07
Sha256: 230e567f184c6948708dd639553f894ac1fbfe008211c62b27460891f4f3e442
                                        
                                            GET /downloads.mailchimp.com/js/mc-validate.js HTTP/1.1 
Host: s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.217.138.232
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: jmL9rdlbN7DjSJkjOOkq0MjJiNSj6ixlH1srG7qxIjvcrwNyN8q550+fcIrcNW2lB8pShfHT4+Y=
x-amz-request-id: 9BD5035S4AKVJZ7T
Date: Fri, 23 Sep 2022 06:27:25 GMT
Last-Modified: Mon, 20 Aug 2018 17:42:38 GMT
ETag: "6465dd4a8331265e6629cd069e03504c"
Cache-Control: public,max-age=2592000
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 143249


--- Additional Info ---
Magic:  ASCII text, with very long lines (32132)
Size:   143249
Md5:    6465dd4a8331265e6629cd069e03504c
Sha1:   581e1ae78452c7433d842af8e83afcebe36f17a6
Sha256: b15aceb04dbf5604df5617cfe984f48479cb131c1df02825d1c24e9f35d01857
                                        
                                            GET /e-202238.js HTTP/1.1 
Host: stats.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Mon, 11 Sep 2023 07:31:45 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2690)
Size:   2987
Md5:    9f409cdc9d77b01eb7a8256278883970
Sha1:   98c47d838098cf7bd468fdad4b494f648bfc0388
Sha256: e51981b99d804b5e7a722e4d174ed49df41a9383b0de74be8a55743072f70606
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9297
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 06:27:24 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9297
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 06:27:24 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9297
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 06:27:24 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9297
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 06:27:24 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b30784-fdab-4361-be4c-cde3457de8cc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9571
x-amzn-requestid: a6825487-dc32-4129-ae63-2aad2bc90833
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4ZDRHVDIAMFoNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd547-0669874227a8c7c60b4fb4e3;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:36:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: GDOiSF2tQYYM1g-HzrOGYRdZhi97vmzrVEGKtwAKVsrd_NtmOUMDFA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:01:51 GMT
age: 30333
etag: "9dc2210a6c1d7025080692690f8cf1b064e7af9b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9571
Md5:    31f182a35c2946cfc0286689b7124c36
Sha1:   9dc2210a6c1d7025080692690f8cf1b064e7af9b
Sha256: 33fbee038d8988be37a223f1b7f3716dcb2473512161cc4dd8d5229d2868c47e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F155952bd-256a-4103-9017-437efcfb03bf.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7005
x-amzn-requestid: c805d882-7a00-4abd-a239-d8313d7df0c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4aBwEaMIAMF09A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd6d7-6d6a417f10c9628a16d438e1;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:42:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7edV0FJytVSpHH-WkCiYzhW1JP4L6i6bpPCq9MTxPdhwFQTryf06BQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 21:53:16 GMT
age: 30848
etag: "4584bff61bf4d5c9b8fd3b97c048a8e6975e4323"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7005
Md5:    1985a957e6bc0c15d8489fa731e7f14e
Sha1:   4584bff61bf4d5c9b8fd3b97c048a8e6975e4323
Sha256: 9f3e1fd6e18d85d4f6645d077da643a3bc2cca611d5e85f534ba798102dca243
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ec986e3-2bce-4ded-85eb-e88df9893a30.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6505
x-amzn-requestid: bc9cc556-8897-4484-ac07-f18e4f5250ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YvrfiFl4oAMF_Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63295930-7a627b7d7683919e41ca599b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 06:09:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UNlx91pOuttpN-IrQs_g-PRI8C_NmZDKdnOpfayCJ719fa6FwnOIGg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:51 GMT
age: 29733
etag: "265d3e98bcbf5f14f214102279a7911d6fd64048"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6505
Md5:    ff021fa15adb0d3a24158bc00cf0980a
Sha1:   265d3e98bcbf5f14f214102279a7911d6fd64048
Sha256: 211d709fb1851a62f856a78e3b115ef816f78ab9a28f870d48fa3d1912eac16a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56c6b5fd-d351-45b8-9f62-d5052869881a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10822
x-amzn-requestid: 308978c4-679f-4bb6-bfd7-a81dc00ec3db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YoKcMG-kIAMFZKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63265781-03f94c0a385ed28408de81c8;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 23:25:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9fh_DJXLHRaerYmgTGoVX3LRsMIgzf46bn48yzXp8Xdp8WippJExcg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 11:05:21 GMT
age: 69723
etag: "dd94d525ad264856a0fdcb7a4b1faa2d68c3f68b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10822
Md5:    948abf9bedd1bd67010284080ba06d01
Sha1:   dd94d525ad264856a0fdcb7a4b1faa2d68c3f68b
Sha256: 236639cc2279c6f269dd521796a087a40b43b252cb55faf3e4214cbdc8369a62
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10927
x-amzn-requestid: ae562f19-3dd9-42b1-bb98-ab026140506e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YsqHOHguIAMFS7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632823c7-6d4bcabf6879463427e68a50;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 08:09:43 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: u4DgvdhOG7agsl8-aoovMcR029kbfcAk9eoiUiHb-PZuq3RbbFg9Mw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 21:48:51 GMT
age: 31113
etag: "5a69190a9a778a6979e11fafedd43e1031caf8e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10927
Md5:    3b6b51846ec2b7d856b7dc12e4d720f4
Sha1:   5a69190a9a778a6979e11fafedd43e1031caf8e2
Sha256: a497c04d1c9d0be88aa9c288423346e83c6a7b296295387b3b7b855c550492a2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8497
x-amzn-requestid: 8543ac70-48ab-4523-856f-5d5fa1191c97
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yin-pEryoAMFTfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324205d-660bba3f655f940d143bc437;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 07:06:05 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: e9KUFhjuFMzjuh37rFiNKaMNVaGZwPGBkLrv0zgfSTT7dCIuWj4G9Q==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:27 GMT
age: 29757
etag: "d47db5fcd83023b4a8de40a47d4510e183de387a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8497
Md5:    7606ff88f05062b66970d9805f38987a
Sha1:   d47db5fcd83023b4a8de40a47d4510e183de387a
Sha256: 20f89dd859e5715e27c289040fac6a121248e5b6c06da0a7f186984ffb029eb2
                                        
