104.131.82.44/
200 OK 468 B IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 02093ef50c11c4350858a06e559a0874
f35cfa7855df0105560a76c921d716e8f08aa710
c7d9b2398dec8cba2eb633630d2f64beda4469269b27974d45af9d7b15095d9a
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: 104.131.82.44
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 07:08:04 GMT
Server: Apache/2.4.52 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 468
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 16 Sep 2022 06:10:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: a_nVKeARlfktSoLJsaEDAFUEKCf58Lw5DQKi_HdKy_3AhnCcxvBxwQ==
Age: 3438
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 96daaf84cd2c07756756caf7a2724a29
d24d47c68eec98d44bf341dab9d893df97103e1a
fef9ce9f75ec19e7ae2ccbffb6654db2473a2b4acc94c1b4303e5ec24149465f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FEF9CE9F75EC19E7AE2CCBFFB6654DB2473A2B4ACC94C1B4303E5EC24149465F"
Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5310
Expires: Fri, 16 Sep 2022 08:36:34 GMT
Date: Fri, 16 Sep 2022 07:08:04 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 16 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K_BB5nHnrxO8Fq7S21oWcI6WbVvjmVxSb_eX6pMiET6MCPYbcqFZlw==
age: 9169
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:04 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css
200 OK 27 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65300)
Hash 7fe415dab6752a3d34d32883ba08e681
7821ce1e4e8a6862c6ba04798083bd16d1a337d8
0cbb8b50577b24ed36371ea4cc9213fe8a86b3dc295594d3fa3c8a7884d57516
GET /npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://104.131.82.44
Connection: keep-alive
Referer: http://104.131.82.44/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.0-beta1
x-jsd-version-type: version
etag: W/"2f3f9-YnOsGiPXmhIvAi9qh8W3XCz6/Do"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 16 Sep 2022 07:08:04 GMT
age: 8136828
x-served-by: cache-fra19143-FRA, cache-bma1639-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27328
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js
200 OK 23 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65293)
Hash 17be39c5c6fd45df16dfd5db3c085068
16e85f6095024d87f093975b392ee6d8307807a2
26323ab86481ea97bf21d9e5a84009ac48cd4fdce7a58ac15dd4c6391669a42e
GET /npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://104.131.82.44
Connection: keep-alive
Referer: http://104.131.82.44/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.0-beta1
x-jsd-version-type: version
etag: W/"1377e-a0uYWpCr16scLjX/O4dNB8+EEO4"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 16 Sep 2022 07:08:04 GMT
age: 3305813
x-served-by: cache-fra19140-FRA, cache-bma1639-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23010
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash f02fbd85a87c6c040da4b6183cfaeccd
42d11f2b12d3b857caddc7152767422e6533bb95
a3d96e76b069620e629439853edd648cdb7fb1fe3b62d721884263b7ca1e0f4a
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 07:08:04 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "662EF69444CEA42FC5952651645B8739247BCCDC"
Expires: Fri, 16 Sep 2022 18:00:00 GMT
Last-Modified: Fri, 16 Sep 2022 06:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2197
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b7c4d28a2e0b61-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 16 Sep 2022 07:03:22 GMT
Expires: Fri, 16 Sep 2022 07:44:11 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bEe2RmL4odUrZs99wJMg6_rYmtXl8CuW1lbv_-maatxdTCc3L-VfcQ==
Age: 283
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b963bc49b01293cdd0ae25b12d3abab
5466c99ca53807967e450a9f63e21365640a28c0
635346e2a13feccbc01b211a69dd9b718a52f74f19904a30bd7b3a25208d15d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "635346E2A13FECCBC01B211A69DD9B718A52F74F19904A30BD7B3A25208D15D4"
Last-Modified: Thu, 15 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21558
Expires: Fri, 16 Sep 2022 13:07:23 GMT
Date: Fri, 16 Sep 2022 07:08:05 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash d597af1ab2f21a983bf0f0d105b94209
9d5dd938777abde094c89066b539141a02106b88
a614eb7f969544c8040642be7c852625341e2441e757d063d2af1ff465c8c3f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5552
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:05 GMT
Last-Modified: Fri, 16 Sep 2022 05:35:33 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Qudrfar5lsFKS7hxc1zfRg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kiBA90I+hap258WUGOKQ17TIup8=
builderall.com//franquias/2/73748/editor-html/3484811.png
200 OK 15 kB URL HTTP/2 builderall.com//franquias/2/73748/editor-html/3484811.png
IP
File type PNG image data, 363 x 363, 8-bit/color RGBA, non-interlaced\012- data
Hash 8217499c54d16c8bd6757cd5d76fc529
12ae2e3ed8dfaa53ffe8aff46ed1fae3b406b360
f563ab3983dee03afcb37022f065a4cdbb1256fa33a23b148d0d352379a7432b
GET //franquias/2/73748/editor-html/3484811.png HTTP/1.1
Host: builderall.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: image/png
content-length: 14672
cache-control: max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=14694
etag: "5f07d4a8-3966"
expires: Wed, 03 May 2023 23:23:22 GMT
last-modified: Fri, 10 Jul 2020 02:38:32 GMT
strict-transport-security: max-age=63072000; includeSubdomains
x-content-type-options: nosniff
x-frame-options: ALLOW
cf-cache-status: HIT
age: 11690087
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JQGZw0MsG3WVQOZspcted6%2BhGWB4mMWSRfLeHBNS0PwOFmemDZKbX1k4X9Hcou7sHryZ9ErZ1fJo2vBfR%2FG0C7RmC11Lxgye%2B8o7N0mqZO3RdsZBVEg%2FvCVarbx2oRYwxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b7c4da28eb0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
freeoptinpage.com/static/FontList.css
200 OK 11 kB URL HTTP/2 freeoptinpage.com/static/FontList.css
IP
Hash de15c5ee5358985ebad341183a4c0e46
38d2dcfdfd2159563b1c2bffe12453132aebc7a4
fed767af2fefef5960be6b48f49c1ca2d59ef754a93a030945109fa8c6c8779d
GET /static/FontList.css HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: text/css
last-modified: Tue, 29 Sep 2020 23:26:30 GMT
vary: Accept-Encoding
etag: W/"5f73c2a6-d23"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/css/chunk-vendors.27c712ba.css
200 OK 54 kB URL HTTP/2 freeoptinpage.com/css/chunk-vendors.27c712ba.css
IP
File type ASCII text, with very long lines (48400)
Hash 9a56fabbe53da00027a3ab2fe262ef29
a6a4b2586c5e08e43da70f0c9a32db167d291e4d
a6d78c9dfde835181087cfa01a6ed5e628b4c44b27b4840a982dde731fa2ebfa
GET /css/chunk-vendors.27c712ba.css HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: text/css
last-modified: Fri, 18 Sep 2020 12:54:50 GMT
vary: Accept-Encoding
etag: W/"5f64ae1a-14438"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/static/GDPRPlugin/jquery.ihavecookies.min.js
200 OK 36 kB URL HTTP/2 freeoptinpage.com/static/GDPRPlugin/jquery.ihavecookies.min.js
IP
File type HTML document, ASCII text, with very long lines (61449)
Hash c170c48ba5614cd41afc5eae5957c2f3
7488a28f902ced7bc6d81ab4139f4783bcdc59cc
022aed3f6f530c6744d60082aa270e9ff28b1b3708e3d79b11c9eea2c7dee0ca
GET /static/GDPRPlugin/jquery.ihavecookies.min.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: application/javascript
last-modified: Thu, 30 Apr 2020 22:05:49 GMT
vary: Accept-Encoding
etag: W/"5eab4bbd-ff7"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/cheetah/link/recaptcha?lang=en
200 OK 1.1 kB URL HTTP/2 freeoptinpage.com/cheetah/link/recaptcha?lang=en
IP
Hash 4f9499c708137bcc23a8f184d6dc5fe6
33ceb36f0272b88e86f9c814af65d3f30c196785
9f27a880da8c64992fb9531a805be017aafddce67946079b2d641b0680c5c264
GET /cheetah/link/recaptcha?lang=en HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
strict-transport-security: max-age=63072000;includeSubDomains
x-frame-options: ALLOW
x-content-type-options: nosniff
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
expires: Thu, 19 Nov 1981 08:52:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
app.socialproofy.io/pixel/h2v33togrup03g4s4053enpu3bz4t2ob
200 OK 3.4 kB URL HTTP/1.1 app.socialproofy.io/pixel/h2v33togrup03g4s4053enpu3bz4t2ob
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (9651)
Hash 6323de8624a0398c2a69983e606352c1
625a4da89576086fffee290833907e4a80dbaa45
24e4508f43d6f9adfc0f1eaa6560b1ef46883e6dccd03f28814c10b26cac00c3
GET /pixel/h2v33togrup03g4s4053enpu3bz4t2ob HTTP/1.1
Host: app.socialproofy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 07:08:06 GMT
