myth.purifymyhealth.com/ga/click/2-49869649-115-344-658-668-457111ea1e-lafde90ed7
302 Found 122 B URL HTTP/1.1 myth.purifymyhealth.com/ga/click/2-49869649-115-344-658-668-457111ea1e-lafde90ed7
IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 6a45df8080c65041d27c17b4f17de599
4b96156e78104e8f0669c2dabd95e6fe56aaf1a1
f1a2cc6add3d99e13d9b0ecec8f1c054b3143cd1c7d0e9dbb854f1433a0ba59a
GET /ga/click/2-49869649-115-344-658-668-457111ea1e-lafde90ed7 HTTP/1.1
Host: myth.purifymyhealth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 25 Oct 2022 12:52:22 GMT
Server: Apache/2.4.52 (Unix) OpenSSL/1.0.2k-fips PHP/7.3.33
Status: 302 Found
X-Rack-Cache: miss
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
X-Request-Id: 81866f628e835aaab16083ae69d6ce98
Location: https://www.iz8qatrk.com/9W598/63PMH4C/?sub1=XMdfervvjyt
X-UA-Compatible: IE=Edge,chrome=1
X-Runtime: 0.022735
Expires: Mon, 01 Jan 1990 00:00:00 GMT
X-Powered-By: Phusion Passenger(R) 6.0.12
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 050bfd0155f265780e88dabcdde8b147
93ff7f46889322c0e9dbd3f4695e4c6a7fefe08f
9f3db0b3c51195b5313122d984f5f5f62b2df0f1d818eafefaa8b73e15914038
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Alert, Retry-After, Content-Length, Content-Type
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 25 Oct 2022 11:53:07 GMT
Expires: Tue, 25 Oct 2022 12:13:37 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zmOUuhy_rQf5lQGLJ51cxnonQqrlb2jeCfQLqn3X594GNZL0I216ug==
Age: 3555
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e36c852b5e145f2f09fe73111fb162e1
e439c6a462f86a3003d6464a8b9999b1c4d1e210
52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2448
Expires: Tue, 25 Oct 2022 13:33:10 GMT
Date: Tue, 25 Oct 2022 12:52:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8db408c487f7d35bba323046736e8d3a
01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0
9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3222
Expires: Tue, 25 Oct 2022 13:46:04 GMT
Date: Tue, 25 Oct 2022 12:52:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: CTAJ5ID4YmNvF1DG89kVRVzDdkLO52fRSbv57hjYJhl3+/AKopHI/z6ECQ91Lqk2Di99LF2+Tq0=
x-amz-request-id: BMDW54A8VRW4EQFE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 12:38:48 GMT
age: 814
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 12:52:22 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash cd70baf4e2ab112c6dceba7f49b362a0
f3cb92b70c1dfc59202ef6cc028ce27bc8424e9f
7f78647e46de3a39312894db1ed353c3721448c69ede95a5c432486343ee6c9a
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 25 Oct 2022 12:52:22 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 24 Oct 2022 22:47:16 GMT
Expires: Tue, 25 Oct 2022 22:47:16 GMT
ETag: "f3cb92b70c1dfc59202ef6cc028ce27bc8424e9f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.iz8qatrk.com/9W598/63PMH4C/?sub1=XMdfervvjyt
302 Found 132 B URL HTTP/2 www.iz8qatrk.com/9W598/63PMH4C/?sub1=XMdfervvjyt
IP
File type HTML document, ASCII text
Hash da4bb5559f9afdd114c0351c4f1be5ec
6e0aca952260d0fd62a7d00d81fe8d4aaeb216c8
8e61ea9801ea9c55f6be6e103c2eaf06b5f65289fb228d8a6e48bd700792bc98
GET /9W598/63PMH4C/?sub1=XMdfervvjyt HTTP/1.1
Host: www.iz8qatrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Tue, 25 Oct 2022 12:52:22 GMT
content-type: text/html; charset=utf-8
content-length: 132
location: https://mwquestion.com/7552/434/2/?subid=7&subid2=738cc95872f6462a824fed84991e1415&subid3=XMdfervvjyt
set-cookie: uniqueClick_63PMH4C=3b3d87b3-3995-4db1-bff0-98852668e317:1666702342; Path=/; Expires=Thu, 24 Nov 2022 12:52:22 GMT; Secure; SameSite=None
transaction_id=738cc95872f6462a824fed84991e1415; Path=/; Expires=Mon, 23 Jan 2023 12:52:22 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 4e352047-0a98-4fb3-b4ef-61dee517f9b1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash cd70baf4e2ab112c6dceba7f49b362a0
f3cb92b70c1dfc59202ef6cc028ce27bc8424e9f
7f78647e46de3a39312894db1ed353c3721448c69ede95a5c432486343ee6c9a
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 25 Oct 2022 12:52:22 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 24 Oct 2022 22:47:16 GMT
Expires: Tue, 25 Oct 2022 22:47:16 GMT
ETag: "f3cb92b70c1dfc59202ef6cc028ce27bc8424e9f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 25 Oct 2022 12:33:32 GMT
Cache-Control: max-age=3600
Expires: Tue, 25 Oct 2022 13:14:21 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wYblusrJCqunNzqrbMbqypmyG7dVZl3lznXTEUSsmUSEjXadm1rUfw==
Age: 1130
ocsp.digicert.com/
200 OK 278 B IP
Hash 429a3e754399b753265629efc7138644
bfdae2b6aa9c0fa8c261f2677a0fd67febfbb6b8
ebf4fb44ae1a25d03616760a2180a880a5e31288a4c264a55069405e7c9390aa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=156761
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:22 GMT
Etag: "63579d5f-116"
Expires: Thu, 27 Oct 2022 08:25:03 GMT
Last-Modified: Tue, 25 Oct 2022 08:25:03 GMT
Server: nginx
Content-Length: 278
ocsp.digicert.com/
200 OK 471 B IP
Hash 518ff04fd536958e285cf07aaf4a2786
fa5dad2391c2a9957340bd629f0462db4f412a5c
608c78964412d5dc7025e9cbfaef345d448a29eae0f11257c49a41f274917b9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5445
Cache-Control: max-age=161111
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:22 GMT
Etag: "63579918-1d7"
Expires: Thu, 27 Oct 2022 09:37:33 GMT
Last-Modified: Tue, 25 Oct 2022 08:06:48 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6qulK2TUqKpLEuheCGXn2Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KgZkZOmAM1mzjAEs/SesBwhM0rk=