                                            GET /g.gif?v=ext&j=1%3A10.5&blog=154371492&post=26295&tz=1&srv=bariatric-club.net&host=bariatric-club.net&ref=&fcp=2189&rand=0.5006623249724276 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:24 GMT
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Sep 2022 05:34:51 GMT
expires: Fri, 23 Sep 2022 06:34:51 GMT
cache-control: public, max-age=3600
age: 3153
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18670)
Size:   3619
Md5:    897ba9a21d9625286674da769dacc2e2
Sha1:   84b4923ab7dee562395160824d53496314499b77
Sha256: 696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Fri, 23 Sep 2022 04:41:09 GMT
expires: Fri, 23 Sep 2022 06:41:09 GMT
cache-control: public, max-age=7200
age: 6375
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /g/collect?v=2&tid=G-9JX488NS09&gtm=2oe9l0&_p=1462754752&gdid=dZTNiMT&cid=295006717.1663914444&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663914443&sct=1&seg=0&dl=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D26295&dt=Adobe%20Photoshop%20CS3%20Serial%20Key%20%5B2022-Latest%5D%20%E2%9C%94%20-%20Free%20Bariatric%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bariatric-club.net
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://bariatric-club.net
date: Fri, 23 Sep 2022 06:27:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 06:27:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /widgets/onejs?MarketPlace=US&adInstanceId=69ec0ab0-b0f8-4d2d-a148-b068e44a6822 HTTP/1.1 
Host: z-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.82.193
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
                                        
content-length: 8190
date: Fri, 23 Sep 2022 06:27:25 GMT
server: Server
content-encoding: gzip
charset: UTF-8
access-control-allow-origin: *
cache-control: public,max-age=300,s-maxage=300,no-transform
expires: Fri, 23 Sep 2022 06:32:25 GMT
pragma: Public
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: x4cJpGLT85HJ9STcsHyvhfxlKzTuDnH0zXGjMxSGkLI0GAwyMq109g==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25409), with no line terminators
Size:   8190
Md5:    9b07641ea22e6440da1cff0af085b740
Sha1:   41285288ad5c5071d4920bd11ba046e182106c9f
Sha256: e276545f3a1b0a815723b55b4897d336a92c2fc2ac65ad0fb250b55927cb7319
                                        
                                            GET /widgets/onejs?MarketPlace=US&adInstanceId=f712473a-b631-4fe7-9692-6d0454958aef HTTP/1.1 
Host: z-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.82.193
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
                                        
content-length: 8205
date: Fri, 23 Sep 2022 06:27:25 GMT
server: Server
content-encoding: gzip
charset: UTF-8
access-control-allow-origin: *
cache-control: public,max-age=300,s-maxage=300,no-transform
expires: Fri, 23 Sep 2022 06:32:25 GMT
pragma: Public
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FRI_fRltn8e3szoT8auzwtoOGI1vBFpWsypfP-0dqjbxQ2N9agI4gg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25474), with no line terminators
Size:   8205
Md5:    6ee5385341a182b033c18396b5c7cda0
Sha1:   832f8d2f91ec6feb1209113b72f108943e4b0dc5
Sha256: fe171f6515c53f1286c7b4cf04436bc4af5d47d5c28c1f06a3b24eeafad55f74
                                        