Server: Apache/2.4.41 (Ubuntu)
Expires: Fri, 16 Sep 2022 07:08:06 GMT
Pragma: cache
Cache-Control: max-age=0
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self';
X-XSS-Protection: 1;mode=block
Content-Length: 3400
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
app.socialproofy.io/themes/s00p/assets/css/pixel.css?v=510000
200 OK 18 kB URL HTTP/1.1 app.socialproofy.io/themes/s00p/assets/css/pixel.css?v=510000
IP
ASN #14061 DIGITALOCEAN-ASN
Hash e0992dbfe46504845b01ad38660050d1
af242c00f1e993aea2ec2bbc29119b26414b0589
b41752f869b6553ed0a0e57316f7506c05df45210377994f1032a471d5c8217b
GET /themes/s00p/assets/css/pixel.css?v=510000 HTTP/1.1
Host: app.socialproofy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 07:08:06 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Fri, 26 Aug 2022 07:56:58 GMT
ETag: "325c3-5e72042271f8d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self';
X-XSS-Protection: 1;mode=block
Content-Length: 17467
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
freeoptinpage.com/static/jquery-1.12.4.min.js
200 OK 38 kB URL HTTP/2 freeoptinpage.com/static/jquery-1.12.4.min.js
IP
Hash 0431565096deafa0324011eeb01800e2
d3c1cf27afe87894831788ba458b0b3293ecc2bc
6798b16c34470b2c623760ace7f0e96844d8a75bd88a207e0c695524ff8f1872
GET /static/jquery-1.12.4.min.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: application/javascript
last-modified: Thu, 30 Apr 2020 22:05:52 GMT
vary: Accept-Encoding
etag: W/"5eab4bc0-17b93"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8640
Expires: Fri, 16 Sep 2022 09:32:06 GMT
Date: Fri, 16 Sep 2022 07:08:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8640
Expires: Fri, 16 Sep 2022 09:32:06 GMT
Date: Fri, 16 Sep 2022 07:08:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8640
Expires: Fri, 16 Sep 2022 09:32:06 GMT
Date: Fri, 16 Sep 2022 07:08:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8640
Expires: Fri, 16 Sep 2022 09:32:06 GMT
Date: Fri, 16 Sep 2022 07:08:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8640
Expires: Fri, 16 Sep 2022 09:32:06 GMT
Date: Fri, 16 Sep 2022 07:08:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e20b221-cd14-4696-aa45-979946430e9c.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e20b221-cd14-4696-aa45-979946430e9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ab434eb762838f03bf60457b3039c738
bcacfdb674bdd90c157f7e97d232c49a4d206004
9e1e6b832980c9777e3e90a7ff3d84f96d35bbaab808a74343d91cea01aa1d64
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e20b221-cd14-4696-aa45-979946430e9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8076
x-amzn-requestid: e5521c18-64d3-4f61-8879-3dac61128920
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfzqG_hIAMFaQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6321467d-009f1413346a7b965d1c65e4;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: B0EwuNcTqD3fO1ap-9g43JVkqrRnFwNuYWB6tPYScB36XkGdXq4pEg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:26:31 GMT
age: 38495
etag: "bcacfdb674bdd90c157f7e97d232c49a4d206004"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be0dbac-eae3-494b-bc73-d4df7f6c2f33.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be0dbac-eae3-494b-bc73-d4df7f6c2f33.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 69c9db5022c0c66909867f1e0946f5a8
9825e0fc606dc983280a6cd05803bb07e3435ef6
f2809509eee24ed69e6003ac9263423ea949bcc9205969c6cdd476e89ede9b01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be0dbac-eae3-494b-bc73-d4df7f6c2f33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8864
x-amzn-requestid: 6e1a82d1-e35e-4d77-be31-6969a13918da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhU_6GiXoAMFaLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239b98-46ca0525157031324749ee5b;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:39:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: X9B4DU53PxJ-J5Ou1wg_TH_yfN3N1lF1SMMr3iV9-gM7j_sPirhcwA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:51:03 GMT
age: 33423
etag: "9825e0fc606dc983280a6cd05803bb07e3435ef6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee084149-a07d-4141-a484-d9f352209914.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee084149-a07d-4141-a484-d9f352209914.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6d17788c7d2a1a91e68eff48df14bd1
8e1090346d90bc69e7a95384e6a7a01154e31567
1e1eefa02e4c55e73be87a309ad5c2335856125cb678cff6ebc42c5ff73a0e2b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee084149-a07d-4141-a484-d9f352209914.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9904
x-amzn-requestid: a23cb4b3-db6e-48ae-90b1-3ecf6478bf52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhVDpH_CIAMFl4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239bb0-15869210609a18587467d1e2;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:40:00 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: JyXQcHKFIksMgLMROqOfV1ZqdFKSp3QSIlGmXuDR6h88o9J6s-mgkw==
via: 1.1 1002c05e647d0804e83147cdd205d14a.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 22:14:32 GMT
age: 32014
etag: "8e1090346d90bc69e7a95384e6a7a01154e31567"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a73e855-9877-4793-b59a-30b8e5a96117.png
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a73e855-9877-4793-b59a-30b8e5a96117.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7d4ee58e0f26ec6817dbab72aa7db6d
b6e634ef27eba9da38c6472565e0fdca6898e4f0
07db05a6ee70a699164ad55da47bfca58e6639956e256d902cbe0388cd7995c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a73e855-9877-4793-b59a-30b8e5a96117.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8435
x-amzn-requestid: f6efd924-4f54-41a6-8771-087803b5b8ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhU0-EJaoAMFvtQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239b52-37c21ee857fe27d104b70337;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:38:26 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hhh1q_MrZVAaRWwmc1IuJbL3KhhwwHQgceaL15okbg4NvKJlWfUjyA==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 22:02:34 GMT
age: 32732
etag: "b6e634ef27eba9da38c6472565e0fdca6898e4f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed934f67-48ba-4d22-a8f8-4f5f7a10a9f9.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed934f67-48ba-4d22-a8f8-4f5f7a10a9f9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da1bd18c37b83b0ef4641036dc208eec
abb5c719ec9341c6d4146297a2a1eca171df9c81
0085a66912a814c619a1257545d36610c7109ba32f1b097176102d3d3db2c8d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed934f67-48ba-4d22-a8f8-4f5f7a10a9f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12425
x-amzn-requestid: 96b5f0d2-1327-4180-9d48-f915630c3de2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhVDqHyooAMFqyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239bb0-7d89d2d7024f6a821a62c948;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:40:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dxJEH4Jh8lAZ0T28BZnFLhWczwZ7oOaspCmR-SWudP32cF3BQc6wmw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:56:40 GMT
age: 33086
etag: "abb5c719ec9341c6d4146297a2a1eca171df9c81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45619ede-b86e-4373-9398-fec60bb9e862.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45619ede-b86e-4373-9398-fec60bb9e862.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f876cdc19dca10c62d83d19303512c7f
9f812c7bc1b42b0cea3e42694e7d1f6738789770
c647aac44ba9eb501eb7def781ca0168b4eb71a716283cc6f4e6782939a396cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45619ede-b86e-4373-9398-fec60bb9e862.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12123
x-amzn-requestid: b04ac3c4-b4d8-4094-8b7d-bd229bb7d577
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yb2GvFnEoAMF-Gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63216a2a-4e5927ac3f1d0b215ce5a8dc;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 05:44:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1W0Ito5yNmHNxtYBj5jOJQ3Z2OP_Shvhpj94YUDwLHQKzt-zgqjI8A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 03:12:38 GMT
age: 14128
etag: "9f812c7bc1b42b0cea3e42694e7d1f6738789770"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
api64.ipify.org/
200 OK 12 B IP
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET / HTTP/1.1
Host: api64.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freeoptinpage.com