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 67bab495deda5386c4ecebd63ace850b
59976da1b3bdbf51f9c4806ee66561af21d9b589
094f28977cc79379645dd3c66032bc4a345c5453b50ab48076bd0de908ec21b5
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 12:52:24 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 29 Oct 2022 12:34:51 GMT
ETag: "59976da1b3bdbf51f9c4806ee66561af21d9b589"
Last-Modified: Tue, 25 Oct 2022 12:34:52 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75fb16d10d7bb50c-OSL
prstfreetrk.com/?a=68&c=2387&s2=7552_sessid20221025125249231&s1=434
302 Found 251 B URL HTTP/1.1 prstfreetrk.com/?a=68&c=2387&s2=7552_sessid20221025125249231&s1=434
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash e77e8531dff01192c0909f96b8382402
bb246880875376588cb4666d36c3be43e804b147
ccd33639e0a71c5c1cf6d7ceb3c48bec3287dfb70df421ee9fc6f9422d4f1a86
GET /?a=68&c=2387&s2=7552_sessid20221025125249231&s1=434 HTTP/1.1
Host: prstfreetrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 251
Content-Type: text/html; charset=utf-8
Date: Tue, 25 Oct 2022 12:52:24 GMT
Location: https://prstfrtrk.com/?a=68&c=2387&s2=7552_sessid20221025125249231&s1=434&ckmguid=b8a554e5-283e-4518-b27d-bd60e24704bd
Connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Tue, 25 Oct 2022 14:03:21 GMT
Date: Tue, 25 Oct 2022 12:52:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Tue, 25 Oct 2022 14:03:21 GMT
Date: Tue, 25 Oct 2022 12:52:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Tue, 25 Oct 2022 14:03:21 GMT
Date: Tue, 25 Oct 2022 12:52:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Tue, 25 Oct 2022 14:03:21 GMT
Date: Tue, 25 Oct 2022 12:52:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Tue, 25 Oct 2022 14:03:21 GMT
Date: Tue, 25 Oct 2022 12:52:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3efe6e3-c81b-4c68-be1b-d80b5437960a.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3efe6e3-c81b-4c68-be1b-d80b5437960a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7b193f4e9431bab7a508d37fc919fadc
43bf0841e171c58eefe2d84af9aecbdf234336e4
a7f3c75aec864524ea1387c71dbbfdf4372f8cf75dbd8a9a1746c77fba931fcd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3efe6e3-c81b-4c68-be1b-d80b5437960a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7051
x-amzn-requestid: dc139436-6910-4afb-b7d8-51e9816f138c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3EsEGUoAMFUYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570551-117c0a9f7ef4737236c9a614;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NueckSK37sIMnJ7AyJLYWxw3ulwVk4UST8qkcscUAX5EbSU0sMNpZg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 22:59:31 GMT
age: 49973
etag: "43bf0841e171c58eefe2d84af9aecbdf234336e4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cf322f19151bcfa374c2e32b9ac986f
e8e69ac951def18bc1e03ecd4fe8a21d3b825b27
54ddfd1876f65e264b9b3209a0e805a3796013b4aacc8e9fd20b49754b4917a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4206
x-amzn-requestid: 6b02f96a-ea03-4eff-acde-c73925260102
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3E3GPQoAMFpIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570552-77cf762d0e54f1f60efe52c3;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:18 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: jiu-Z6DMgXxXdZ5BDwjNoq5Y15kBgM894k4EY2qSRZKdvk0bfkn89A==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:16 GMT
age: 54128
etag: "e8e69ac951def18bc1e03ecd4fe8a21d3b825b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 531f350512ac7712d932234803aa4602
2fb4599ad3d513a160c1f29fefda27b45852c381
7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fUBXr7SKYdvhryoB8p9to-Eo8twjspRYnHO2xf9TtvLJIIyOwe3W1w==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 07:43:49 GMT
age: 18515
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6977b5f01197ed4e914157b59ce56c2a
0c4bc06cb32bae6cdcbd61fde8b6289fa901a0c2
98ed9be1f79f4d1ff9acd3dc22aa64f7e0218d7c4854fc7cb71e70dd341dd7ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8031
x-amzn-requestid: 39e6cba4-dc3b-4fe8-9f00-f9042b3dfb3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3D7E2SoAMF_TA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357054c-541d3ed176c9176913844804;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KfIXjRxRZXL0gD2Etdn5kfEjPkqA-faF2KHqrWikR0etkh6oGU4ifw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:09 GMT
age: 54135
etag: "0c4bc06cb32bae6cdcbd61fde8b6289fa901a0c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mwquestion.com/7552/434/2/?subid=7&subid2=738cc95872f6462a824fed84991e1415&subid3=XMdfervvjyt
302 Found 12 kB URL HTTP/2 mwquestion.com/7552/434/2/?subid=7&subid2=738cc95872f6462a824fed84991e1415&subid3=XMdfervvjyt
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f22a424f72f369a3511d6af25d67a82
e9aabd2daee2d2e6265a69e309542c5b5983d1f2
600f1a4989fe65b14cfe5234c8bc723834d53543026c13eaf8217b22d3a3a9a9
GET /7552/434/2/?subid=7&subid2=738cc95872f6462a824fed84991e1415&subid3=XMdfervvjyt HTTP/1.1
Host: mwquestion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 25 Oct 2022 12:52:23 GMT
content-type: text/html; charset=UTF-8
location: https://prstfreetrk.com/?a=68&c=2387&s2=7552_sessid20221025125249231&s1=434
cache-control: max-age=3600, private
pragma: no-cache
expires: Tue, 25 Oct 2022 13:52:23 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75fb16ca4dc7b506-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8502c90bf679dce29b1c2a87606bbb3e