                                            GET /trk/?3f77bb5fd6d9488823242800e9cf230e HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/show.php?u67371663914445=true&ad=673873&f=728x90&a=625611&cri=0&s=YzY3MmFlZTc2YWM0OGU1NjhlY2ZlODE0ZTY0NDliOTQ=&u=561739&si=694711613&di=30393698&ci=16&h=3f77bb5fd6d9488823242800e9cf230e&cc=NO&https=1&useAf=loaded_string_119535b0bce9d250429df012c0426f88d0bd_2633299_1663914444.8481_89713&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv
Cookie: used_ad2633299=1; total_impressions=1; cpa_673873=728x90_694711613_0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         185.66.200.221
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:25 GMT
content-length: 43
last-modified: Fri, 23 Sep 2022 06:27:25 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /bnr_xload.php?section=General&pub=561739&format=728x90&ga=g&xt=166391444458937&xtt=1190593 HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         185.66.200.221
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:25 GMT
expires: Fri, 23 Sep 2022 06:27:24 GMT
last-modified: Fri, 23 Sep 2022 06:27:24 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
set-cookie: used_ad2633299=1; expires=Sat, 24-Sep-2022 04:00:00 GMT; Max-Age=77555; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None total_impressions=1; expires=Sat, 24-Sep-2022 04:00:00 GMT; Max-Age=77555; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None cpa_673873=728x90_694711613_0; expires=Sun, 23-Oct-2022 06:27:25 GMT; Max-Age=2592000; path=/; domain=ylx-1.com; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1380
Md5:    376450d74e28493b187de1c9c5028b23
Sha1:   f9a4cf385dba62e1ba893715610b8b3440ae16b7
Sha256: 037341f7016b2750c2d57590775f56f0831092a00fd072f4393308d422212ed3
                                        
                                            GET /bnr_xload.php?section=General&pub=561739&format=160x600&ga=g&xt=166391444448121&xtt=6546085 HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         185.66.200.221
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:25 GMT
expires: Fri, 23 Sep 2022 06:27:24 GMT
last-modified: Fri, 23 Sep 2022 06:27:24 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
set-cookie: used_ad2633299=1; expires=Sat, 24-Sep-2022 04:00:00 GMT; Max-Age=77555; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None total_impressions=1; expires=Sat, 24-Sep-2022 04:00:00 GMT; Max-Age=77555; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None cpa_673873=160x600_694711613_0; expires=Sun, 23-Oct-2022 06:27:25 GMT; Max-Age=2592000; path=/; domain=ylx-1.com; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1843
Md5:    1bbdb82b1799861df01a2efad87fd0fd
Sha1:   df6983a93cec8f1cd34c21f9fd75169e5b0afab8
Sha256: 881baebb6e8378d3c429e98c1341ce17f44b95ae3b671b8accb2c2292679e1df
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "34553AF5B56704EEE7C3E120A22FE0D38EB7558BB825E20FD5B0DA3B3B48A9EA"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3646
Expires: Fri, 23 Sep 2022 07:28:11 GMT
Date: Fri, 23 Sep 2022 06:27:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D61895B25F67239B349C1E4441F160C41C2E4F4B6D8E47AF36CBA7F76456DEE4"
Last-Modified: Wed, 21 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6016
Expires: Fri, 23 Sep 2022 08:07:41 GMT
Date: Fri, 23 Sep 2022 06:27:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8BDE77AEFD6E0F17A0D048B5948B380A01841E25F27BE50139D1CBF15728C302"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2341
Expires: Fri, 23 Sep 2022 07:06:26 GMT
Date: Fri, 23 Sep 2022 06:27:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8BDE77AEFD6E0F17A0D048B5948B380A01841E25F27BE50139D1CBF15728C302"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18196
Expires: Fri, 23 Sep 2022 11:30:41 GMT
Date: Fri, 23 Sep 2022 06:27:25 GMT
Connection: keep-alive

