t.co/8nIGmVFTsW
104.244.42.69 681 B IP 104.244.42.69:0
File type HTML document text
- HTML document text
- HTML document, ASCII text, with very long lines (2120), with no line terminators
Hash 7f0af1d7c7d342885c9241d91051dbb6
92c9f849a276c5e9670d326df1c2739e90b431a8
c94c79158e699557edcfe9cfa281040afa5501c0c4d22b8ced2596e68bc0a9e7
GET /8nIGmVFTsW HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 08:35:31 GMT
perf: 7626143928
vary: Origin
server: tsa_o
expires: Sun, 10 Dec 2023 08:40:31 GMT
set-cookie: muc=4c27e76e-83d8-4bf5-8068-e865f56ae974; Max-Age=34214400; Expires=Thu, 09 Jan 2025 08:35:31 GMT; Domain=t.co; Secure; SameSite=None
content-type: text/html; charset=utf-8
cache-control: private,max-age=300
content-length: 681
referrer-policy: unsafe-url
content-encoding: gzip
x-transaction-id: ecabbb607e1f2ee4
x-xss-protection: 0
content-security-policy: referrer always;
strict-transport-security: max-age=0
x-response-time: 120
x-connection-hash: 66d12136ee138f4d4e893b72a55da0d3e6a8961eeb709b2c29d3bcaba1e9dc0a
X-Firefox-Spdy: h2
vk.com/away.php?NLzoeker=4019284641da9c78d4a5b2dc8c524b9fd8e7d3b86c&mt=8&to=https%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2%2526a%253D1%2526hash%253DAd_RZsHp2yTIG9NW%25234019284641%257Chttps://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg%257CNLzoeker
93.186.225.194302 Found 20 B URL User Request GET HTTP/2 vk.com/away.php?NLzoeker=4019284641da9c78d4a5b2dc8c524b9fd8e7d3b86c&mt=8&to=https%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2%2526a%253D1%2526hash%253DAd_RZsHp2yTIG9NW%25234019284641%257Chttps://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg%257CNLzoeker
IP 93.186.225.194:443
Certificate IssuerGlobalSign nv-sa
Subject*.vk.com
Fingerprint6B:39:D3:5A:FA:5A:EE:80:1A:D7:F6:77:30:52:CF:2B:52:A1:82:09
ValidityThu, 16 Mar 2023 17:17:11 GMT - Tue, 20 Feb 2024 10:00:00 GMT
File type gzip compressed data, from Unix
- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /away.php?NLzoeker=4019284641da9c78d4a5b2dc8c524b9fd8e7d3b86c&mt=8&to=https%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2%2526a%253D1%2526hash%253DAd_RZsHp2yTIG9NW%25234019284641%257Chttps://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg%257CNLzoeker HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: kittenx
date: Sun, 10 Dec 2023 08:35:32 GMT
content-type: text/html; charset=windows-1251
content-length: 20
location: https://away.vk.com/away.php?rh=8b4b9b37-7ada-43e3-88a7-a2101f9d2ffa
x-powered-by: KPHP/7.4.115266
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Fri, 06 Dec 2024 06:15:08 GMT; path=/; domain=.vk.com
remixstlid=9065061108586407712_Lc1hCGQZrZPBKopjguMehOC2mgVYmnFqyxuiLddb7tX; expires=Mon, 09 Dec 2024 08:35:32 GMT; path=/; domain=.vk.com; secure
remixsec_redir=https%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2%2526a%253D1%2526hash%253DAd_RZsHp2yTIG9NW%25234019284641%257Chttps%3A%2F%2Fpbs.twimg.com%2Fprofile_images%2F1348943419889102848%2FB0_BSVtf_normal.jpg%257CNLzoeker; path=/; domain=.vk.com
remixua=-1%7C-1%7C320%7C295475610; expires=Fri, 13 Dec 2024 07:01:22 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
x-frame-options: DENY
content-encoding: gzip
x-frontend: front605110
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
origin-agent-cluster: ?0
x-trace-id: zAINPLxbB5SBkrQGp4u20vC4L6e0tg
X-Firefox-Spdy: h2
t.co/favicon.ico
104.244.42.69 1.2 kB IP 104.244.42.69:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
- data
Hash 630d203cdeba06df4c0e289c8c8094f6
eee14e8a36b0512c12ba26c0516b4553618dea36
bbce71345828a27c5572637dbe88a3dd1e065266066600c8a841985588bf2902
GET /favicon.ico HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://t.co/8nIGmVFTsW
DNT: 1
Connection: keep-alive
Cookie: muc=4c27e76e-83d8-4bf5-8068-e865f56ae974