7940c911dea3882ab8a7ff70240f4edc1b89a56d
ccc5ab3068b7f90276124148a812eb26951a95d7c146bdcf28a69a3d05f76ee2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: 51dfaabc-ee88-465f-8da7-fd6739cf7794
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aZSHjHeLIAMF8mQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635396fc-1e4ad2d647a7f07a094574be;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 07:08:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dgxcF8hXUOo_WqQwpd0yctMNPuB-IfmSRxD1_TRG7zuV3b5EbpVIig==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 07:51:44 GMT
age: 18040
etag: "7940c911dea3882ab8a7ff70240f4edc1b89a56d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash ba1cbc95f6ae23675563a562d4a887da
6bb1e9a398be4ca7faecc834fa16d0e63d7316c1
dafc7c66aa5f29d44e7bb72ba91b1c162c994e29552ca56c5c94716ae2b13af3
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 12:52:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 29 Oct 2022 12:32:46 GMT
ETag: "6bb1e9a398be4ca7faecc834fa16d0e63d7316c1"
Last-Modified: Tue, 25 Oct 2022 12:32:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75fb16d72f6ab50c-OSL
prstfrtrk.com/?a=68&c=2387&s2=7552_sessid20221025125249231&s1=434&ckmguid=b8a554e5-283e-4518-b27d-bd60e24704bd
302 Found 272 B URL HTTP/1.1 prstfrtrk.com/?a=68&c=2387&s2=7552_sessid20221025125249231&s1=434&ckmguid=b8a554e5-283e-4518-b27d-bd60e24704bd
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash c8804aade273ec7ea77fa7af372b3716
62de606aeae2025c3beb2a6357da0b6b577da2e0
9acf2c6f6cf7d7e97fdfa006384013627e987975f7860f6ab83d1f36ed4a2f5f
Analyzer Verdict Alert quad9 Sinkholed
GET /?a=68&c=2387&s2=7552_sessid20221025125249231&s1=434&ckmguid=b8a554e5-283e-4518-b27d-bd60e24704bd HTTP/1.1
Host: prstfrtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 272
Content-Type: text/html; charset=utf-8
Date: Tue, 25 Oct 2022 12:52:25 GMT
Location: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=uO58WZjDqd7dAwNDoIcw8jc0tNGFpWvRa/65g3RJDUT+G60jZfV2pw==; domain=.prstfrtrk.com; path=/; SameSite=None; secure; HttpOnly
trk=z9mVEjBISYsfq1ZVdjJjHG9bfHvQanJtXHimcX8R2bX90kIGJqm63Q==; domain=.prstfrtrk.com; expires=Fri, 25-Oct-2024 12:52:25 GMT; path=/; SameSite=None; secure; HttpOnly
c141=uO58WZjDqd5nsPfSDr41iQaRgYIKAWeMKbNJspd5hoO+vyfYDwaiRg==; domain=.prstfrtrk.com; expires=Thu, 24-Nov-2022 12:52:25 GMT; path=/; SameSite=None; secure; HttpOnly
Connection: close
ocsp.pki.goog/s/gts1p5/SX_GKWsBYcU
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/SX_GKWsBYcU
IP
Hash 0a5241176e3aa25673dc3be4dcf6001b
3909b66fe4f9d0d87d8c975974c70a281189efef
fddc001391d6de349017e1136eacbee4052505b5bbabb6750423d78e461246e4
POST /s/gts1p5/SX_GKWsBYcU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:25 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 7808e0e4b7a714230373852158500533
4a79d18722a68a2f38d52e2d3a11b550bdd30b3c
8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 24 Oct 2022 09:42:03 GMT
expires: Tue, 24 Oct 2023 09:42:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 97823
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.wistia.net/assets/external/E-v1.js
200 OK 116 kB URL HTTP/2 fast.wistia.net/assets/external/E-v1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 116 kB (116434 bytes)
Hash 7f10e89103b31dc82610c6ad0a8186a2
e7be338907eb6a90ec89c12508fa7ec40c2ada13
fee302ff13e2fe23e49861b1e76b4803460a9848d74633893abb646899cf828c
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6357c562-1c6d2"
last-modified: Tue, 25 Oct 2022 11:15:46 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 12:52:26 GMT
age: 223
x-served-by: cache-iad-kjyo7100167-IAD, cache-bma1635-BMA
x-cache: HIT, HIT
x-cache-hits: 60, 7
x-timer: S1666702346.124440,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 116434
X-Firefox-Spdy: h2
theprostatecurse.com/imgs/progressbar.gif
200 OK 11 kB URL HTTP/2 theprostatecurse.com/imgs/progressbar.gif
IP
File type GIF image data, version 89a, 220 x 19\012- data
Hash 57ca1a2085d82f0574e3ef740b9a5ead
2974f4bf37231205a256f2648189a461e74869c0
476a7b1085cc64de1c0eb74a6776fa8385d57eb18774f199df83fc4d7bbcc24e
GET /imgs/progressbar.gif HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/gif
content-length: 10819
last-modified: Fri, 29 Jul 2022 14:49:47 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de782eb4ff-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
theprostatecurse.com/research/imgs/shipping-icon.png
200 OK 1.4 kB URL HTTP/2 theprostatecurse.com/research/imgs/shipping-icon.png
IP
File type PNG image data, 154 x 77, 8-bit colormap, non-interlaced\012- data
Hash 86110082bbe5454fc2ca793b5eeff97b
4a73e3d2d6c987e19a0cab97396a874045b1d713
5e2f0e84d2cf621c337a0a65353ac2379767b7537e03e7e9c7b1952255f32943
GET /research/imgs/shipping-icon.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 1413
last-modified: Fri, 29 Jul 2022 14:48:10 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de886bb4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/imgs/ProstaFree_logo-x2.png
200 OK 12 kB URL HTTP/2 theprostatecurse.com/imgs/ProstaFree_logo-x2.png
IP
File type PNG image data, 380 x 177, 8-bit colormap, non-interlaced\012- data
Hash 1269ac9d31c99e1bf30c4430b8d4c770
834d0d92f6b99685fba17f5c0eab55f2175c05c0
d476dfe4d01c732be97b04f3bb00e07fa491d627d43d832cb6625528bcc202b1
GET /imgs/ProstaFree_logo-x2.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 12026
last-modified: Fri, 29 Jul 2022 14:49:48 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de886eb4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/product1.png