                                        
                                            GET /x/getad?src=308&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22placement%22%3A%22adunit0%22%2C%22enable_interest_ads%22%3A%22true%22%2C%22div_name%22%3A%22amzn-assoc-ad-f712473a-b631-4fe7-9692-6d0454958aef%22%2C%22tracking_id%22%3A%22e038-20%22%2C%22fallback_mode%22%3A%7B%22type%22%3A%22search%22%2C%22value%22%3A%22weight%20loss%22%7D%2C%22ad_mode%22%3A%22auto%22%2C%22ad_type%22%3A%22smart%22%2C%22marketplace%22%3A%22amazon%22%2C%22region%22%3A%22US%22%2C%22linkid%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22default_category%22%3A%22All%22%2C%22design%22%3A%22text_links%22%2C%22rows%22%3A%224%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22e038-20%22%2C%22slotNum%22%3A1%2C%22ead%22%3A4%7D&u=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D26295&jscb=amzn_assoc_jsonp_callback_adunit0_1 HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         209.54.180.61
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: Server
Date: Fri, 23 Sep 2022 06:27:25 GMT
Content-Length: 75927
Connection: keep-alive
x-amz-rid: XQ0TRPJZ17BAQEVRY6MP
Set-Cookie: ad-id=AyoJ3GJTV0OulGUceJ71ngs; Domain=.amazon-adsystem.com; Expires=Sat, 01-Apr-2023 06:27:25 GMT; Path=/; Secure; HttpOnly; SameSite=None
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size:   75927
Md5:    edc0d51e624a5d551240dfd00c31ebe9
Sha1:   752482fcf8df4a0a132dbf2026d8854c0631dddf
Sha256: d711feaf80b97058c5c79b72a04821cfcab7a2b9aab36e9e7c7804c362942fbe
                                        
                                            GET /panda/20070822/US/img/amzn-widgets-sprite-2x.png HTTP/1.1 
Host: wms-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.80.193
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 41521
date: Mon, 19 Sep 2022 05:48:12 GMT
server: Server
last-modified: Sat, 10 Sep 2022 11:49:45 GMT
etag: "a231-5e85142448793"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 26 Sep 2022 05:48:12 GMT
charset: UTF-8
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L0DAwmhDOEHr48ohlv1q0sidTQ-aNBCgjJHFD1zSU-fx4w6kNxW-Ww==
age: 347954
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 698 x 582, 8-bit/color RGBA, non-interlaced\012- data
Size:   41521
Md5:    d4946b965713962d80a83775b3f533fc
Sha1:   72188ab8119166e4df0812af0b52c3775cbf2db7
Sha256: f45e8d22b5dfa4c04aabcb189e576f5dfe24d9a02d8d43d617ce49c8a4be3fdb
                                        
                                            GET /x/px/RDi82OnxmDMx7S6BVTZ5MJUAAAGDaQeLUgEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICCpNX-M/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w51%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A4%2C%22logType%22%3A%22smart_hide%22%2C%22availableItems%22%3A%5B%5D%2C%22reason%22%3A%22No%20ASIN%20results%20at%20all%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%7D HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         209.54.180.61
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Server
Date: Fri, 23 Sep 2022 06:27:26 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: A4SA8G1RESE1V1YYRC6K
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /x/px/RDi82OnxmDMx7S6BVTZ5MJUAAAGDaQeLUgEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICCpNX-M/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w51%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%22cf6a17050ee10b19ac43f5b4fff6eeb2%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A4%2C%22visibleItemCount%22%3A3%2C%22axfExperiment%22%3A%22%5B%5D%22%2C%22items%22%3A%5B%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B09VPNGG4S%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A0%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08M9L1KG5%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A1%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B0B2L3XKXK%22%2C%22source%22%3A%22Fallbacks%22%2C%22extraInfo%22%3A%7B%7D%2C%22index%22%3A2%7D%5D%2C%22logType%22%3A%22smart_impressions%22%2C%22design%22%3A%22text_links%22%2C%22eperf%22%3A%7B%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%224%22%7D%2C%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%224%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%2C%22totalDocHeight%22%3A7593%2C%22totalDocWidth%22%3A1268%2C%22actualWidth%22%3A660%2C%22actualHeight%22%3A170.5%2C%22atfInFirstLoad%22%3Atrue%2C%22posX%22%3A472.5%2C%22posY%22%3A410.33331298828125%2C%22refUrl%22%3A%22https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D26295%22%7D HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         209.54.180.61
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Server
Date: Fri, 23 Sep 2022 06:27:26 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: 0BWHKB53RDK5H3VE92BP
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 06:27:26 GMT
Last-Modified: Fri, 23 Sep 2022 04:43:42 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: t3Z2BIOOBFBWj4iFfbVOtnyFxw4X_xutprIUydIvtR1YO_mbvFrRGA==
Age: 6224

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 06:27:26 GMT
Last-Modified: Fri, 23 Sep 2022 05:26:22 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: POSi-NWNUeI3aYkEpJdfgt2v24J0HoJoNS_pJAG-nkJu3wxVdCW-Ig==
Age: 3664