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 10 Dec 2023 08:35:32 UTC
perf: 7626143928
server: tsa_o
content-type: image/x-icon
cache-control: no-cache, no-store, max-age=0
content-length: 1150
x-transaction-id: a4b50a335645abc5
strict-transport-security: max-age=0
x-response-time: 99
x-connection-hash: 66d12136ee138f4d4e893b72a55da0d3e6a8961eeb709b2c29d3bcaba1e9dc0a
X-Firefox-Spdy: h2
away.vk.com/away.php?rh=8b4b9b37-7ada-43e3-88a7-a2101f9d2ffa
93.186.225.194200 OK 651 B URL User Request GET HTTP/2 away.vk.com/away.php?rh=8b4b9b37-7ada-43e3-88a7-a2101f9d2ffa
IP 93.186.225.194:443
Certificate IssuerGlobalSign nv-sa
Subject*.vk.com
Fingerprint6B:39:D3:5A:FA:5A:EE:80:1A:D7:F6:77:30:52:CF:2B:52:A1:82:09
ValidityThu, 16 Mar 2023 17:17:11 GMT - Tue, 20 Feb 2024 10:00:00 GMT
File type HTML document, ASCII text, with very long lines (1865), with no line terminators
Hash 39869d8f7d25cf1f8439e6873c6b1cb2
117c32860555e8ba01578243a16d481ddca0b56a
e0b71dd9ace8ad450cee5afba83ab19131fb825a280068c21fe8df93ac1cadc2
GET /away.php?rh=8b4b9b37-7ada-43e3-88a7-a2101f9d2ffa HTTP/1.1
Host: away.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: remixlang=3; remixstlid=9065061108586407712_Lc1hCGQZrZPBKopjguMehOC2mgVYmnFqyxuiLddb7tX; remixsec_redir=https%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2%2526a%253D1%2526hash%253DAd_RZsHp2yTIG9NW%25234019284641%257Chttps%3A%2F%2Fpbs.twimg.com%2Fprofile_images%2F1348943419889102848%2FB0_BSVtf_normal.jpg%257CNLzoeker; remixua=-1%7C-1%7C320%7C295475610
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 10 Dec 2023 08:35:32 GMT
content-type: text/html; charset=windows-1251
content-length: 651
x-powered-by: KPHP/7.4.115266
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; domain=.vk.com
remixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=away.vk.com
remixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/
cache-control: no-store
x-frame-options: DENY
content-encoding: gzip
x-frontend: front605110
access-control-expose-headers: X-Frontend
x-trace-id: QrKH-U7dWifI-pSsxVrEaOxUwrEsUg
X-Firefox-Spdy: h2
away.vk.com/favicon.ico
93.186.225.194 4.9 kB IP 93.186.225.194:0
Certificate IssuerGlobalSign nv-sa
Subject*.vk.com
Fingerprint6B:39:D3:5A:FA:5A:EE:80:1A:D7:F6:77:30:52:CF:2B:52:A1:82:09
ValidityThu, 16 Mar 2023 17:17:11 GMT - Tue, 20 Feb 2024 10:00:00 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
- data
Hash d41fa4f682279a0c77159080255b3b9e
7cdf65f129f33ddf76146c9fc0bb30bb80d25065
25dfe61842345c39cb13beeee5b921cfe1c16b5f774067416728f8046c56f925
GET /favicon.ico HTTP/1.1
Host: away.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://away.vk.com/
DNT: 1
Connection: keep-alive
Cookie: remixlang=3; remixstlid=9065061108586407712_Lc1hCGQZrZPBKopjguMehOC2mgVYmnFqyxuiLddb7tX; remixua=-1%7C-1%7C320%7C295475610
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 10 Dec 2023 08:35:33 GMT
content-type: image/x-icon
content-length: 4944
last-modified: Tue, 05 Apr 2022 13:13:01 GMT
etag: "624c405d-1350"
expires: Sun, 17 Dec 2023 08:35:33 GMT
cache-control: max-age=604800
x-frontend: front605110
access-control-expose-headers: X-Frontend
x-trace-id: 9zWuNPM5Zq4pThTS_WhutJGerSvOrA
accept-ranges: bytes
X-Firefox-Spdy: h2
business.instagram.com/micro_site/url/?event_type=click&site=igb&destination=https%3A%2F%2Fwww.facebook.com%2Fads%2Fig_redirect%2F%3Fd%3DAd-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2%26a%3D1%26hash%3DAd_RZsHp2yTIG9NW%234019284641%7Chttps://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg%7CNLzoeker
157.240.201.63302 Found 0 B URL User Request GET HTTP/2 business.instagram.com/micro_site/url/?event_type=click&site=igb&destination=https%3A%2F%2Fwww.facebook.com%2Fads%2Fig_redirect%2F%3Fd%3DAd-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2%26a%3D1%26hash%3DAd_RZsHp2yTIG9NW%234019284641%7Chttps://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg%7CNLzoeker