200 OK 7.1 kB URL HTTP/2 theprostatecurse.com/research/imgs/product1.png
IP
File type PNG image data, 250 x 182, 8-bit colormap, non-interlaced\012- data
Hash be308f8bbfa860039235986e3d3ffaee
c39d0f39fab03099e61947cf2f43a6c582bef068
0785931bbf5dfe5a724e6b766e15831eb8ba1ca0ef105b4cecdcd09497ba816b
GET /research/imgs/product1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 7147
last-modified: Fri, 29 Jul 2022 14:48:07 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de7836b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/cards3.png
200 OK 3.0 kB URL HTTP/2 theprostatecurse.com/research/imgs/cards3.png
IP
File type PNG image data, 189 x 26, 8-bit colormap, non-interlaced\012- data
Hash c90c649d3b7bda73b30b55cf60ce1ded
d8e3167d1a5d56339fda1fc3ea9f427274b840c4
15f38f904db944bbd9a6d343482bc425cc050135bbbdaba8f29d9d9cbcbea01d
GET /research/imgs/cards3.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 2954
last-modified: Fri, 29 Jul 2022 14:48:00 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de7845b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/cta-btn.png
200 OK 2.4 kB URL HTTP/2 theprostatecurse.com/research/imgs/cta-btn.png
IP
File type PNG image data, 227 x 65, 8-bit colormap, non-interlaced\012- data
Hash 4594f0656852a67cea353de6dc2b261a
d24f4d2a812709182bd886d888523673ae4cfdf0
83628d2af27b4e9b2ad899b19aa8b1340e40fce686e15e212bf463bd6967a95f
GET /research/imgs/cta-btn.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 2387
last-modified: Fri, 29 Jul 2022 14:48:01 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de7839b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
200 OK 35 kB URL HTTP/2 theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9481)
Hash c24a980a9d53336e27d0bbb388fbf3fb
b57e7375fbf4b7c4eb1cb4154e41496c1c77dfc3
f921295052b5c12cc38a6779eab3f5867a090466411da827c99f3dcf7acc1334
GET /research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478 HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:25 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=f7cd334f2fc9193d523745c0832d25af; path=/
looked=yes; expires=Tue, 25-Oct-2022 13:52:24 GMT; Max-Age=3600
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75fb16dc1cbbb4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/product6.png
200 OK 20 kB URL HTTP/2 theprostatecurse.com/research/imgs/product6.png
IP
File type PNG image data, 268 x 195, 8-bit colormap, non-interlaced\012- data
Hash febfafc6e6734b1c1187d779ce3c54fc
5a57878dd9fec7f24c1c6d68d801bc63095bd6fe
c6593347fabff8ee6532f595c33243b3c7df8d9894f145fdd4bc209e70ab78a6
GET /research/imgs/product6.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 19810
last-modified: Fri, 29 Jul 2022 14:48:07 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de784bb4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/stars.png
200 OK 1.3 kB URL HTTP/2 theprostatecurse.com/research/imgs/stars.png
IP
File type PNG image data, 121 x 21, 8-bit colormap, non-interlaced\012- data
Hash 355bc55917e6cf0fae5dcb3abcda6add
2d68b5f4c8c76e5fb332748e855e8d1163139b71
0e6b342e051665aa183f2236b8a14a6dbb87a9aadb333b4e5787eb5cc1d61b07
GET /research/imgs/stars.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 1265
last-modified: Fri, 29 Jul 2022 14:48:11 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16dea89bb4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/stars-rating-v1.png
200 OK 1.1 kB URL HTTP/2 theprostatecurse.com/research/imgs/stars-rating-v1.png
IP
File type PNG image data, 181 x 34, 8-bit colormap, non-interlaced\012- data
Hash 5265bf5584bc9a5e846e3783b4d25906
aaa4595486cd96c4553d6eebd75ef9876c7bb732
fcbc39f36f515e6b8bc83ca42b4dd2992b7d5a2aa523b9e6a7b954e746d4fefe
GET /research/imgs/stars-rating-v1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 1070
last-modified: Fri, 29 Jul 2022 14:48:11 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de8861b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/bonus-prod1.png
200 OK 28 kB URL HTTP/2 theprostatecurse.com/research/imgs/bonus-prod1.png
IP
File type PNG image data, 381 x 383, 8-bit colormap, non-interlaced\012- data
Hash d76de8c6a40ad1a2a11b277954a4793e
25e068562b85071c0dca3d0a1882695b5dfa2d09
afe1eb8122d72f617054f4f15b576a1f11086a73fcc8e91f69d70793420f573e
GET /research/imgs/bonus-prod1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 28232
last-modified: Fri, 29 Jul 2022 14:47:59 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de8868b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/imgs/ProstaFree_logo-x2-white.png
200 OK 6.1 kB URL HTTP/2 theprostatecurse.com/imgs/ProstaFree_logo-x2-white.png
IP
File type PNG image data, 380 x 177, 8-bit colormap, non-interlaced\012- data
Hash ebae5fa3cb8310a3206c640685270eb8
61df8e80025a87c283f7450fce58a3a7d5fc036e
e0fcaa5624cad61644b1c606f870f5de3b8249b11e0ee4c4e59b71aa469c3942
GET /imgs/ProstaFree_logo-x2-white.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 6067
last-modified: Fri, 29 Jul 2022 14:49:47 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16deb8bab4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/seal1.png
200 OK 15 kB URL HTTP/2 theprostatecurse.com/research/imgs/seal1.png
IP
File type PNG image data, 289 x 239, 8-bit colormap, non-interlaced\012- data
Hash d450acb316ce9eac30f4e89f3dde04fe
40cb135218f574cc563262981fe08e4019532af3
71bbbf306555cfa40d4759f43ff2bf739dd6d57ba5bab9cd564b42bc2332c5e8