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Sep 2022 07:08:06 GMT
Content-Type: text/plain
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://freeoptinpage.com
Vary: Origin
www.iplocate.io/api/lookup/91.90.42.154
200 OK 179 B URL HTTP/2 www.iplocate.io/api/lookup/91.90.42.154
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d23e441bc04b76b347cc6e00c3a72160
9dd7e4068b708383b2f512114a3c4431d6401dc2
88d26f5222c0a947de7b993cc757a0a75d5687c26142eda14374b3325dfe7a07
GET /api/lookup/91.90.42.154 HTTP/1.1
Host: www.iplocate.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freeoptinpage.com
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 07:08:07 GMT
content-type: application/json; charset=utf-8
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: x-ratelimit-limit, x-ratelimit-reset, x-ratelimit-remaining
access-control-max-age: 7200
cache-control: max-age=0, private, must-revalidate
etag: W/"0c5095b1e961adde0fcad275881eefa7"
referrer-policy: strict-origin-when-cross-origin
vary: Origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-ratelimit-client-id: 91.90.42.154
x-ratelimit-limit: 1000
x-ratelimit-remaining: 998
x-ratelimit-reset: 2022-09-17 00:00:00 +0000
x-request-id: 3daf909a-785e-4203-959a-af44869979e6
x-runtime: 0.012639
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FWqXepKNVtVZy5psJNnnsobuMbeU7VU%2FipNF8FexxRfIsyV5vPIx2%2BlvfMsWizCuzKGkqbdNZtahMX%2FWXQ1tZ6sP9pCIzFmahmn3oo4e8pRADd0d7qRE3Dh%2B%2F1gEFyMK8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b7c4e0490fb511-OSL
content-encoding: br
X-Firefox-Spdy: h2
freeoptinpage.com/static/FontList/Roboto/Roboto-Regular.ttf
200 OK 171 kB URL HTTP/2 freeoptinpage.com/static/FontList/Roboto/Roboto-Regular.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob\012- data
Size 171 kB (171272 bytes)
Hash 11eabca2251325cfc5589c9c6fb57b46
096c9245b6a192d1403a82848e104a65f578a8ec
017c0be9aaa6d0359737e1fa762ad304c0e0107927faff5a6c1f415c7f5244ed
GET /static/FontList/Roboto/Roboto-Regular.ttf HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/static/FontList.css
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:07 GMT
content-type: application/octet-stream
content-length: 171272
last-modified: Thu, 30 Apr 2020 22:05:55 GMT
etag: "5eab4bc3-29d08"
expires: Sat, 16 Sep 2023 07:08:07 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
freeoptinpage.com/static/FontList/Lato/Lato.woff2
200 OK 14 kB URL HTTP/2 freeoptinpage.com/static/FontList/Lato/Lato.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14044, version 1.0\012- data
Hash 129179c4eeb1d784d3d3ad95e0b35905
f75444b5ef6205ee4301d632adf17e28985b0840
036d841b132c14046e26d8f2da1bc634c6ad34885ed1295660694a91c98933a6
GET /static/FontList/Lato/Lato.woff2 HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://freeoptinpage.com/static/FontList.css
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:07 GMT
content-type: application/octet-stream
content-length: 14044
last-modified: Thu, 30 Apr 2020 22:06:40 GMT
etag: "5eab4bf0-36dc"
expires: Sat, 16 Sep 2023 07:08:07 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
freeoptinpage.com/static/FontList/Muli/Muli.woff2
200 OK 25 kB URL HTTP/2 freeoptinpage.com/static/FontList/Muli/Muli.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24884, version 1.0\012- data
Hash 463e1d870377d943fe1b8a1ea9a44df5
3a72930c0c14dc43b196ea8dbb91f7dd465a7ca0
8a71c8749cc0bb450f96766d4cab3b2b9c4d5a9b30c3683f3a5863d8d2ed9c9a
GET /static/FontList/Muli/Muli.woff2 HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://freeoptinpage.com/static/FontList.css
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:07 GMT
content-type: application/octet-stream
content-length: 24884
last-modified: Thu, 30 Apr 2020 22:06:21 GMT
etag: "5eab4bdd-6134"
expires: Sat, 16 Sep 2023 07:08:07 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
freeoptinpage.com/static/FontList/Lato/Lato-Light.woff2
200 OK 14 kB URL HTTP/2 freeoptinpage.com/static/FontList/Lato/Lato-Light.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13912, version 1.0\012- data
Hash 789ad04dc3f39dc3314b12ad25a1c65e
cccbdfef8dde1a50f347fde7ecf5a3840add1b56
706494a230ae9c22ebbda2b9fce9af786bac0ea5f315c80e3fbe9f44e7883c38
GET /static/FontList/Lato/Lato-Light.woff2 HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://freeoptinpage.com/static/FontList.css
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:07 GMT
content-type: application/octet-stream
content-length: 13912
last-modified: Thu, 30 Apr 2020 22:06:37 GMT
etag: "5eab4bed-3658"
expires: Sat, 16 Sep 2023 07:08:07 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
freeoptinpage.com/fonts/arial-black.3e7043e8.ttf
404 Not Found 146 B URL HTTP/2 freeoptinpage.com/fonts/arial-black.3e7043e8.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /fonts/arial-black.3e7043e8.ttf HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/css/app.871440ca.css
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 16 Sep 2022 07:08:07 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
freeoptinpage.com/static/FontList/Lato/Lato-Black.woff2
200 OK 14 kB URL HTTP/2 freeoptinpage.com/static/FontList/Lato/Lato-Black.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13732, version 1.0\012- data
Hash e6769e88a9b4b8da71003fa6116c3e1f
01b44a4ed805df82a6f28dde801c508831b86092
973ebbead06df6ace22a88d2856663d37845792bdf1b40ff69df2e20912fedef
GET /static/FontList/Lato/Lato-Black.woff2 HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://freeoptinpage.com/static/FontList.css
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:07 GMT
content-type: application/octet-stream
content-length: 13732
last-modified: Thu, 30 Apr 2020 22:06:38 GMT
etag: "5eab4bee-35a4"
expires: Sat, 16 Sep 2023 07:08:07 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
warriorplus.com/o2/btn/cn100001000/xcklcp/ns2gb8/312109
200 OK 23 kB URL HTTP/2 warriorplus.com/o2/btn/cn100001000/xcklcp/ns2gb8/312109
IP
File type PNG image data, 362 x 143, 8-bit/color RGBA, non-interlaced\012- data
Hash 40f59594679083dd9e7da563736bfb6d
81a610821255ff9c7c5c1ce7b0a57f7b13edbf62
a75a1ea1e56c50f377db358347cc0439c508d76451a572a35ab3e10a688658fa
GET /o2/btn/cn100001000/xcklcp/ns2gb8/312109 HTTP/1.1
Host: warriorplus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 07:08:07 GMT
content-type: image/png
x-powered-by: PHP/7.0.33-6+ubuntu14.04.1+deb.sury.org+3
expires: Sat, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: warriorplus=712qqcvqq8uqq5cthesjbpqdp1; path=/
rqtok=806204a53e39e089a46b; expires=Sat, 17-Sep-2022 07:08:06 GMT; Max-Age=86400; path=/
TOKEN=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
TOKEN=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
PASSWORD=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
PASSWORD=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
notifications=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
notifications_aff=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
notifications_sales=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
wpg=gkgnsc1g7qmrytbx; expires=Sat, 16-Sep-2023 07:08:06 GMT; Max-Age=31536000; path=/
wpg=gkgnsc1g7qmrytbx; expires=Sat, 16-Sep-2023 07:08:06 GMT; Max-Age=31536000; path=/
last-modified: Fri, 16 Sep 2022 07:08:07 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PT9uMaK3dxihlRhET54g3kJK55BEPUFsNGBgsEsy%2BF9ExGAoEmhPTAbywSB4f3r7mqjMUjUFM2sEh%2B4QixPUraIaX9G3WE3wMhYfyjgruanVqjrvyxVtsB7oY1EnFiPDEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b7c4da2a320b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
freeoptinpage.com/static/FontList/Muli/Muli-Light.woff2
200 OK 12 kB URL HTTP/2 freeoptinpage.com/static/FontList/Muli/Muli-Light.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 11484, version 1.0\012- data
Hash b196dd5c8067325517bac20f66b3edbd
96577d1aa8db03755767f73a6d9abf039c3f73dd
c9efd7fc7c05338def25dbdf68063a4efe9d34dd3bc854fae26cff90fbeef9e0
GET /static/FontList/Muli/Muli-Light.woff2 HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://freeoptinpage.com/static/FontList.css
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:08 GMT
content-type: application/octet-stream
content-length: 11484
last-modified: Thu, 30 Apr 2020 22:06:24 GMT
etag: "5eab4be0-2cdc"
expires: Sat, 16 Sep 2023 07:08:08 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 734d709ca96b537a66a72b012bad01b3
1422dc6e556936950feec9000a321a050b638ff8