IP 157.240.201.63:443
Certificate IssuerDigiCert Inc
Subject*.instagram.com
Fingerprint01:76:30:45:EC:0D:0F:18:A5:BD:C2:83:27:DC:BC:8D:45:CE:E2:64
ValidityMon, 18 Sep 2023 00:00:00 GMT - Sun, 17 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /micro_site/url/?event_type=click&site=igb&destination=https%3A%2F%2Fwww.facebook.com%2Fads%2Fig_redirect%2F%3Fd%3DAd-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2%26a%3D1%26hash%3DAd_RZsHp2yTIG9NW%234019284641%7Chttps://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg%7CNLzoeker HTTP/1.1
Host: business.instagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://away.vk.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://www.facebook.com/ads/ig_redirect/?d=Ad-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2&a=1&hash=Ad_RZsHp2yTIG9NW#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
reporting-endpoints:
cross-origin-opener-policy: same-origin-allow-popups
strict-transport-security: max-age=15552000
content-type: text/html; charset="utf-8"
x-fb-debug: nE5iiIkDQ4dZjLvVw8hFF6Yjbmye+Fw3lWp4sMoAkTQiBXKOvXuC0KluNpuxtYdSFlE3QRboGMHuOxyyqah0Zw==
content-length: 0
date: Sun, 10 Dec 2023 08:35:33 GMT
X-Firefox-Spdy: h2
www.facebook.com/ads/ig_redirect/?d=Ad-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2&a=1&hash=Ad_RZsHp2yTIG9NW
31.13.72.36 0 B URL www.facebook.com/ads/ig_redirect/?d=Ad-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2&a=1&hash=Ad_RZsHp2yTIG9NW
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/ig_redirect/?d=Ad-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2&a=1&hash=Ad_RZsHp2yTIG9NW HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://away.vk.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: http://mucerentacar.com/hostbul.php?ref=FBSON
reporting-endpoints: default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown"
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
document-policy: force-load-at-top
permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), gamepad=(), keyboard-map=(), otp-credentials=(), picture-in-picture=(), xr-spatial-tracking=()
permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), geolocation=(self), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=()
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: CXR3MkZrAw7nWb27tEiGssIZPVCqAQEtmjKVGjBq6TgH2qt4fLNyDnVCHPkTUXNctLZ8I7qNwEOYV4UPZ5VMIQ==
content-length: 0
date: Sun, 10 Dec 2023 08:35:33 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
m.askfollow.us/
172.67.129.121 12 kB IP 172.67.129.121:0
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (1105)
Hash e760ce240235da1fb84b623dd3ae1b13
c4f08857cdf7bdc351eb6e21a6095a2404f05449
2c15df7f3044dfdc947c4eb52bba5287b2da4fd67291e0955afef2e79d773f16
GET / HTTP/1.1
Host: m.askfollow.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://away.vk.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 08:35:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Eo8%2BzEDDggL2nF8bZE4SvYsro%2Bu1nemCoUd8qXpOOOeB9DTlhqkzTrI9YW%2BXSjzqtYW1AnLeUnmbewX564cVgnIaLZS3RRrH0j7w3oI2foAQSpTbxNIbynn43ajHsx5JtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833427b91b875687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.7.1.min.js
151.101.66.137200 OK 30 kB URL GET HTTP/2 code.jquery.com/jquery-3.7.1.min.js
IP 151.101.66.137:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /jquery-3.7.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-155ed"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 10 Dec 2023 08:35:34 GMT
age: 7396669
x-served-by: cache-lga21978-LGA, cache-bma1633-BMA
x-cache: HIT, HIT
x-cache-hits: 25, 14564