GET /research/imgs/seal1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 15326
last-modified: Fri, 29 Jul 2022 14:48:10 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de8863b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/product3.png
200 OK 17 kB URL HTTP/2 theprostatecurse.com/research/imgs/product3.png
IP
File type PNG image data, 252 x 183, 8-bit colormap, non-interlaced\012- data
Hash 85dea2833e9db6adaa744cbacd2c4731
f015772f4efee63e2c77e257b7243d0605e3a293
3d50ff59466498461e9a2f48079446cfebff021eb2bf19b1c9d1aa8e386dce60
GET /research/imgs/product3.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 17136
last-modified: Fri, 29 Jul 2022 14:48:07 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de885ab4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/benefits_bullet.png
200 OK 1.9 kB URL HTTP/2 theprostatecurse.com/research/imgs/benefits_bullet.png
IP
File type PNG image data, 50 x 49, 8-bit colormap, non-interlaced\012- data
Hash 6793c172b312833f283b273418239dfd
6e3e2bb7b6ace2be426e1b34f8d0c0aa96995fbe
fec83c4dc5d6e470528da4e3dab27c1dc48f896c60af491c59227427cae22091
GET /research/imgs/benefits_bullet.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 1879
last-modified: Fri, 29 Jul 2022 14:47:58 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de8872b4ff-OSL
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/zpgiy96yzn.jsonp
200 OK 1.6 kB URL HTTP/2 fast.wistia.com/embed/medias/zpgiy96yzn.jsonp
IP
File type ASCII text, with very long lines (5232)
Hash 74e43e6a162de32be06c0e9e10bec31d
7fec607b59232b82c8b35d2ed83392b09442965a
a4e4e476e5b418409b22c2c8f53f05657f741de956fcf91c61d986676a10d8a8
GET /embed/medias/zpgiy96yzn.jsonp HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-encoding: br
content-type: application/javascript; charset=utf-8
etag: W/"d23dac6e86bb34aaedb31ce8faf41ba1"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: c07d2ec28a72a08db3416909d71ff153
x-runtime: 0.048496
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 12:52:26 GMT
age: 64113
x-served-by: cache-iad-kjyo7100041-IAD, cache-bma1682-BMA
x-cache: HIT, MISS
x-cache-hits: 238, 0
x-timer: S1666702346.132365,VS0,VE113
vary: Accept-Encoding,Referer,X-Forwarded-Proto,X-Normalized-User-Agent,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1632
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/testi1.png
200 OK 36 kB URL HTTP/2 theprostatecurse.com/research/imgs/testi1.png
IP
File type PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced\012- data
Hash f37a02d5d458e477e29d63f3e3af19d2
bcaca8e645a54c06ed4f21dcbc3fdab6dbf8812d
64a2ba20f8e536f36abbef8e0bd9de55dbce2f02cbe36ff972ed3571f6beb24d
GET /research/imgs/testi1.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 36259
last-modified: Fri, 29 Jul 2022 14:48:14 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16dea898b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/testi3.png
200 OK 43 kB URL HTTP/2 theprostatecurse.com/research/imgs/testi3.png
IP
File type PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c43cb4de1acc1ae08037373405e098f
a1fda6e2ca6fd0f9ae219718ebb6d855a6c66a2f
670d065a8f235021628bab788cb452c6296326ec2bb68206eaeadd784e79c5af
GET /research/imgs/testi3.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 42565
last-modified: Fri, 29 Jul 2022 14:48:15 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16dea8a2b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/testi2.png
200 OK 36 kB URL HTTP/2 theprostatecurse.com/research/imgs/testi2.png
IP
File type PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced\012- data
Hash e142be843d754ba686bf38dc8dcb2a2c
8e35f13f78e358ac63fdbf7e7eba4b25bb253631
d5e2acf320fe3b6a05c6d8c70a497139ded273cf3d2061c46a724de3e5e91e35
GET /research/imgs/testi2.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 35558
last-modified: Fri, 29 Jul 2022 14:48:14 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16dea89db4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/bonus-prod2.png
200 OK 72 kB URL HTTP/2 theprostatecurse.com/research/imgs/bonus-prod2.png
IP
File type PNG image data, 383 x 383, 8-bit colormap, non-interlaced\012- data
Hash dcb79e79e032b45b4a46f378153056a7
43966f60d6ad87bed7dfe7b8c6576943ba9b1b0a
7e40d2b2b5ecfb424fb4b781d7a92f6eb792fdec8dee33a44c975cf71add3bcb
GET /research/imgs/bonus-prod2.png HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/png
content-length: 72509
last-modified: Fri, 29 Jul 2022 14:48:00 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de8869b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/fonts/ProximaNova-Semibold.woff
200 OK 52 kB URL HTTP/2 theprostatecurse.com/research/fonts/ProximaNova-Semibold.woff
IP
File type Web Open Font Format, TrueType, length 51760, version 0.0\012- data
Hash 3c4a5cdaa683834b9cc535dbcdd75153
19983ffca2d7c7386f07a055f92a358b952f82e9
b0cfaf554e50dd137466c34a03e3bb314e830785afa954956062c6994aec9445
GET /research/fonts/ProximaNova-Semibold.woff HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: font/woff
content-length: 51760
last-modified: Fri, 29 Jul 2022 14:47:56 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de987bb4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/fonts/ProximaNova-Extrabld.woff
200 OK 52 kB URL HTTP/2 theprostatecurse.com/research/fonts/ProximaNova-Extrabld.woff
IP
File type Web Open Font Format, TrueType, length 51504, version 0.0\012- data
Hash 7f277b30c2d157a866644f7d861cbd6e
68ec8f7b24e40f10374ead63aa0daf0cc455f1e0