f22c958051fad1d1d361d069afd22467fbc3caaebffac1ffb0fe3eead923c0c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freeoptinpage.com/cheetah/pixel/get
200 OK 494 B URL HTTP/2 freeoptinpage.com/cheetah/pixel/get
IP
Hash cea9136a63c62c107467d8f0d79e5c90
6d7416fea6550576e8512a59fbadb5ad67a895ed
3ed659a33303c29cd8f0f0f796597131c4eaec34be91963681ebf928a58cfa55
GET /cheetah/pixel/get HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:08 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
strict-transport-security: max-age=63072000;includeSubDomains
x-frame-options: ALLOW
x-content-type-options: nosniff
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
expires: Thu, 19 Nov 1981 08:52:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/css/app.871440ca.css
200 OK 75 kB URL HTTP/2 freeoptinpage.com/css/app.871440ca.css
IP
Hash 4420471b17d5c3413368567ce0ebf27c
71af46feab9f5f5fd029a14645daa06783266aac
049c4042410f4d2e541b8353ae64230839d9a0e117a375ac72869cf93fb4960f
GET /css/app.871440ca.css HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 20:52:37 GMT
vary: Accept-Encoding
etag: W/"63223f15-72e0e"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eb8f6d4804898e67475e2e6845e28994
65440c64075f5d11bf20a21baa88718788d26184
f68ceebdd1467642207c8afb3478443abe524522c706f0e8536f76d9dba1aee1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F68CEEBDD1467642207C8AFB3478443ABE524522C706F0E8536F76D9DBA1AEE1"
Last-Modified: Thu, 15 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21578
Expires: Fri, 16 Sep 2022 13:07:46 GMT
Date: Fri, 16 Sep 2022 07:08:08 GMT
Connection: keep-alive
freeoptinpage.com/static/bootstrap/dist/js/bootstrap.min.js
200 OK 67 kB URL HTTP/2 freeoptinpage.com/static/bootstrap/dist/js/bootstrap.min.js
IP
Hash 72e3e3afc3a63438bd1e3c453ddf4933
becb3e6922e1f5bb392f92910ade8b4734770767
3f06a68fe504e7fa24e14d99e8a1ff4112e5ce7fbae07ea83f03bf3c2ee607a7
GET /static/bootstrap/dist/js/bootstrap.min.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: application/javascript
last-modified: Thu, 30 Apr 2020 22:04:51 GMT
vary: Accept-Encoding
etag: W/"5eab4b83-e2d8"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
my.freeoptinpage.com/stats.php
200 OK 415 B URL HTTP/1.1 my.freeoptinpage.com/stats.php
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2842a40da9bab42e7cf182b86b667c32
d701379d86845fcc80681300a21718302b4fe5e6
de6317a1f6c4769366edd8da499b72421794ee886aae89e7fe5d4e0e0495bd5f
GET /stats.php HTTP/1.1
Host: my.freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 07:08:08 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: PHPSESSID=ge7sis5r53sl9hsfnok95cfeqq; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 415
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
freeoptinpage.com/cheetah/split-test
200 OK 117 kB URL HTTP/2 freeoptinpage.com/cheetah/split-test
IP
Size 117 kB (117048 bytes)
Hash 154fc48905fe9e7626956582c1e3b93a
adc67f354842ac6e68e890dd69df92adcfb709b3
68a02688476047128fc2c13c9c1c529acea98001062e02254448995b94d643b3
GET /cheetah/split-test HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
strict-transport-security: max-age=63072000;includeSubDomains
x-frame-options: ALLOW
x-content-type-options: nosniff
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
expires: Thu, 19 Nov 1981 08:52:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 12:31:58 GMT
expires: Sun, 10 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 498971
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7df27d4646e6e1cd358f0997ad604ea9
bf0c3feb55312e00ed8aa718458cc1e932903ac2
ba7ebd5b66156d280c46a2e492c5830f67e114711498b405b4e57ee1f45f4905
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e8e3b8dcfc70035468cee19fa0ce164
8abd549de54a56c4d8866642803817e1d411ad88
9f8702221570464be855f0cf42d77a90b745fbf6c60d5d437218d45f9603fd19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Lato
200 OK 24 kB URL HTTP/2 fonts.googleapis.com/css?family=Lato
IP
Hash 49b814609c473037aa1ebd0e5ea8bc65
20a5b0b502e3a6bb5a6c8ca844676303bd79689f
78af117503e3bc2f9873f949b1338363e8ec6f23a5270d99de99df2d4837c2e7
GET /css?family=Lato HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.freeoptinpage.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 16 Sep 2022 07:08:09 GMT
date: Fri, 16 Sep 2022 07:08:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cheetah-api.builderall.com/get-watermark/1188193
200 OK 543 B URL HTTP/2 cheetah-api.builderall.com/get-watermark/1188193
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c2943651768c5bd1a308f8c7f270ecf5
0a31c13a8eb28d34f8b1baa611b08838afdfbe7b
6ff6bad67d14e7b91e5a57eb4c221cefcb6de9f909650f7a3c5c4cd2bda67f52
GET /get-watermark/1188193 HTTP/1.1
Host: cheetah-api.builderall.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freeoptinpage.com
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Sep 2022 07:08:09 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Content-Type, X-Auth-Token, Origin, Authorization
cache-control: private, must-revalidate, public
pragma: no-cache, public
expires: -1
x-xss-protection: 1; mode=block
set-cookie: XSRF-TOKEN=eyJpdiI6IlwvN1loSGhhcGhCSlwvU1RtU1kxVGFvQT09IiwidmFsdWUiOiIwejZhOG5teXUxaHB0cVRnVFZCOG1Sa1h5d1R6QUhCZnh0XC9wUlRjbDhBU3R4bUN6NmlxOFdNQnhZTnhoTld4TiIsIm1hYyI6ImM3ZmFiYzcwODU5M2RlMTI2Y2E5ZWM4MGMwNjZmODFkNDIyNTM4NzIxOThmZDRjMDM1ZWIyZDVkNTdiNzI0NDMifQ%3D%3D; expires=Fri, 16-Sep-2022 09:08:08 GMT; Max-Age=7200; path=/;HttpOnly;Secure
laravel_session=eyJpdiI6IjB3WjRic09SSXJIZWx3dWpzWXp0OVE9PSIsInZhbHVlIjoiY1Z0K2lFOUY4U0ZKaHBjdU50UkxhVjQzTDRBdE40OFZRMGtkYW82MDNEd0JtSlZnQzJzWk1vYVVjbEplTlFuUiIsIm1hYyI6Ijk5OWM2MTA0N2JmMjc0OTc3MzI5ODAzZjA4ZjhhODJkZmM3NTJhMjNkNjQ3N2M3ZjEzMDZjOGYwMzNhOWEwYmYifQ%3D%3D; expires=Fri, 16-Sep-2022 09:08:08 GMT; Max-Age=7200; path=/; httponly;HttpOnly;Secure
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Shp71SKl%2ByvGCO9q4Ap4w%2F%2BQyvKgadL86eAZBaQAoLphbQ6KxuVHiestuDNhPucRhl1i8ZJfqvDMT%2Baulx2R8BkPvuQBw0lp5JPgxaaNVifzK%2FRQYyyqTJIpxbEYE%2BH%2Fv%2FrMjiI8TeVbRZ%2B6Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b7c4eb2c111bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
freeoptinpage.com/js/chunk-vendors.bfe9948e.js
200 OK 319 kB URL HTTP/2 freeoptinpage.com/js/chunk-vendors.bfe9948e.js
IP
Size 319 kB (318979 bytes)
Hash 235dfaec02f8619057a0551a14e155db
ef163a7dad0c2f16828f29b8a41f3214af0fdeb7
e7f97b839e3ee013604d6db44f034802870d1c112ca862fae96bb27fa8b6cf44
GET /js/chunk-vendors.bfe9948e.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: application/javascript
last-modified: Tue, 06 Sep 2022 17:59:08 GMT
vary: Accept-Encoding
etag: W/"63178a6c-b38ea"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
crm-api.eb4us.com/api/origin-check
200 OK 74 B URL HTTP/1.1 crm-api.eb4us.com/api/origin-check
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b09aab4da9abfabc3e051aa3a8679c9e
05b96db1e2aea0cded8d6050c1d037d10dcc2c80
9df7109aaf3c2551bf85b310ec77a013db17883e9579701893f8198c55e5da0d
POST /api/origin-check HTTP/1.1
Host: crm-api.eb4us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 7381
Origin: https://freeoptinpage.com
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 16 Sep 2022 07:08:09 GMT
Access-Control-Allow-Origin: https://freeoptinpage.com
Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Content-Encoding: gzip
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 11 Sep 2022 02:16:32 GMT
expires: Mon, 11 Sep 2023 02:16:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 449497
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5cb573d3c9bcfd0aca93d5064638773c
8389db960285c5b7a5a3beaa026b0ece6b362d8a
618e5bc351dfee8d072d1357971e52a5891de7d89e8cfc57affc7ddc55082e8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freeoptinpage.com/cheetah/version
200 OK 522 B URL HTTP/2 freeoptinpage.com/cheetah/version
IP
Hash 4e591e6027bb942245e0767c854ae0e5
c9f2979886f28596e5d106d89d02a419de9add8f
3e39f51336ae5c64a8001ac23f0d99df155f5c16e5964cb6613e7d3767ec9fdf
GET /cheetah/version HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:09 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
strict-transport-security: max-age=63072000;includeSubDomains
x-frame-options: ALLOW
x-content-type-options: nosniff
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
expires: Thu, 19 Nov 1981 08:52:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Sep 2022 06:59:23 GMT
expires: Fri, 16 Sep 2022 07:14:23 GMT
cache-control: public, max-age=900