x-timer: S1702197334.410218,VS0,VE0
vary: Accept-Encoding
content-length: 30336
X-Firefox-Spdy: h2
m.askfollow.us/images/noise.png
172.67.129.121200 OK 3.0 kB URL GET HTTP/3 m.askfollow.us/images/noise.png
IP 172.67.129.121:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerLet's Encrypt
Subjectaskfollow.us
Fingerprint14:3E:AE:30:B1:68:D3:BC:AD:EF:58:34:73:92:E8:BF:BA:74:EE:D5
ValiditySun, 19 Nov 2023 02:38:59 GMT - Sat, 17 Feb 2024 02:38:58 GMT
File type PNG image data, 100 x 100, 4-bit colormap, non-interlaced
- data
Hash 0e15d4fddd5bb07724c52c4f9f07f027
32971fd388862b4cc8aa08e0e8ceaad8e7916c82
6fe0b8f812276b5f3be01b344e8215731b84d04379b23a6000c962d771dd10e5
GET /images/noise.png HTTP/1.1
Host: m.askfollow.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 10 Dec 2023 08:35:34 GMT
content-type: image/png
content-length: 3037
cache-control: public, max-age=604800
expires: Thu, 07 Dec 2023 05:22:01 GMT
etag: "bdd-655c9f8e-e157f;;;"
last-modified: Tue, 21 Nov 2023 12:16:14 GMT
cf-cache-status: HIT
age: 4171
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OCR4e%2BuVyG2Tk91yI8f3iEQ5BGDkmmVNevMKcMg9xdC8nzOD5jSGYJ4AfGkVVxX5bibSR1cB9wft0IvUCZcyObBvrvsEvVjmOyS1FQaDEAL3i06PWNDZjNn%2BnkLmAvrSzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833427bcecfb1c0e-OSL
alt-svc: h3=":443"; ma=86400
service.supercounters.com/fc.php?id=1680011&w=1&v=1&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&url=https%3A%2F%2Fm.askfollow.us%2F%234019284641%7Chttps%3A%2F%2Fpbs.twimg.com%2Fprofile_images%2F1348943419889102848%2FB0_BSVtf_normal.jpg%7CNLzoeker&ref=https%3A%2F%2Faway.vk.com%2F&sw=1280&sh=1024&rand=84&label=Stalker%20user&fcolor=170ddb
172.104.29.90200 OK 90 B URL GET HTTP/1.1 service.supercounters.com/fc.php?id=1680011&w=1&v=1&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&url=https%3A%2F%2Fm.askfollow.us%2F%234019284641%7Chttps%3A%2F%2Fpbs.twimg.com%2Fprofile_images%2F1348943419889102848%2FB0_BSVtf_normal.jpg%7CNLzoeker&ref=https%3A%2F%2Faway.vk.com%2F&sw=1280&sh=1024&rand=84&label=Stalker%20user&fcolor=170ddb
IP 172.104.29.90:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerSectigo Limited
Subject*.supercounters.com
FingerprintE8:89:54:DA:4C:96:E2:77:F7:4C:A8:58:6E:9F:9D:AC:0E:4E:81:63
ValidityThu, 21 Sep 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 8a4662bdbe6646958b6e5b65a64c27c1
adaee94033ef4f347ebea996e5175e086864fe4a
ea1f533d57d51cabb0155e1ae6760bf1f03edff02d921421a9a7bf7952fe4d6b
GET /fc.php?id=1680011&w=1&v=1&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&url=https%3A%2F%2Fm.askfollow.us%2F%234019284641%7Chttps%3A%2F%2Fpbs.twimg.com%2Fprofile_images%2F1348943419889102848%2FB0_BSVtf_normal.jpg%7CNLzoeker&ref=https%3A%2F%2Faway.vk.com%2F&sw=1280&sh=1024&rand=84&label=Stalker%20user&fcolor=170ddb HTTP/1.1
Host: service.supercounters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 10 Dec 2023 08:35:34 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.13
Content-Encoding: gzip
mucerentacar.com/hostbul.php?ref=FBSON
104.21.93.119 43 B URL mucerentacar.com/hostbul.php?ref=FBSON
IP 104.21.93.119:0
File type GIF image data, version 89a, 1 x 1
- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hostbul.php?ref=FBSON HTTP/1.1
Host: mucerentacar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://away.vk.com/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 10 Dec 2023 08:35:33 GMT
content-type: text/html; charset=UTF-8
location: https://m.askfollow.us/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wLp3KfO5%2FyC9EMEuOA21kHiS3EcAo68104zK9V63xX6D8HGpPhcfxJKDKDL6HmI7Nf0dzAPZVO9imWRaZ%2F5%2Bulr6e7rpaiICuI3tvJ6e57gv1YC1%2BWuFpFaxuJAy8fx131wm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833427b70d3b568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fundingchoicesmessages.google.com/el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg==