                                        
                                            GET /x/getad?src=308&c=100&sz=1x1&apiVersion=2.0&pj=%7B%22placement%22%3A%22adunit0%22%2C%22enable_interest_ads%22%3A%22true%22%2C%22div_name%22%3A%22amzn-assoc-ad-69ec0ab0-b0f8-4d2d-a148-b068e44a6822%22%2C%22tracking_id%22%3A%22e038-20%22%2C%22fallback_mode%22%3A%7B%22type%22%3A%22search%22%2C%22value%22%3A%22weight%20loss%22%7D%2C%22ad_mode%22%3A%22auto%22%2C%22ad_type%22%3A%22smart%22%2C%22marketplace%22%3A%22amazon%22%2C%22region%22%3A%22US%22%2C%22linkid%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22default_category%22%3A%22All%22%2C%22viewerCountry%22%3A%22NO%22%2C%22textlinks%22%3A%22%22%2C%22debug%22%3A%22false%22%2C%22acap_publisherId%22%3A%22e038-20%22%2C%22slotNum%22%3A0%2C%22ead%22%3A8%7D&u=https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D26295&jscb=amzn_assoc_jsonp_callback_adunit0_0 HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         209.54.180.61
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: Server
Date: Fri, 23 Sep 2022 06:27:25 GMT
Content-Length: 127116
Connection: keep-alive
x-amz-rid: 85TRCDY3MPBVSXPXWQK1
Set-Cookie: ad-id=A5nN8OEtlk4Vj50JqEL1orE; Domain=.amazon-adsystem.com; Expires=Sat, 01-Apr-2023 06:27:25 GMT; Path=/; Secure; HttpOnly; SameSite=None
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (65536), with no line terminators
Size:   127116
Md5:    9f83d66d539e94f3d212c5449f1afc79
Sha1:   8e6f4a90c8257c67936328a93c71811da5c962a3
Sha256: 82ac8e8d27d2a97c312233b025ac9af1502e8950f2df1992c5326c69be3b8332
                                        
                                            GET /aff/pub_upk7x1.png?1480419365 HTTP/1.1 
Host: ylx-i.advertica-cdn2.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.66.200.127
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:25 GMT
last-modified: Tue, 29 Nov 2016 11:36:05 GMT
etag: W/"583d6825-5642"
expires: Sun, 23 Oct 2022 06:27:25 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 728 x 90, 8-bit colormap, non-interlaced\012- data
Size:   21861
Md5:    c7ccbe4d2fac0aa6f9be62ec3835c46e
Sha1:   195eab4b01542efa220ce3261256d79bfeb0ded7
Sha256: 7117b5049764d7fe4ad4aa5aff9907b67f8767745eb3684a270e48baa67f7e05
                                        
                                            GET /x/px/RDi82OnxmDMx7S6BVTZ5MJUAAAGDaQeLUgEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICCpNX-M/%7B%22adViewability%22:[%7B%22above_the_fold%22:true,%22topPos%22:0.4387646432374867,%22leftPos%22:0.37109375%7D]%7D&cb=7241294 HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         209.54.180.61
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Server
Date: Fri, 23 Sep 2022 06:27:26 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: QGWZ8TN8AJVCHZT8R5ZH
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /panda/20070822/US/img/amzn-nsa-sprite-2x.png HTTP/1.1 
Host: wms-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.80.193
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 4335
date: Fri, 23 Sep 2022 02:11:40 GMT
server: Server
last-modified: Sat, 10 Sep 2022 11:50:20 GMT
etag: "10ef-5e851446374d3"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 30 Sep 2022 02:11:40 GMT
charset: UTF-8
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fGUSqfGRJ54WOR5OZYaGykS338F92iJsCmF97S7y-uKP6ejqaQ9HQg==
age: 15346
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 530 x 150, 8-bit colormap, non-interlaced\012- data
Size:   4335
Md5:    77716f7d4f54355bbb67e19ab8f24309
Sha1:   34380b3971e6c940da2fadb00a7dbc7f2ca7cbe6
Sha256: 3d363721e733cd455560f59c74cffdb28148623c7c716a23403bd6b85696b4fa
                                        
                                            GET /1/action-impressions/1/OE/associates-adsystems/action/cm_:onejs_load_evt@v=3320,onejs_exec_time@v=5,aax_load_time@v=669,aax_load_time_smart@v=669?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=9597f889-4cb4-40ce-9aa4-78d93c292364&session=85ccaa43-4f13-4c10-a19c-921675e3adc1 HTTP/1.1 
Host: fls-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.94.233.131
HTTP/1.1 204 No Content
Content-Type: text/plain
                                        
x-amzn-RequestId: ec37d016-5748-4679-9452-1e7f4b62cf54
Date: Fri, 23 Sep 2022 06:27:25 GMT