age: 526
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Fri, 16 Sep 2022 07:08:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Fri, 16 Sep 2022 07:08:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5cb573d3c9bcfd0aca93d5064638773c
8389db960285c5b7a5a3beaa026b0ece6b362d8a
618e5bc351dfee8d072d1357971e52a5891de7d89e8cfc57affc7ddc55082e8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 848674a3bc6b0d4d6cba22b140c574bc
ec95f08f3a5b022c3753f78e30f71d03e2895d78
069aaae82ec20e5bbcc694f9603bded464798891e5e2abc27baadeace22f6a05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
app.socialproofy.io/themes/s00p/assets/js/sp-font.js?v=510000
200 OK 17 kB URL HTTP/1.1 app.socialproofy.io/themes/s00p/assets/js/sp-font.js?v=510000
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (5770)
Hash 65a62d3288e9393d3183b48775e8137f
a285e111584c24c1354620a4a4fbf582f11d6f22
54eff9896ed81ead1da0fbd1b3810ca6080a29cf4cead1b4c2f1e41a43c79b7a
GET /themes/s00p/assets/js/sp-font.js?v=510000 HTTP/1.1
Host: app.socialproofy.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 07:08:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 19 Apr 2022 15:53:05 GMT
ETag: "aa23-5dd03df611990-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self';
X-XSS-Protection: 1;mode=block
Content-Length: 17186
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
freeoptinpage.com/css/chunk-65b86cc8.36cc55a8.css
200 OK 232 B URL HTTP/2 freeoptinpage.com/css/chunk-65b86cc8.36cc55a8.css
IP
File type ASCII text, with no line terminators
Hash 321ca449d014a7908764f1222ee16e34
f03cce9e4e2b880d45ea663cd2c61c12c5ae577a
ede16b3e5bd70d41d7c3b18f5522f4f8e46c96b313bee162afc048c8d856cf80
GET /css/chunk-65b86cc8.36cc55a8.css HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:09 GMT
content-type: text/css
content-length: 232
last-modified: Fri, 21 Jan 2022 17:39:37 GMT
etag: "61eaefd9-e8"
expires: Sat, 16 Sep 2023 07:08:09 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
freeoptinpage.com/css/chunk-7e66b06c.780d7455.css
200 OK 88 B URL HTTP/2 freeoptinpage.com/css/chunk-7e66b06c.780d7455.css
IP
File type ASCII text, with no line terminators
Hash 1beef4415818a0ed3794800bb15be842
5425642f2d7e12f83f1706014acab257466a54f4
cb707f5a93a67906b2f2729a081be34d43ee1a4a170c1cdc9b4f5ab0231550fd
GET /css/chunk-7e66b06c.780d7455.css HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:09 GMT
content-type: text/css
content-length: 88
last-modified: Fri, 21 Jan 2022 17:39:39 GMT
etag: "61eaefdb-58"
expires: Sat, 16 Sep 2023 07:08:09 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7975b33417f675d21a178b997288d616
1d2e957c46d45d6cb2f44389f3dcc66c880b6065
daffff63daade8bb0c2fd63570229df8502c563dd079b4da4103f6ee89fa67e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7975b33417f675d21a178b997288d616
1d2e957c46d45d6cb2f44389f3dcc66c880b6065
daffff63daade8bb0c2fd63570229df8502c563dd079b4da4103f6ee89fa67e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 16 Sep 2022 07:08:10 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 91dad4479f7dcb623266cf0dcfef5875
9fcf1f0e16c17a43021ab8fb01089d2d9c9f1d3a
0dc4f9c3ecdccb7e1b7a651c72ee63acc06482b362f060547534c3196e561412
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/9NsBbvP-L1Df-yHWGvBJgb6S-WRP1KsOTV1Pj0Mxhgc.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/9NsBbvP-L1Df-yHWGvBJgb6S-WRP1KsOTV1Pj0Mxhgc.js
IP
File type ASCII text, with very long lines (36398)
Hash ae7f3b4d91bda092715f06f0a7d7d29f
978edbf9b0476916ce84c9d774f101a73ea9ccd5
9e2850554466c6e92ff60208615257698036c06ac9262417455ea73104ac1663
GET /js/th/9NsBbvP-L1Df-yHWGvBJgb6S-WRP1KsOTV1Pj0Mxhgc.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14461
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 05:09:13 GMT
expires: Thu, 14 Sep 2023 05:09:13 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Sep 2022 11:00:00 GMT
content-type: text/javascript
age: 179937
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash d7d804cd58ac36234e143601164bafbe
8fafceb2bfab01aeee04bb5c1598797cd5bd651a
4debf9eecdaef9077320d09b749f10f25630ac0cd63615511460c04ee2bcc111
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 16 Sep 2022 07:08:10 GMT
server: ESF
cache-control: private
content-length: 31167
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/PzKwASpP14dcK-4xI3W8wlArk1PaCxVzsebnznhuyzw.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/PzKwASpP14dcK-4xI3W8wlArk1PaCxVzsebnznhuyzw.js
IP
File type ASCII text, with very long lines (35934)
Hash f7485f2e71f406d30ff52095698b34a8
d9d15fda21d492235bcee9d738b7db04aad8e5f4
9f62a0d008d0517f5d0de5c67e03045714ee37312c38988b9c5c679d83a392c3
GET /js/th/PzKwASpP14dcK-4xI3W8wlArk1PaCxVzsebnznhuyzw.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14059
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 05:03:35 GMT
expires: Thu, 14 Sep 2023 05:03:35 GMT
cache-control: public, max-age=31536000
age: 180275
last-modified: Mon, 29 Aug 2022 11:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7975b33417f675d21a178b997288d616
1d2e957c46d45d6cb2f44389f3dcc66c880b6065
daffff63daade8bb0c2fd63570229df8502c563dd079b4da4103f6ee89fa67e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash aa8ced9799b520da63e80078dfa77329
f2008fb964ce5c34c293276ff91ad6d98c966a52
e2272a3faef764d7c8aa9c51e842ad991eeefb7f965b877af65692e790d7ff48
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 16 Sep 2022 07:08:10 GMT
server: ESF
cache-control: private
content-length: 31217
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
crm-api.eb4us.com/api/tracking
200 OK 37 B URL HTTP/1.1 crm-api.eb4us.com/api/tracking
IP
File type ASCII text, with no line terminators
Hash e9a8fdd0420f7eae3477f0ecd480ab6c
41d788390ae00ecab0f861b9cfd7910aa0b826e6
be3feb95178f781b4b3e348318d5b2ef6594b7ee59a33a44c2106c1d68fa2c85
POST /api/tracking HTTP/1.1
Host: crm-api.eb4us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 246
Origin: https://freeoptinpage.com
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 16 Sep 2022 07:08:10 GMT
Access-Control-Allow-Origin: https://freeoptinpage.com
Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8ff1c0d8a380ce4a561609526d995bf5
135ecd7e71ea2823d39f8c1efcb2121618ed8167
f7228281af8d6de222aa47b3a78a627f85315244e65a8956fa2c0c7dff1bb7ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 818b1c492640bb49ddaaf8060465b76f
6b3aa62cd3855dc60fe30d8bfba7cbb5d6b7b931
1544372859a8715652c5d92e23880fe499e746d5791391744695cd55be3d6b7d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e44599cb2b55b777f046cded2901190
1976e98f994fd7b422d922903d6ff2384ede14c6
b43462cda11612125d6de2f62a816e6835ff2be1144b84ffa345d701630b9407
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e44599cb2b55b777f046cded2901190
1976e98f994fd7b422d922903d6ff2384ede14c6
b43462cda11612125d6de2f62a816e6835ff2be1144b84ffa345d701630b9407
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/VTBwvhS1b9w/maxresdefault.webp
200 OK 52 kB URL HTTP/2 i.ytimg.com/vi_webp/VTBwvhS1b9w/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0786051de337add97f6bfc4db707f5bb
918d3d12cae0c5e9d34ef14f271d7eb1299ed336
9511bdec521c255659f5ffcfc4a5fc9665ce64d2645189a48aecd828ce6c15fb
GET /vi_webp/VTBwvhS1b9w/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 51974
date: Fri, 16 Sep 2022 07:08:10 GMT
expires: Fri, 16 Sep 2022 09:08:10 GMT
cache-control: public, max-age=7200
etag: "1658419580"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=243&aitags=133%2C134%2C160%2C242%2C243%2C278&source=youtube&requiressl=yes&mh=NC&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynld&ms=au%2Crdu&mv=u&mvi=1&pl=21&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=video%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2489968&dur=114.633&lmt=1659379929724883&mt=1663311664&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5319224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRQIhAIehUgwsO24UN6IR0iOLfKwtvwqx9S6NHqfLAUEOo9RJAiA50WYdem8hg0W-FBsql-rJGzSTcoJ5EmRBNDJCzmsMaw%3D%3D&alr=yes&sig=AOq0QJ8wRAIgCof2hvEfmJC2MevFNnZ0s-R0icQNMwwMy1nw1_YLDlQCIF-Zi2xLRm207s8-GRUh3tpiixjv2gCyC1ApiPgTEg1p&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&range=0-66120&rn=1&rbuf=0&ump=1&srfvp=1