142.250.74.142204 No Content 0 B URL POST HTTP/3 fundingchoicesmessages.google.com/el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg==
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg== HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 73
Origin: https://m.askfollow.us
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://m.askfollow.us
access-control-allow-credentials: true
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:36 GMT
content-security-policy: script-src 'nonce-_W8DNPESGic9Xn_HfMUUZA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/osd.js?fcd=true
142.250.74.66200 OK 51 B URL GET HTTP/2 pagead2.googlesyndication.com/pagead/osd.js?fcd=true
IP 142.250.74.66:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint69:F5:F0:31:0E:FD:67:62:BD:FA:40:0F:5B:17:0F:D2:EE:31:3D:79
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash a07180e65ba4d17fc6ac8d6bc0003df8
0e89a9bd153a4f21b45129450408a88769fd571a
c45c8b81ccfcbc08127b74787d1b5974078756233de947986c357e28ed8f13ac
GET /pagead/osd.js?fcd=true HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51
x-xss-protection: 0
date: Sun, 10 Dec 2023 08:35:33 GMT
expires: Sun, 10 Dec 2023 09:35:33 GMT
cache-control: public, max-age=3600
age: 3
etag: 16023549773543154165
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fundingchoicesmessages.google.com/el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg==
142.250.74.142204 No Content 0 B URL POST HTTP/3 fundingchoicesmessages.google.com/el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg==
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg== HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 73
Origin: https://m.askfollow.us
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://m.askfollow.us
access-control-allow-credentials: true
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:36 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'nonce-U5rb8LWBBrATlqAWPXn0dA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg==
142.250.74.142204 No Content 0 B URL POST HTTP/3 fundingchoicesmessages.google.com/el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg==
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg== HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 76
Origin: https://m.askfollow.us
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://m.askfollow.us
access-control-allow-credentials: true
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:36 GMT
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'nonce-DLUHzhWtD5GE5D5lWxnepQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg==
142.250.74.142204 No Content 0 B URL POST HTTP/3 fundingchoicesmessages.google.com/el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg==
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxVRES7J8kI9mIsc_Ts4I8DtVoWWpq0OorwFRjXkAQUZ1aOTF0Qv49-lPfZJRjtO_JgJkJP5KBgzPq_vI0sPmHcOniLIf82SOaaNgbYBgxyTc8Q_p_n5YARgbDl8b5Cppkr8so2nyg== HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 73
Origin: https://m.askfollow.us
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://m.askfollow.us
access-control-allow-credentials: true
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:36 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'nonce-CqBQDotaJFHjLR_QWaZoQA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/el/AGSKWxVVzlR8l675Mf_xTJdpBkVa2ctSaYck4k6F9-aObH7Cc1Tqeb7FmWGqiBhNCBCvkr9rrP4vof8K_oqKvzD1Lp8NgZYJDRDMnTe1k-43jCzjlVaLXuCFUDDW0hObP0O_fyYwR-9e2w==
142.250.74.142204 No Content 0 B URL POST HTTP/3 fundingchoicesmessages.google.com/el/AGSKWxVVzlR8l675Mf_xTJdpBkVa2ctSaYck4k6F9-aObH7Cc1Tqeb7FmWGqiBhNCBCvkr9rrP4vof8K_oqKvzD1Lp8NgZYJDRDMnTe1k-43jCzjlVaLXuCFUDDW0hObP0O_fyYwR-9e2w==