                                        
                                            GET /x/px/RCMZIWTfjnhxtBK6bH3pOdQAAAGDaQeLGwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICAiNp_I/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w41%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A2%2C%22logType%22%3A%22smart_hide%22%2C%22availableItems%22%3A%5B%5D%2C%22reason%22%3A%22Not%20enough%20products%20for%20even%20one%20row%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%7D HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         209.54.180.61
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Server
Date: Fri, 23 Sep 2022 06:27:26 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: M01B6S4DHEBDZH3PCGY3
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /images/I/41XxxkfYJmL._AC_SL115_.jpg HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.16
HTTP/2 200 OK
content-type: image/jpeg
                                        
x-amz-ir-id: 347dd2d8-c0f2-451b-b5ed-7a5ae53dd821
expires: Tue, 02 Sep 2042 15:12:10 GMT
cache-control: max-age=630720000,public
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
access-control-allow-origin: *
last-modified: Wed, 06 Jul 2022 08:49:51 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
date: Fri, 23 Sep 2022 06:27:26 GMT
age: 1350916
x-served-by: cache-iad-kiad7000117-IAD, cache-bma1672-BMA
x-cache: HIT from fastly, MISS from fastly
server-timing: provider;desc="fy"
content-length: 3227
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 92x115, components 3\012- data
Size:   3227
Md5:    3b97ff8660e09d94c7e15fcfae9c101c
Sha1:   8d196d17672744293c568164745b17806d73b744
Sha256: 097e36f117d4d0b42cc16dfe3c760b44f0a2b7348ad60d784879873b25a16ead
                                        
                                            GET /images/I/51STqLRHdKL._AC_SL115_.jpg HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.16
HTTP/2 200 OK
content-type: image/jpeg
                                        
x-amz-ir-id: e02fdbfb-89fe-4489-995b-be21c51e8c38
expires: Thu, 18 Sep 2042 06:27:26 GMT
cache-control: max-age=630720000,public
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
access-control-allow-origin: *
last-modified: Mon, 06 Jun 2022 02:56:13 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
date: Fri, 23 Sep 2022 06:27:26 GMT
age: 0
x-served-by: cache-iad-kiad7000172-IAD, cache-bma1672-BMA
x-cache: MISS from fastly, MISS from fastly
server-timing: provider;desc="fy"
content-length: 4409
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 115x115, components 3\012- data
Size:   4409
Md5:    e29088c830eed7ca8b4e415208a8f352
Sha1:   ca18b5f10d19e216666a88d987830bdb68284843
Sha256: acd7a0c584927dc2ffbfba3b5cbf177d898293bed159d5527944cc254c606aec
                                        
                                            GET /1/action-impressions/1/OE/associates-adsystems/action/cm_:wdgt_load_time@v=4506,wdgt_load_time_NO@v=4507,wdgt_load_time_smart@v=4507?marketplace=US&service=AmazonWidgets&method=Widgets_Render_Time&marketplaceId=ATVPDKIKX0DER&requestId=e2be9ab9-6c66-40e1-9a33-72c6274b81ff&session=2943a3fa-41c6-4172-93fa-375b81c17f63 HTTP/1.1 
Host: fls-na.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.94.233.131
HTTP/1.1 204 No Content
Content-Type: text/plain
                                        
x-amzn-RequestId: 74a5e5f7-bfad-4fd1-b2fc-66c432cb0373
Date: Fri, 23 Sep 2022 06:27:26 GMT