ca58fe74a581322b46d41e976600b4a5019bfe2c7839ffd38c8e710f2e833737
GET /research/fonts/ProximaNova-Extrabld.woff HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: font/woff
content-length: 51504
last-modified: Fri, 29 Jul 2022 14:47:54 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de9876b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/imgs/_screenPF.jpg
200 OK 62 kB URL HTTP/2 theprostatecurse.com/research/imgs/_screenPF.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 896x504, components 3\012- data
Hash d6fe352aadf8e8ffced64662334a7653
97ab6829eb6823a8242642d2c2d66635bf26bbee
f7b3825562e130c19a14fdb3372799a2f73cb3a8c7e32382f3d4545e05f0ae5b
GET /research/imgs/_screenPF.jpg HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/jpeg
content-length: 61567
last-modified: Wed, 24 Aug 2022 12:46:40 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16de7834b4ff-OSL
X-Firefox-Spdy: h2
theprostatecurse.com/research/fonts/ProximaNova-Bold.woff
200 OK 52 kB URL HTTP/2 theprostatecurse.com/research/fonts/ProximaNova-Bold.woff
IP
File type Web Open Font Format, TrueType, length 51944, version 0.0\012- data
Hash 637c241b1d81e95d681796891e1fb1ac
d5da75d2b826d9da27378a9c0f7e0b620031c339
e9f28e3823f3c6f150bbc92899c421d470322e7c1118eb8ce6c9c18e8aeb6799
GET /research/fonts/ProximaNova-Bold.woff HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: font/woff
content-length: 51944
last-modified: Fri, 29 Jul 2022 14:47:53 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16deb8bcb4ff-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-W4CVTDK
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-W4CVTDK
IP
File type ASCII text, with very long lines (1588)
Hash 0cc0a69dd3f258fd832d6adc511adb50
282d1c68bf0a76ef2c16164b7a4e6f469989afcd
9cb9a15d1f8a4ea521ec58a3fb1e8ee26a6946f6b6591285be7d2a993892eda0
GET /gtm.js?id=GTM-W4CVTDK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Oct 2022 12:52:27 GMT
expires: Tue, 25 Oct 2022 12:52:27 GMT
cache-control: private, max-age=900
last-modified: Tue, 25 Oct 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45221
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 25 Oct 2022 12:41:09 GMT
expires: Tue, 25 Oct 2022 14:41:09 GMT
cache-control: public, max-age=7200
age: 678
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fast.wistia.net/assets/external/wistia-mux.js
200 OK 31 kB URL HTTP/2 fast.wistia.net/assets/external/wistia-mux.js
IP
File type ASCII text, with very long lines (65468)
Hash 25947c432c89137cb3c02f2dddb6160b
672e7de9c44e970608f54c1999ce5e326cd16692
bfc3e68995a5a3fb494fc093f2f4b55e216502ea99a7a1516ba1a7beeb37e5d2
GET /assets/external/wistia-mux.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6357c562-7a10"
last-modified: Tue, 25 Oct 2022 11:15:46 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 12:52:27 GMT
age: 224
x-served-by: cache-iad-kcgs7200052-IAD, cache-bma1635-BMA
x-cache: HIT, HIT
x-cache-hits: 6, 3
x-timer: S1666702347.233315,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 31248
X-Firefox-Spdy: h2
fast.wistia.net/assets/external/playPauseLoadingControl.js
200 OK 16 kB URL HTTP/2 fast.wistia.net/assets/external/playPauseLoadingControl.js
IP
File type ASCII text, with very long lines (59899), with no line terminators
Hash bc2e2ee2292331734472380da1b8e246
f1c0d0a56add17cf01bfcb69f4165f1a987d56a0
fb6c5149e6bded580759f0dbf09eec19df63d2e925b109e5770598e87a2f7a00
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6357c562-3e3c"
last-modified: Tue, 25 Oct 2022 11:15:46 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 12:52:27 GMT
age: 224
x-served-by: cache-iad-kiad7000024-IAD, cache-bma1635-BMA
x-cache: HIT, HIT
x-cache-hits: 15, 3
x-timer: S1666702347.267003,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 15932
X-Firefox-Spdy: h2
embed-ssl.wistia.com/deliveries/b635c036ddbaf8ef483fb6abd2924ad1.webp?image_crop_resized=896x504
200 OK 38 kB URL HTTP/2 embed-ssl.wistia.com/deliveries/b635c036ddbaf8ef483fb6abd2924ad1.webp?image_crop_resized=896x504
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 896x504, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f8fbbd8864861eda3737ad756128a8c4
910649abb3305044496ec45b36f188d00fd481e4
4ffc11cf448db3abe3380d77092657888238ae5a4c09a34e1fcc581cfeda25af
GET /deliveries/b635c036ddbaf8ef483fb6abd2924ad1.webp?image_crop_resized=896x504 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
access-control-expose-headers: Origin, Content-Type, Accept, Server, x-amz-version-id, X-Cache
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: b635c036ddbaf8ef483fb6abd2924ad1
last-modified: Wed, 24 Aug 2022 12:48:18 UTC
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 12:52:27 GMT
age: 1812708
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-methods: GET, HEAD, OPTIONS
x-served-by: cache-iad-kjyo7100044-IAD, cache-bma1649-BMA
x-cache: HIT, HIT
x-cache-hits: 448, 1
x-timer: S1666702347.335066,VS0,VE1
content-length: 37930
X-Firefox-Spdy: h2
fast.wistia.net/assets/external/engines/hls_video.js
200 OK 114 kB URL HTTP/2 fast.wistia.net/assets/external/engines/hls_video.js
IP
File type ASCII text, with very long lines (65469)
Size 114 kB (114241 bytes)
Hash fd14968007f71c54e08b05bab7d5941d
6d1624b66ec8ef282c6e560d982b21d1b48c3acd
688cf3fa94ae6088df25a2814a56bb4ff521879117e427400341413c6d445af9
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6357c562-1be41"
last-modified: Tue, 25 Oct 2022 11:15:46 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 12:52:27 GMT