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /el/AGSKWxVVzlR8l675Mf_xTJdpBkVa2ctSaYck4k6F9-aObH7Cc1Tqeb7FmWGqiBhNCBCvkr9rrP4vof8K_oqKvzD1Lp8NgZYJDRDMnTe1k-43jCzjlVaLXuCFUDDW0hObP0O_fyYwR-9e2w== HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 154
Origin: https://m.askfollow.us
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
access-control-allow-origin: https://m.askfollow.us
access-control-allow-credentials: true
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:36 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'nonce-tq1-Z5_OSccxk3Ww_Mf_bw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
172.67.129.121200 OK 12 kB URL User Request GET HTTP/2 IP 172.67.129.121:443
Certificate IssuerLet's Encrypt
Subjectaskfollow.us
Fingerprint14:3E:AE:30:B1:68:D3:BC:AD:EF:58:34:73:92:E8:BF:BA:74:EE:D5
ValiditySun, 19 Nov 2023 02:38:59 GMT - Sat, 17 Feb 2024 02:38:58 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (1105)
Hash e760ce240235da1fb84b623dd3ae1b13
c4f08857cdf7bdc351eb6e21a6095a2404f05449
2c15df7f3044dfdc947c4eb52bba5287b2da4fd67291e0955afef2e79d773f16
GET / HTTP/1.1
Host: m.askfollow.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://away.vk.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 08:35:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Eo8%2BzEDDggL2nF8bZE4SvYsro%2Bu1nemCoUd8qXpOOOeB9DTlhqkzTrI9YW%2BXSjzqtYW1AnLeUnmbewX564cVgnIaLZS3RRrH0j7w3oI2foAQSpTbxNIbynn43ajHsx5JtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833427b91b875687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fundingchoicesmessages.google.com/img/px.gif?ch=2&rn=1.980740477877223
142.250.74.142200 OK 43 B URL GET HTTP/3 fundingchoicesmessages.google.com/img/px.gif?ch=2&rn=1.980740477877223
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /img/px.gif?ch=2&rn=1.980740477877223 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/gif
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:36 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorServingDetectionHttp/cspreport, script-src 'nonce-of0Cd5aK4rFGma5__r3pOQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingDetectionHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingDetectionHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
widget.supercounters.com/ssl/online_t.js
104.21.4.189200 OK 1.7 kB URL GET HTTP/2 widget.supercounters.com/ssl/online_t.js
IP 104.21.4.189:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subjectsupercounters.com
FingerprintDB:11:95:48:25:F4:91:55:F1:75:77:24:41:D9:DD:62:95:B1:65:FD
ValiditySun, 15 Oct 2023 09:06:48 GMT - Sat, 13 Jan 2024 09:06:47 GMT
File type ASCII text, with very long lines (1843), with no line terminators
Hash b2ab26885e166bc416225022fd234ea5
35191fc36ae6176db23556fbd39d46f839574f25
c3e5bb2a0e79d29b3705413d91e4b662c2a146f2565b68dfac1de8d787688353
GET /ssl/online_t.js HTTP/1.1
Host: widget.supercounters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 08:35:34 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 11:50:46 GMT
etag: W/"6220ab96-6b4"
cache-control: max-age=300
cf-cache-status: HIT
age: 5510
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aBfV1i04xZ%2BB2Qeb6PX2KWLSpBoO611W6RGY5uHUg9jn0lcL5mKFVinr956FMQCJT0rVpdA9TffibASnpl84a%2BAhuLN6%2FU%2FREsvj0vG511g5JD4P%2BzGkoF0X3q2GREK%2F7xj%2FGAbLhvRSQsg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833427bbfba156cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
m.askfollow.us/cdn-cgi/challenge-platform/scripts/jsd/main.js
172.67.129.121302 Found 7.4 kB URL GET HTTP/3 m.askfollow.us/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 172.67.129.121:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerLet's Encrypt
Subjectaskfollow.us
Fingerprint14:3E:AE:30:B1:68:D3:BC:AD:EF:58:34:73:92:E8:BF:BA:74:EE:D5