                                        
                                            GET /x/px/RCMZIWTfjnhxtBK6bH3pOdQAAAGDaQeLGwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICAiNp_I/?assoc_payload=%7B%22regionId%22%3A%221%22%2C%22ref%22%3A%22sm_n_au_dka_NO_%22%2C%22adMode%22%3A%22auto%22%2C%22linkCode%22%3A%22w41%22%2C%22trackingId%22%3A%22e038-20%22%2C%22linkId%22%3A%2204140cffc324c447b149b020894f0f2f%22%2C%22country%22%3A%22NO%22%2C%22deviceType%22%3A%22BROWSER%22%2C%22searchBarPresent%22%3Afalse%2C%22defaultCategory%22%3A%22All%22%2C%22defaultSearchPhrase%22%3A%22%22%2C%22givenWidth%22%3A%22auto%22%2C%22givenHeight%22%3A%22auto%22%2C%22givenRows%22%3A2%2C%22visibleItemCount%22%3A2%2C%22axfExperiment%22%3A%22%5B%5D%22%2C%22slotNum%22%3A%220%22%2C%22items%22%3A%5B%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B08M9L1KG5%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A0%2C%22extraInfo%22%3A%7B%7D%7D%2C%7B%22itemType%22%3A%22ASIN%22%2C%22id%22%3A%22B0B2L3XKXK%22%2C%22source%22%3A%22Fallbacks%22%2C%22row%22%3A0%2C%22column%22%3A1%2C%22extraInfo%22%3A%7B%7D%7D%5D%2C%22logType%22%3A%22smart_impressions%22%2C%22design%22%3A%22grid%22%2C%22eperf%22%3A%7B%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%228%22%7D%2C%22eCTR%22%3A%220.00553%22%2C%22eOPC%22%3A%220.0%22%2C%22eeCPM%22%3A%222.0%22%2C%22bidComputationCode%22%3A%22V1-CTR6-OPC5-BFC2%22%2C%22asinAttributes%22%3A%22%5B%5D%22%2C%22ead%22%3A%228%22%2C%22livePoolPCScore%22%3A-1%2C%22livePoolModelVersion%22%3A%22LivePoolV1%22%2C%22contXPCScore%22%3A-1%2C%22contXModelVersion%22%3A%22ContXV1%22%2C%22totalDocHeight%22%3A7693%2C%22totalDocWidth%22%3A1268%2C%22actualWidth%22%3A500%2C%22actualHeight%22%3A282%2C%22atfInFirstLoad%22%3Afalse%2C%22posX%22%3A472.5%2C%22posY%22%3A6972.033203125%2C%22refUrl%22%3A%22https%3A%2F%2Fbariatric-club.net%2F%3Fp%3D26295%22%7D HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         209.54.180.61
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Server
Date: Fri, 23 Sep 2022 06:27:26 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: NKG24GSAGXSGAK57K7RD
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /x/px/RCMZIWTfjnhxtBK6bH3pOdQAAAGDaQeLGwEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICAiNp_I/%7B%22adViewability%22:[%7B%22above_the_fold%22:false,%22topPos%22:7.427050053248136,%22leftPos%22:0.37109375%7D]%7D&cb=8081945 HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         209.54.180.61
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Server
Date: Fri, 23 Sep 2022 06:27:26 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: 2Q9P6H1189BJ1WHY809R
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /x/px/RDi82OnxmDMx7S6BVTZ5MJUAAAGDaQeLUgEAAAE0AQBOL0EgICAgICAgICAgICBOL0EgICAgICAgICAgICCpNX-M/%7B%22adViewability%22:[%7B%22viewable%22:true%7D]%7D&cb=1560921 HTTP/1.1 
Host: aax-us-east.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         209.54.180.61
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Server
Date: Fri, 23 Sep 2022 06:27:27 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: 3X77ZDNXCBF175VYGHFX
Cache-Control: no-cache
Pragma: no-cache
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /js/a.js HTTP/1.1 
Host: st-n.ads3-adnow.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
last-modified: Mon, 04 Apr 2022 07:22:22 GMT
etag: W/"624a9cae-157b4"
expires: Fri, 23 Sep 2022 06:28:23 GMT
cache-control: max-age=60
cache: HIT
x-cached-since: 2022-09-23T06:26:33+00:00
x-id: sto5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /show.php?u29861663914445=true&ad=673873&f=160x600&a=781385&cri=0&s=MjQ3MDhhNDgzYjlkYWI2NmM2NTYzYTQ2MmRkMGMxNDQ=&u=561739&si=694711613&di=30393698&ci=16&h=a54f51038eb07af41533c71bc1dda68a&cc=NO&https=1&useAf=loaded_string_9366735b0bce9d250429df012c0426f88d0bd_2633299_1663914444.8602_37542&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/bnr_xload.php?section=General&pub=561739&format=160x600&ga=g&xt=166391444448121&xtt=6546085
Cookie: used_ad2633299=1; total_impressions=1; cpa_673873=728x90_694711613_0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         185.66.200.221
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:25 GMT
expires: Fri, 23 Sep 2022 06:27:25 GMT
last-modified: Fri, 23 Sep 2022 06:27:25 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /?p=26295 HTTP/1.1 
Host: bariatric-club.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         156.67.72.142
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/7.0.33
link: <https://bariatric-club.net/index.php?rest_route=/>; rel="https://api.w.org/", <https://bariatric-club.net/index.php?rest_route=/wp/v2/posts/26295>; rel="alternate"; type="application/json", <https://wp.me/parJ4M-6Q7>; rel=shortlink
x-litespeed-cache-control: public,max-age=604800
x-litespeed-tag: 314_HTTP.200,314_PGSRP,314_post,314_URL.6666cd76f96956469e7be39d750cc7d9,314_Po.26295,314_
etag: "1869758-1663914443;br"
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Sep 2022 06:27:23 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /bnr.php?section=General&pub=561739&format=728x90&ga=g HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.66.200.221