age: 224
x-served-by: cache-iad-kjyo7100129-IAD, cache-bma1635-BMA
x-cache: HIT, HIT
x-cache-hits: 20, 3
x-timer: S1666702347.387730,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 114241
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ed554f0d1187302352f943e39d6c91a
10e1bb8702d0d14c56b659b1662b7c857484b0e7
2e1eda67a00dcf60ade2e3332b7f8b0c18c88ea6794fbb49fa9503e7c02236e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-236253750-1&cid=272814252.1666702345&jid=1271500458&gjid=208291306&_gid=753059089.1666702345&_u=YEBAAEAAAAAAACAAI~&z=577797368
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-236253750-1&cid=272814252.1666702345&jid=1271500458&gjid=208291306&_gid=753059089.1666702345&_u=YEBAAEAAAAAAACAAI~&z=577797368
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-236253750-1&cid=272814252.1666702345&jid=1271500458&gjid=208291306&_gid=753059089.1666702345&_u=YEBAAEAAAAAAACAAI~&z=577797368 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://theprostatecurse.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 25 Oct 2022 12:52:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ed554f0d1187302352f943e39d6c91a
10e1bb8702d0d14c56b659b1662b7c857484b0e7
2e1eda67a00dcf60ade2e3332b7f8b0c18c88ea6794fbb49fa9503e7c02236e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fast.wistia.net/assets/images/blank.gif
200 OK 1.2 kB URL HTTP/2 fast.wistia.net/assets/images/blank.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=315360000, public
content-type: image/gif
etag: "6357daa6-4be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 25 Oct 2022 12:46:30 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 12:52:27 GMT
age: 225
x-served-by: cache-iad-kjyo7100120-IAD, cache-bma1635-BMA
x-cache: HIT, HIT
x-cache-hits: 33, 2
x-timer: S1666702348.567520,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1214
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/zpgiy96yzn.m3u8
200 OK 753 B URL HTTP/2 fast.wistia.com/embed/medias/zpgiy96yzn.m3u8
IP
Hash 3e9cb9483943ff11e1f4b0db2bd3b3d7
231990d6d25317cb706c4b1ad5951630522a78da
d302bf80e15b6848c04ac493171897e59f4ac1559fc4bff9539f30742b96c266
GET /embed/medias/zpgiy96yzn.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-type: application/x-mpegURL
etag: W/"d302bf80e15b6848c04ac493171897e5"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: c6f2a4dd67eb4f0df44893f025bd757e
x-runtime: 0.031103
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 12:52:27 GMT
age: 63143
x-served-by: cache-iad-kcgs7200048-IAD, cache-bma1681-BMA
x-cache: HIT, MISS
x-cache-hits: 179, 0
x-timer: S1666702348.595382,VS0,VE113
vary: Accept-Encoding,Referer,X-Forwarded-Proto,X-Normalized-User-Agent,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 753
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6b183dc2bd0829ce80eb64a0a28d91e7
432f422b2723fdba3f195d9d28ab75492ad497d2
cae00bc5a9c3b9e166805e53c4175d96a0b739817d883f477102e1501a49ac57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ce788cdd348a769704a7f874b5a2474
4a4dfb44c394a90c5f56af273be8e0924535b8a5
a6ccf1a057148266591bc317c4f8225d00cd81880c559db08f824012f0c397d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=272814252.1666702345&jid=1271500458&_u=YEBAAEAAAAAAACAAI~&z=157854246
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=272814252.1666702345&jid=1271500458&_u=YEBAAEAAAAAAACAAI~&z=157854246
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=272814252.1666702345&jid=1271500458&_u=YEBAAEAAAAAAACAAI~&z=157854246 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 12:52:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=272814252.1666702345&jid=1271500458&_u=YEBAAEAAAAAAACAAI~&z=157854246
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=272814252.1666702345&jid=1271500458&_u=YEBAAEAAAAAAACAAI~&z=157854246
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-236253750-1&cid=272814252.1666702345&jid=1271500458&_u=YEBAAEAAAAAAACAAI~&z=157854246 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 12:52:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
embedwistia-a.akamaihd.net/deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8
200 OK 116 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8
IP
ASN #20940 Akamai International B.V.
Size 116 kB (116055 bytes)
Hash 230ba5f787369871971b1880ef017f7b
a064f80616d0d77b0220226257e173278577ba18
2c5c09fffaf083d87ce339ddfa8357ea879f554d55eaff6cd9fe8a46a465b3e7
GET /deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8 HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.apple.mpegurl
Content-Length: 116055
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 0f599d2ef063421b6fc7043717da0fde23e6139e-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=30718567
Expires: Mon, 16 Oct 2023 01:48:34 GMT
Date: Tue, 25 Oct 2022 12:52:27 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4fe08d6ffc931438b886eb80f073ad2e
dae5e9eb8bd9053329d24a55b8017c8162cb21d2
49a26dbac4208540e0d361219db57bea3922a33b0fd692212fec7a61727d387c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ce788cdd348a769704a7f874b5a2474
4a4dfb44c394a90c5f56af273be8e0924535b8a5
a6ccf1a057148266591bc317c4f8225d00cd81880c559db08f824012f0c397d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
embedwistia-a.akamaihd.net/deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8/seg-1-v1-a1.ts
200 OK 2.6 MB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8/seg-1-v1-a1.ts
IP
ASN #20940 Akamai International B.V.