200 OK 1.1 kB URL HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=243&aitags=133%2C134%2C160%2C242%2C243%2C278&source=youtube&requiressl=yes&mh=NC&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynld&ms=au%2Crdu&mv=u&mvi=1&pl=21&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=video%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2489968&dur=114.633&lmt=1659379929724883&mt=1663311664&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5319224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRQIhAIehUgwsO24UN6IR0iOLfKwtvwqx9S6NHqfLAUEOo9RJAiA50WYdem8hg0W-FBsql-rJGzSTcoJ5EmRBNDJCzmsMaw%3D%3D&alr=yes&sig=AOq0QJ8wRAIgCof2hvEfmJC2MevFNnZ0s-R0icQNMwwMy1nw1_YLDlQCIF-Zi2xLRm207s8-GRUh3tpiixjv2gCyC1ApiPgTEg1p&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&range=0-66120&rn=1&rbuf=0&ump=1&srfvp=1
IP
ASN #50304 Blix Solutions AS
Hash e912c7c8a3249ea9c17714c492d4bce2
c15d448e6591ef406045fc90e8df9bbd84f36829
724c55faf876d3329513395c808de3c6e698598c534295d73dd54215c0818013
POST /videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=243&aitags=133%2C134%2C160%2C242%2C243%2C278&source=youtube&requiressl=yes&mh=NC&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynld&ms=au%2Crdu&mv=u&mvi=1&pl=21&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=video%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2489968&dur=114.633&lmt=1659379929724883&mt=1663311664&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5319224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRQIhAIehUgwsO24UN6IR0iOLfKwtvwqx9S6NHqfLAUEOo9RJAiA50WYdem8hg0W-FBsql-rJGzSTcoJ5EmRBNDJCzmsMaw%3D%3D&alr=yes&sig=AOq0QJ8wRAIgCof2hvEfmJC2MevFNnZ0s-R0icQNMwwMy1nw1_YLDlQCIF-Zi2xLRm207s8-GRUh3tpiixjv2gCyC1ApiPgTEg1p&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&range=0-66120&rn=1&rbuf=0&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Fri, 16 Sep 2022 07:08:10 GMT
Expires: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: private, max-age=21300
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
freeoptinpage.com/js/chunk-65b86cc8.685a253b.js
200 OK 1.9 kB URL HTTP/2 freeoptinpage.com/js/chunk-65b86cc8.685a253b.js
IP
Hash b8218d7bd5f4c80792dfefdbc7de38a6
51936178e8a034f810b6347694cee04ea52fe8e1
356274d7d8813d1609c12ea391051df61eee7f82ae7539dd004847e8fcf7153d
GET /js/chunk-65b86cc8.685a253b.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:10 GMT
content-type: application/javascript
last-modified: Fri, 21 Jan 2022 17:39:14 GMT
vary: Accept-Encoding
etag: W/"61eaefc2-a90"
expires: Sat, 16 Sep 2023 07:08:10 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e44599cb2b55b777f046cded2901190
1976e98f994fd7b422d922903d6ff2384ede14c6
b43462cda11612125d6de2f62a816e6835ff2be1144b84ffa345d701630b9407
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/o1-Uf7B2v9fLlxWCzS0i-vS28sEJWuDcApVfg1oyo9_hRT-E5w2XHgohU7o4FMZLw2HVIUqB_Q=s68-c-k-c0x00ffffff-no-rj
200 OK 2.9 kB URL HTTP/2 yt3.ggpht.com/o1-Uf7B2v9fLlxWCzS0i-vS28sEJWuDcApVfg1oyo9_hRT-E5w2XHgohU7o4FMZLw2HVIUqB_Q=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash a6396c000893e68131af3d4fb19b35eb
95a3871965a9b34611c55b76c2697e06a4b8f3a2
cdc9021ac81595641a8c382c734d1722a286416cd564d3b7741ee99117852ba9
GET /o1-Uf7B2v9fLlxWCzS0i-vS28sEJWuDcApVfg1oyo9_hRT-E5w2XHgohU7o4FMZLw2HVIUqB_Q=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Sat, 17 Sep 2022 07:08:10 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="channels4_profile.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 16 Sep 2022 07:08:10 GMT
server: fife
content-length: 2939
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 818b1c492640bb49ddaaf8060465b76f
6b3aa62cd3855dc60fe30d8bfba7cbb5d6b7b931
1544372859a8715652c5d92e23880fe499e746d5791391744695cd55be3d6b7d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 20ae50d0df52817906a88b07b3c08138
0f999020f07959636477be4178d238d4dd460464
26eb9c5ac69c9144425fb15a481336487c1923bb141685aea110b0e3dfc20171
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5c7cffd522afef320b9ef30c657d385f
2cd058400db1ac8a3fb92613e9352cf60c7332a4
d9f7f431084b1ae2f0cb7deb74ee5e2a7c2bf19b169566e74274e276f3822201
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5c7cffd522afef320b9ef30c657d385f
2cd058400db1ac8a3fb92613e9352cf60c7332a4
d9f7f431084b1ae2f0cb7deb74ee5e2a7c2bf19b169566e74274e276f3822201
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=243&aitags=133%2C134%2C160%2C242%2C243%2C278&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=video%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2489968&dur=114.633&lmt=1659379929724883&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5319224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgCof2hvEfmJC2MevFNnZ0s-R0icQNMwwMy1nw1_YLDlQCIF-Zi2xLRm207s8-GRUh3tpiixjv2gCyC1ApiPgTEg1p&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=NC&mm=29&mn=sn-5goeenez&ms=rdu&mt=1663311898&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhANd8lC9BiXhxkR1dL1OXyvatOUrGpN8QBEcLZl9hO5LxAiEA4gtWrXWf-3E_mxaeHY6C-76TfhpU5ZU4hBfeNVNmGFc%3D&range=0-66120&rn=3&rbuf=0&ump=1&srfvp=1
200 OK 1.1 kB URL HTTP/1.1 rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=243&aitags=133%2C134%2C160%2C242%2C243%2C278&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=video%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2489968&dur=114.633&lmt=1659379929724883&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5319224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgCof2hvEfmJC2MevFNnZ0s-R0icQNMwwMy1nw1_YLDlQCIF-Zi2xLRm207s8-GRUh3tpiixjv2gCyC1ApiPgTEg1p&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=NC&mm=29&mn=sn-5goeenez&ms=rdu&mt=1663311898&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhANd8lC9BiXhxkR1dL1OXyvatOUrGpN8QBEcLZl9hO5LxAiEA4gtWrXWf-3E_mxaeHY6C-76TfhpU5ZU4hBfeNVNmGFc%3D&range=0-66120&rn=3&rbuf=0&ump=1&srfvp=1
IP
Hash c1be63f464381af9646f3990fc48862d
51738f065110433499215e671b68f9b28f892f5b
eabbd50bf295b56038160693ddaa41c74e8a0de3128b378caa0f19b32f0bda4a
POST /videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=243&aitags=133%2C134%2C160%2C242%2C243%2C278&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=video%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2489968&dur=114.633&lmt=1659379929724883&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5319224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgCof2hvEfmJC2MevFNnZ0s-R0icQNMwwMy1nw1_YLDlQCIF-Zi2xLRm207s8-GRUh3tpiixjv2gCyC1ApiPgTEg1p&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=NC&mm=29&mn=sn-5goeenez&ms=rdu&mt=1663311898&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhANd8lC9BiXhxkR1dL1OXyvatOUrGpN8QBEcLZl9hO5LxAiEA4gtWrXWf-3E_mxaeHY6C-76TfhpU5ZU4hBfeNVNmGFc%3D&range=0-66120&rn=3&rbuf=0&ump=1&srfvp=1 HTTP/1.1
Host: rr3---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Fri, 16 Sep 2022 07:08:10 GMT
Expires: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: private, max-age=21300
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=251&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=audio%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2094107&dur=114.661&lmt=1659379888241193&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5318224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRgIhAOB1EHS_sG2rghnoX5yXZRJdUV5OAKtyTHtDs5UEZpQVAiEA307vWY_bzzCLwwgMfi-gyClhRWdOJKHMkaKsIykk6LA%3D&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=NC&mm=29&mn=sn-5goeenez&ms=rdu&mt=1663311898&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMVocJuC8agX71307PPlr_6tZmASxf0rbQkFxrYIRi0pAiEAg0dGrE_S0f_cACUWyxo1BGn9-Izcc04ykmSo1EZvNsw%3D&range=0-65995&rn=4&rbuf=0&ump=1&srfvp=1
200 OK 1.1 kB URL HTTP/1.1 rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=251&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=audio%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2094107&dur=114.661&lmt=1659379888241193&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5318224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRgIhAOB1EHS_sG2rghnoX5yXZRJdUV5OAKtyTHtDs5UEZpQVAiEA307vWY_bzzCLwwgMfi-gyClhRWdOJKHMkaKsIykk6LA%3D&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=NC&mm=29&mn=sn-5goeenez&ms=rdu&mt=1663311898&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMVocJuC8agX71307PPlr_6tZmASxf0rbQkFxrYIRi0pAiEAg0dGrE_S0f_cACUWyxo1BGn9-Izcc04ykmSo1EZvNsw%3D&range=0-65995&rn=4&rbuf=0&ump=1&srfvp=1
IP
Hash 25b68775f1fe086325419fee38026f5c
6fd045e288ba6f2b0203239b99b559a226695bd2
8e2c95f8016f985656102056b4c435c7d48a08b169f0913cc8884aeabf68cebb