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:24 GMT
expires: Fri, 23 Sep 2022 06:27:24 GMT
last-modified: Fri, 23 Sep 2022 06:27:24 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c/5.8.5/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /p/jetpack/10.5/_inc/build/sharedaddy/sharing.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Tue, 04 Jan 2022 22:15:08 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 23 Sep 2022 06:27:23 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+912; expires=Sun, 22-Sep-2024 06:27:23 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /aff/pub_le6kgi.png?1480419362 HTTP/1.1 
Host: ylx-i.advertica-cdn2.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.66.200.127
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:25 GMT
last-modified: Tue, 29 Nov 2016 11:36:02 GMT
etag: W/"583d6822-8610"
expires: Sun, 23 Oct 2022 06:27:25 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Droid+Sans%3Aregular%2C700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Sep 2022 06:27:23 GMT
date: Fri, 23 Sep 2022 06:27:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /show.php?u67371663914445=true&ad=673873&f=728x90&a=625611&cri=0&s=YzY3MmFlZTc2YWM0OGU1NjhlY2ZlODE0ZTY0NDliOTQ=&u=561739&si=694711613&di=30393698&ci=16&h=3f77bb5fd6d9488823242800e9cf230e&cc=NO&https=1&useAf=loaded_string_119535b0bce9d250429df012c0426f88d0bd_2633299_1663914444.8481_89713&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&ar=aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/bnr_xload.php?section=General&pub=561739&format=728x90&ga=g&xt=166391444458937&xtt=1190593
Cookie: used_ad2633299=1; total_impressions=1; cpa_673873=728x90_694711613_0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         185.66.200.221
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:25 GMT
expires: Fri, 23 Sep 2022 06:27:25 GMT
last-modified: Fri, 23 Sep 2022 06:27:25 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /p/jetpack/10.5/css/jetpack.css HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Tue, 04 Jan 2022 22:15:08 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c/5.8.5/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c/5.8.5/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /p/jetpack/10.5/_inc/build/photon/photon.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c/5.8.5/wp-includes/js/wp-embed.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Wed, 06 Jan 2021 15:29:24 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c/5.8.5/wp-includes/css/dist/block-library/style.min.css HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Wed, 01 Sep 2021 04:05:58 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c/5.8.5/wp-includes/js/jquery/jquery.min.js HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /bariatric-club.net/wp-content/uploads/2018/11/ddD.jpg?fit=100%2C100&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.0.77.2
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:24 GMT
x-nc: MISS arn 2
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /87d1c6c507/4f9c843bb0/?placementName=ROTATOR&type=n&cv=XrdpCdkpGrrdriCGjrijACxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_72210&adApiR=loaded_string_9366735b0bce9d250429df012c0426f88d0bd_2633299_1663914444.8602_37542&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&adApiR=loaded_string_9366735b0bce9d250429df012c0426f88d0bd_2633299_1663914444.8602_37542&refferer=2257037871_aHR0cHM6Ly9iYXJpYXRyaWMtY2x1Yi5uZXQv&width=160&height=600&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c HTTP/1.1 
Host: ebaaa.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.66.201.8
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:25 GMT
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /p/jetpack/10.5/_inc/social-logos/social-logos.min.css HTTP/1.1 
Host: c0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.77.37
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
vary: Accept-Encoding
last-modified: Tue, 30 Jun 2020 14:24:10 GMT
content-encoding: br
expires: Sat, 23 Sep 2023 06:27:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/ads.js HTTP/1.1 
Host: st-n.ads1-adnow.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:23 GMT
last-modified: Wed, 28 Sep 2016 12:50:11 GMT
etag: W/"57ebbc83-93"
expires: Fri, 23 Sep 2022 06:28:23 GMT
cache-control: max-age=60
cache: HIT
x-cached-since: 2022-09-23T06:27:12+00:00
x-id: sto5-up-gc10
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /bnr.php?section=General&pub=561739&format=160x600&ga=g HTTP/1.1 
Host: ylx-1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.66.200.221
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:24 GMT
expires: Fri, 23 Sep 2022 06:27:24 GMT
last-modified: Fri, 23 Sep 2022 06:27:24 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /bariatric-club.net/wp-content/uploads/2018/11/ddD.jpg?fit=32%2C32&ssl=1 HTTP/1.1 
Host: i0.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bariatric-club.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.0.77.2
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Fri, 23 Sep 2022 06:27:25 GMT
x-nc: MISS arn 2
X-Firefox-Spdy: h2


--- Additional Info ---