File type MPEG transport stream data\012- data
Size 2.6 MB (2638392 bytes)
Hash 1a658d09de2712271a38aa21594a72df
50fbfba38a6eaddd61e440f4270ead7a47dea986
2756fb32da75ca228bb3d3c7de5617f0cb60adfbff0c58319440dca01c97937c
GET /deliveries/0f599d2ef063421b6fc7043717da0fde23e6139e.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: video/MP2T
Content-Length: 2638392
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 0f599d2ef063421b6fc7043717da0fde23e6139e-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=31412552
Expires: Tue, 24 Oct 2023 02:34:59 GMT
Date: Tue, 25 Oct 2022 12:52:27 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
embedwistia-a.akamaihd.net/deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8
200 OK 116 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8
IP
ASN #20940 Akamai International B.V.
Size 116 kB (116055 bytes)
Hash cbe2b26f17e73c7ce3e1e721a7655c6c
7242cc1a7ff3c8607bb4a6fc0faebf5d4641ca2f
4bb573fef42ddca6c8e3c924c243e9a41edc47fe967164e91270ab2409fe50f1
GET /deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8 HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.apple.mpegurl
Content-Length: 116055
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 629f20bc5761f24f6de88bbaaac9380352fc4afc-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=30953628
Expires: Wed, 18 Oct 2023 19:06:16 GMT
Date: Tue, 25 Oct 2022 12:52:28 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8706163849bac7ec9a1fb48193b9e644
05910beeaa1e480df2e9ead87ba1f4988176c54c
76c277dd52fe0118f19f60b4bde0633d6e5430c1773a3420ab7f24bd1ee3adeb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=154794
Date: Tue, 25 Oct 2022 12:52:28 GMT
Etag: "6357936d-1d7"
Expires: Thu, 27 Oct 2022 07:52:22 GMT
Last-Modified: Tue, 25 Oct 2022 07:42:37 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AYTKG-UziRnf4gdxjV-NE3iDyVTprhGW_v4XTI5ozHiidImCPMYgKg==
Age: 585
embedwistia-a.akamaihd.net/deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8/seg-1-v1-a1.ts
200 OK 984 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8/seg-1-v1-a1.ts
IP
ASN #20940 Akamai International B.V.
File type MPEG transport stream data\012- data
Size 984 kB (983992 bytes)
Hash 3e4e077c201c11540050b5f9c4fa1027
e020600d6433cf2ce55904a81ea9d8df33487994
ebd07eec559fd7260f208624002e248ef77d2226f4ab66dd7198673db3f865f6
GET /deliveries/629f20bc5761f24f6de88bbaaac9380352fc4afc.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: video/MP2T
Content-Length: 983992
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 629f20bc5761f24f6de88bbaaac9380352fc4afc-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=30947157
Expires: Wed, 18 Oct 2023 17:18:25 GMT
Date: Tue, 25 Oct 2022 12:52:28 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
distillery.wistia.com/x
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1596
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 25 Oct 2022 12:52:28 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
200 OK 2 B URL HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/x-www-form-urlencoded
Content-Length: 6746
Origin: https://theprostatecurse.com
Connection: keep-alive
Referer: https://theprostatecurse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:29 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash cc500e75f4eaa03cccaf271ef6e3b10a
9b945ef5339dd67d15c6279dac73650505c941ee
ad91e54d2607241c8bfbae63ca857dd28e6df3123270e091b0c88faaac743465
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=104887
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 12:52:29 GMT
Etag: "6356d2c4-117"
Expires: Wed, 26 Oct 2022 18:00:36 GMT
Last-Modified: Mon, 24 Oct 2022 18:00:36 GMT
Server: nginx
Content-Length: 279
theprostatecurse.com/research/imgs/favicon.ico
200 OK 0 B URL HTTP/2 theprostatecurse.com/research/imgs/favicon.ico
IP
GET /research/imgs/favicon.ico HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: looked=yes; PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: image/x-icon
last-modified: Fri, 29 Jul 2022 14:48:01 GMT
cache-control: max-age=14400
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16e18bf1b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
theprostatecurse.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 0 B URL HTTP/2 theprostatecurse.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: theprostatecurse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/research/?s1=434&s2=7552_sessid20221025125249231&s3=&s4=&crtv_id=2387&affId=68&c1=434&c3=132963478
Cookie: PHPSESSID=f7cd334f2fc9193d523745c0832d25af
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:26 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 15:26:52 GMT
etag: W/"634ec5bc-302c"
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fb16deb8bbb4ff-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 27 Oct 2022 12:52:26 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
go.maxweb.com/conversion/iframe/?a=7552&token=32c64d80036cd2a2c2f25a4e1f88668e
200 OK 0 B URL HTTP/2 go.maxweb.com/conversion/iframe/?a=7552&token=32c64d80036cd2a2c2f25a4e1f88668e
IP
GET /conversion/iframe/?a=7552&token=32c64d80036cd2a2c2f25a4e1f88668e HTTP/1.1
Host: go.maxweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprostatecurse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 12:52:29 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Tue, 25 Oct 2022 13:52:29 GMT
cache-control: max-age=3600, private
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75fb16f23ee7b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
38.242.205.174
23.36.77.32
151.101.86.133
104.21.84.130
93.184.220.29