POST /videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=251&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=audio%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2094107&dur=114.661&lmt=1659379888241193&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5318224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRgIhAOB1EHS_sG2rghnoX5yXZRJdUV5OAKtyTHtDs5UEZpQVAiEA307vWY_bzzCLwwgMfi-gyClhRWdOJKHMkaKsIykk6LA%3D&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=NC&mm=29&mn=sn-5goeenez&ms=rdu&mt=1663311898&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMVocJuC8agX71307PPlr_6tZmASxf0rbQkFxrYIRi0pAiEAg0dGrE_S0f_cACUWyxo1BGn9-Izcc04ykmSo1EZvNsw%3D&range=0-65995&rn=4&rbuf=0&ump=1&srfvp=1 HTTP/1.1
Host: rr3---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Fri, 16 Sep 2022 07:08:10 GMT
Expires: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: private, max-age=21300
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5c7cffd522afef320b9ef30c657d385f
2cd058400db1ac8a3fb92613e9352cf60c7332a4
d9f7f431084b1ae2f0cb7deb74ee5e2a7c2bf19b169566e74274e276f3822201
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr1---sn-5hne6nsd.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=243&aitags=133%2C134%2C160%2C242%2C243%2C278&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=video%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2489968&dur=114.633&lmt=1659379929724883&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5319224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgCof2hvEfmJC2MevFNnZ0s-R0icQNMwwMy1nw1_YLDlQCIF-Zi2xLRm207s8-GRUh3tpiixjv2gCyC1ApiPgTEg1p&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=NC&mm=34&mn=sn-5hne6nsd&ms=ltu&mt=1663311557&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAKo2-z8EwYHBN9H4SO6pxXB_sfNWz1h4XPLTrHGhZ6JhAiEAwfHQg86uuTetBToiOaWk8vGqwlciIwSsikNYvS3M6aM%3D&range=0-66120&rn=5&rbuf=0&ump=1&srfvp=1
200 OK 66 kB URL HTTP/1.1 rr1---sn-5hne6nsd.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=243&aitags=133%2C134%2C160%2C242%2C243%2C278&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=video%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2489968&dur=114.633&lmt=1659379929724883&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5319224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgCof2hvEfmJC2MevFNnZ0s-R0icQNMwwMy1nw1_YLDlQCIF-Zi2xLRm207s8-GRUh3tpiixjv2gCyC1ApiPgTEg1p&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=NC&mm=34&mn=sn-5hne6nsd&ms=ltu&mt=1663311557&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAKo2-z8EwYHBN9H4SO6pxXB_sfNWz1h4XPLTrHGhZ6JhAiEAwfHQg86uuTetBToiOaWk8vGqwlciIwSsikNYvS3M6aM%3D&range=0-66120&rn=5&rbuf=0&ump=1&srfvp=1
IP
Hash 9ffe6dd9ae79cb0cb8d28af9f9d9283f
630190fa4e80806b3e1a92a64f4c6a4a660bfbb0
524d724a3c1eafb1b3f5d75fb48d3211b2a2bd94f899404dfe18296126474465
POST /videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=243&aitags=133%2C134%2C160%2C242%2C243%2C278&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=video%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2489968&dur=114.633&lmt=1659379929724883&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5319224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgCof2hvEfmJC2MevFNnZ0s-R0icQNMwwMy1nw1_YLDlQCIF-Zi2xLRm207s8-GRUh3tpiixjv2gCyC1ApiPgTEg1p&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=NC&mm=34&mn=sn-5hne6nsd&ms=ltu&mt=1663311557&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAKo2-z8EwYHBN9H4SO6pxXB_sfNWz1h4XPLTrHGhZ6JhAiEAwfHQg86uuTetBToiOaWk8vGqwlciIwSsikNYvS3M6aM%3D&range=0-66120&rn=5&rbuf=0&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-5hne6nsd.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Mon, 01 Aug 2022 18:52:09 GMT
Content-Type: application/vnd.yt-ump
Date: Fri, 16 Sep 2022 07:08:10 GMT
Expires: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: private, max-age=21300
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr1---sn-5hne6nsd.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=251&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=audio%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2094107&dur=114.661&lmt=1659379888241193&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5318224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRgIhAOB1EHS_sG2rghnoX5yXZRJdUV5OAKtyTHtDs5UEZpQVAiEA307vWY_bzzCLwwgMfi-gyClhRWdOJKHMkaKsIykk6LA%3D&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=NC&mm=34&mn=sn-5hne6nsd&ms=ltu&mt=1663311557&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMPPdkFF_i4bIkiZXlcB-JiRM6O4OPyukkG_8OoMvpoBAiEArYFMMp3DmnkDfh7-H_hS_SqFHT3wBt-CaXazGIpv0m0%3D&range=0-65995&rn=6&rbuf=0&ump=1&srfvp=1
200 OK 66 kB URL HTTP/1.1 rr1---sn-5hne6nsd.googlevideo.com/videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=251&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=audio%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2094107&dur=114.661&lmt=1659379888241193&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5318224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRgIhAOB1EHS_sG2rghnoX5yXZRJdUV5OAKtyTHtDs5UEZpQVAiEA307vWY_bzzCLwwgMfi-gyClhRWdOJKHMkaKsIykk6LA%3D&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=NC&mm=34&mn=sn-5hne6nsd&ms=ltu&mt=1663311557&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMPPdkFF_i4bIkiZXlcB-JiRM6O4OPyukkG_8OoMvpoBAiEArYFMMp3DmnkDfh7-H_hS_SqFHT3wBt-CaXazGIpv0m0%3D&range=0-65995&rn=6&rbuf=0&ump=1&srfvp=1
IP
Hash 94380e3ed73d6638e13b0887244c3ada
24cc2a18f071c120185140d545d636d72c6db491
79b08963efaf1db150b1ca2f3fa859cdf5fe4ce8f4c8957097fac38f2604d0db
POST /videoplayback?expire=1663333690&ei=2iAkY-WBAYn2yAWErqmgAQ&ip=91.90.42.154&id=o-AO4eUNYRPjvU0nppYs9_UOIEYyQrAL8f-JPM7kOyNEAC&itag=251&source=youtube&requiressl=yes&spc=yR2vp2xJqu07W5n_hBHAgyjXUpiUKXc&vprv=1&mime=audio%2Fwebm&ns=Xa5-JWOr1Eg3NxQ95rb29_MI&gir=yes&clen=2094107&dur=114.661&lmt=1659379888241193&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&rbqsm=fr&txp=5318224&n=-63TbYWlkcGG_A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRgIhAOB1EHS_sG2rghnoX5yXZRJdUV5OAKtyTHtDs5UEZpQVAiEA307vWY_bzzCLwwgMfi-gyClhRWdOJKHMkaKsIykk6LA%3D&cpn=CYdMOKi3srB_5pPA&cver=1.20220914.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=NC&mm=34&mn=sn-5hne6nsd&ms=ltu&mt=1663311557&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMPPdkFF_i4bIkiZXlcB-JiRM6O4OPyukkG_8OoMvpoBAiEArYFMMp3DmnkDfh7-H_hS_SqFHT3wBt-CaXazGIpv0m0%3D&range=0-65995&rn=6&rbuf=0&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-5hne6nsd.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Mon, 01 Aug 2022 18:51:28 GMT
Content-Type: application/vnd.yt-ump
Date: Fri, 16 Sep 2022 07:08:10 GMT
Expires: Fri, 16 Sep 2022 07:08:10 GMT
Cache-Control: private, max-age=21300
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 200 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Size 200 kB (199987 bytes)
Hash 1520ad58fc4b20bfe72c9b06a71dc672
3e0e99f5a5f2bb9f11a491924bbf8272f86f9c07
a05a93a227d4fe5f3ff9e537b8e72fdde67bef1bdfe612821e2b2457c36a5193
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 16 Sep 2022 07:08:11 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 16 Sep 2022 07:08:11 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3e26808f2f40cf6a02293500fb82c3cc
908ce69b267233ce4eb2b1ae0d028f15a529a5a4
d717b8ebe81fdc196e62204836f3bcce3be644ac4c9aa46f194d7eec0e15d203
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 932
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 16 Sep 2022 07:08:11 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freeoptinpage.com/js/chunk-2d0e4e8d.90980b71.js
200 OK 1.2 kB URL HTTP/2 freeoptinpage.com/js/chunk-2d0e4e8d.90980b71.js
IP
File type ASCII text, with very long lines (3358)
Hash 3d3acd982e0f84c2823db8bf984d4e66
020811d22452c00866358a574fb8c420190e3bb3
4e44456e48671362aa5ea3c71b8a1b7d285f8be7c70a9eb613eca718e65fd7d0
GET /js/chunk-2d0e4e8d.90980b71.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:10 GMT
content-type: application/javascript
last-modified: Fri, 21 Jan 2022 17:39:28 GMT
vary: Accept-Encoding
etag: W/"61eaefd0-d52"
expires: Sat, 16 Sep 2023 07:08:10 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
crm-api.eb4us.com/api/tagger
200 OK 48 B URL HTTP/1.1 crm-api.eb4us.com/api/tagger
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 16657b26a6e561749317670e0e242650
11ce0a8d42126aa57df87908396f904dcc41e7c8
6dd6293764d6a4aa62447260046a31583bba8f5038878034825e45a617bafd39
POST /api/tagger HTTP/1.1
Host: crm-api.eb4us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 54
Origin: https://freeoptinpage.com
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 16 Sep 2022 07:08:12 GMT
Access-Control-Allow-Origin: https://freeoptinpage.com
Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Content-Encoding: gzip
crm-api.eb4us.com/api/mb-event
200 OK 71 B URL HTTP/1.1 crm-api.eb4us.com/api/mb-event
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 08d0a3faf65d460a5f26c240565699e0
1762dcbc4ca2caf5eff1beab3de2d4b9bdc02f25
2a728334c298ab5b8c275319f9c770025309fd203fa7e07a627bc40c718573d4
POST /api/mb-event HTTP/1.1
Host: crm-api.eb4us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 176
Origin: https://freeoptinpage.com
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 16 Sep 2022 07:08:12 GMT
Access-Control-Allow-Origin: https://freeoptinpage.com
Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Content-Encoding: gzip
freeoptinpage.com/js/chunk-2d0a3203.7cc86c4e.js
200 OK 988 B URL HTTP/2 freeoptinpage.com/js/chunk-2d0a3203.7cc86c4e.js
IP
Hash f4efd16d5c94eb243da663506a2b1a29
7d5a42f4b9ede6af5dde133de887c7edf442b4f2
ce808938807210051f257325570abb793ad1456c2191210fabf714040bf326d8
GET /js/chunk-2d0a3203.7cc86c4e.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:09 GMT
content-type: application/javascript
last-modified: Fri, 21 Jan 2022 17:39:28 GMT
vary: Accept-Encoding
etag: W/"61eaefd0-cbe"
expires: Sat, 16 Sep 2023 07:08:09 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/
200 OK 0 B IP
GET / HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:05 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
set-cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji; path=/
strict-transport-security: max-age=63072000;includeSubDomains
x-frame-options: ALLOW
x-content-type-options: nosniff
cache-control: no-store, no-cache, must-revalidate, no-store, no-cache, must-revalidate
pragma: no-cache, no-cache
expires: Thu, 19 Nov 1981 08:52:00 GMT, Thu, 19 Nov 1981 08:52:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/bn/notifications/sw.js
200 OK 0 B URL HTTP/2 freeoptinpage.com/bn/notifications/sw.js
IP
GET /bn/notifications/sw.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:10 GMT
content-type: application/javascript
last-modified: Tue, 30 Jun 2020 22:28:11 GMT
vary: Accept-Encoding
etag: W/"5efbbc7b-2e4"
expires: Sat, 16 Sep 2023 07:08:10 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/static/jarallax/jarallax.min.js
200 OK 0 B URL HTTP/2 freeoptinpage.com/static/jarallax/jarallax.min.js
IP
GET /static/jarallax/jarallax.min.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: application/javascript
last-modified: Thu, 30 Apr 2020 22:04:43 GMT
vary: Accept-Encoding
etag: W/"5eab4b7b-3b6b"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/static/jquery-ui.js
200 OK 0 B URL HTTP/2 freeoptinpage.com/static/jquery-ui.js
IP
GET /static/jquery-ui.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: application/javascript
last-modified: Thu, 30 Apr 2020 22:07:14 GMT
vary: Accept-Encoding
etag: W/"5eab4c12-7f20a"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
cheetah-api.builderall.com/get-plan/376055
200 OK 0 B URL HTTP/2 cheetah-api.builderall.com/get-plan/376055
IP
GET /get-plan/376055 HTTP/1.1
Host: cheetah-api.builderall.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freeoptinpage.com
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 16 Sep 2022 07:08:08 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Content-Type, X-Auth-Token, Origin, Authorization
cache-control: private, must-revalidate, public
pragma: no-cache, public
expires: -1
x-xss-protection: 1; mode=block
set-cookie: XSRF-TOKEN=eyJpdiI6Im5MbG1PdUhqYlloU1dLZEZPOGdkRUE9PSIsInZhbHVlIjoidEJjOHc1ell6QkNEQkV1UHNyUDRxUGk0VTNDdHZlSUJ3UHUwQm90bllwNEJOa0Z1bjBHTjQ2SmlmUlVsVXNORSIsIm1hYyI6IjZiMmJhYWI5NDMzZjJkMTQwNTFiYzhmNWVhYjhmZGI0YTdhNjBmZmQwNTc3M2I1M2FlZmE5N2VjMGM2YTQ5YTkifQ%3D%3D; expires=Fri, 16-Sep-2022 09:08:08 GMT; Max-Age=7200; path=/;HttpOnly;Secure
laravel_session=eyJpdiI6InFkZE15MjVHekQ1SWJyd0F0eXRyWGc9PSIsInZhbHVlIjoiak9LM2pyQU02NldDNUtoYW81MjVTT0JDTmpwcTFwa280d1B3cFBQXC9KWllCRjlNVE55Z3hSRkJ3czNWTWJWd0kiLCJtYWMiOiI2YTc2OWJkZWE0YmU5Y2VkMTIzM2FiMjhlMDhjY2JiMTFiYTU2ODE1YzEyYTdhYWNjMzU5NjA2NDY2NGQ5NjFjIn0%3D; expires=Fri, 16-Sep-2022 09:08:08 GMT; Max-Age=7200; path=/; httponly;HttpOnly;Secure
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g76aRikS%2F9EoP1GEj0vvPkGTOS7Tu3GaA%2BDCxka42Gl%2FoidgXniKhfCGnwPOlQ1D68kdJ2pWOqD5sBnJbBrZeYO%2BzE8xQtuUK59qGlWKWd7lOiY6Xv%2FHhjeMz8whJPCyfTthR2StmZBbuiRx7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b7c4e51e4e1bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
freeoptinpage.com/css/chunk-0e42f782.c35eebba.css
200 OK 0 B URL HTTP/2 freeoptinpage.com/css/chunk-0e42f782.c35eebba.css
IP
GET /css/chunk-0e42f782.c35eebba.css HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:09 GMT
content-type: text/css
last-modified: Fri, 21 Jan 2022 17:39:37 GMT
vary: Accept-Encoding
etag: W/"61eaefd9-319f5"
expires: Sat, 16 Sep 2023 07:08:09 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/css/chunk-7c3acea6.9d979586.css
200 OK 0 B URL HTTP/2 freeoptinpage.com/css/chunk-7c3acea6.9d979586.css
IP
GET /css/chunk-7c3acea6.9d979586.css HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:09 GMT
content-type: text/css
last-modified: Thu, 30 Apr 2020 20:49:38 GMT
vary: Accept-Encoding
etag: W/"5eab39e2-2ef"
expires: Sat, 16 Sep 2023 07:08:09 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/js/chunk-2d230e94.fefe2643.js
200 OK 0 B URL HTTP/2 freeoptinpage.com/js/chunk-2d230e94.fefe2643.js
IP
GET /js/chunk-2d230e94.fefe2643.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:10 GMT
content-type: application/javascript
last-modified: Fri, 21 Jan 2022 17:39:27 GMT
vary: Accept-Encoding
etag: W/"61eaefcf-c9f"
expires: Sat, 16 Sep 2023 07:08:10 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/js/app.27148c66.js
200 OK 0 B URL HTTP/2 freeoptinpage.com/js/app.27148c66.js
IP
GET /js/app.27148c66.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: application/javascript
last-modified: Wed, 14 Sep 2022 20:52:27 GMT
vary: Accept-Encoding
etag: W/"63223f0b-c3f02"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
freeoptinpage.com/js/chunk-0e42f782.572fd88f.js
200 OK 0 B URL HTTP/2 freeoptinpage.com/js/chunk-0e42f782.572fd88f.js
IP
GET /js/chunk-0e42f782.572fd88f.js HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:09 GMT
content-type: application/javascript
last-modified: Fri, 21 Jan 2022 17:39:15 GMT
vary: Accept-Encoding
etag: W/"61eaefc3-bb1"
expires: Sat, 16 Sep 2023 07:08:09 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
notify.eb4us.com/js/pushNotify.js
200 OK 0 B URL HTTP/2 notify.eb4us.com/js/pushNotify.js
IP
GET /js/pushNotify.js HTTP/1.1
Host: notify.eb4us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: application/javascript
last-modified: Wed, 14 Sep 2022 13:02:18 GMT
vary: Accept-Encoding
etag: W/"6321d0da-1427"
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/embed/VTBwvhS1b9w?&playlist=VTBwvhS1b9w&loop=1&controls=0&start=0&end=0
200 OK 0 B URL HTTP/2 www.youtube.com/embed/VTBwvhS1b9w?&playlist=VTBwvhS1b9w&loop=1&controls=0&start=0&end=0
IP
GET /embed/VTBwvhS1b9w?&playlist=VTBwvhS1b9w&loop=1&controls=0&start=0&end=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 16 Sep 2022 07:08:08 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=m1cO8iMipQ8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=BDuuLfcTCB4; Domain=.youtube.com; Expires=Wed, 15-Mar-2023 07:08:08 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+717; expires=Sun, 15-Sep-2024 07:08:08 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freeoptinpage.com/static/bootstrap.min.css
200 OK 0 B URL HTTP/2 freeoptinpage.com/static/bootstrap.min.css
IP
GET /static/bootstrap.min.css HTTP/1.1
Host: freeoptinpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freeoptinpage.com/
Cookie: PHPSESSID=b6lrcummq5tev4ac0devf53vji
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 07:08:06 GMT
content-type: text/css
last-modified: Thu, 30 Apr 2020 22:05:48 GMT
vary: Accept-Encoding
etag: W/"5eab4bbc-2606e"
expires: Sat, 16 Sep 2023 07:08:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=63072000;
x-frame-options: ALLOW
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
104.131.82.44
104.18.21.226
93.184.220.29
185.225.208.56
161.35.152.125
23.36.76.226
151.101.85.229