ValiditySun, 19 Nov 2023 02:38:59 GMT - Sat, 17 Feb 2024 02:38:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: m.askfollow.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 10 Dec 2023 08:35:34 GMT
access-control-allow-origin: *
vary: accept-encoding
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5%2BUohi5q%2BhSvXtMtvv0qY8r3IJEpF4aM7e9lL%2F9p%2F2WtECMnhD9RNcUAA2TzzkS0qyDezEJTUipXNYR49lC7OU%2FHlCMKqBLkiTVofLIRgdPNZO9pkJaKbNHSBzvLsm0vMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833427bd2d0d1c0e-OSL
alt-svc: h3=":443"; ma=86400
m.askfollow.us/main.css
172.67.129.121200 OK 27 kB IP 172.67.129.121:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerLet's Encrypt
Subjectaskfollow.us
Fingerprint14:3E:AE:30:B1:68:D3:BC:AD:EF:58:34:73:92:E8:BF:BA:74:EE:D5
ValiditySun, 19 Nov 2023 02:38:59 GMT - Sat, 17 Feb 2024 02:38:58 GMT
File type ASCII text, with very long lines (11748)
Hash 0e59de584d061a96332f13aadc841bf8
e4cd3fdf009241c058c05656a297ead38d6f2cbd
e4102565d25161434c0733fc9fc55378fea4e0f09edd3fcf74fb44724db5018c
GET /main.css HTTP/1.1
Host: m.askfollow.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 08:35:34 GMT
content-type: text/css
cf-bgj: minify
cf-polished: status=cannot_optimize
cache-control: public, max-age=604800
etag: W/"6a26-655c9f8c-669ee;gz"
expires: Mon, 04 Dec 2023 11:41:53 GMT
last-modified: Tue, 21 Nov 2023 12:16:12 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4171
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rKIwrYKuUhm7szcgGh3zrWhw7XkVCfaEocziEr2wnVFkxEElwWgqL4rUUoe8SdyQol04FTNjao1X3246nYHl29yvjFlWBQ0wmU5gyoe26OBfSnHOeibRexTEFb5IWP0UQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833427bbac8d1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
m.askfollow.us/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
172.67.129.121200 OK 7.4 kB URL GET HTTP/3 m.askfollow.us/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
IP 172.67.129.121:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerLet's Encrypt
Subjectaskfollow.us
Fingerprint14:3E:AE:30:B1:68:D3:BC:AD:EF:58:34:73:92:E8:BF:BA:74:EE:D5
ValiditySun, 19 Nov 2023 02:38:59 GMT - Sat, 17 Feb 2024 02:38:58 GMT
File type ASCII text, with very long lines (7379), with no line terminators
Hash f36e73e768c69db65cea7de23c32f37b
082ecc8304e22f470b3a6666ec1f17b3a3e39a51
78713dbe89d0762baf0d8996b01e99a0ed69c7e9eb1c7a5bc17f2988a52a52b3
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1
Host: m.askfollow.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 08:35:34 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
x-content-type-options: nosniff
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J44n59bXQ31%2F0OUjptFPCYUZdTesK4vJiJ%2FKZnQCK9u6lV9biYxHAjawQWosr%2FfDepGw1Rgso7cTCluajWfm8vpzAI8pGx3Bi4Ns2%2BGW26eNatDP6PlI3YCobHTOEoWXGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833427bd4d241c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fundingchoicesmessages.google.com/f/AGSKWxUI03UiTwPVbQ-LZmclSCL9JdiOabRRKWQ1PFgTdMbLgRJMf00ocjcJumXg8GbPGG_OW5yOVORIjPmBoEdbkxYZaZc7R6PPIaRhnDQd2B5AR1u_gOMYc9cGPz04QKh18C2XpGfF73mxRwL0vxDBYZxCITxEHv1Vmw1AllkU3kCe8z_4pcfpaZmpkurv/_/contentAd._adsbgd._336x120./switchadbanner./ads10.
142.250.74.142200 OK 54 B URL GET HTTP/3 fundingchoicesmessages.google.com/f/AGSKWxUI03UiTwPVbQ-LZmclSCL9JdiOabRRKWQ1PFgTdMbLgRJMf00ocjcJumXg8GbPGG_OW5yOVORIjPmBoEdbkxYZaZc7R6PPIaRhnDQd2B5AR1u_gOMYc9cGPz04QKh18C2XpGfF73mxRwL0vxDBYZxCITxEHv1Vmw1AllkU3kCe8z_4pcfpaZmpkurv/_/contentAd._adsbgd._336x120./switchadbanner./ads10.
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type ASCII text, with no line terminators
Hash 16b7d58d45c954fe1faa4a51086241a9
3a78318f4f624382fa42dd4e283b1b42536cc5a4
93babdfb4f2f784643bdf645f7f26514bf84a4de87f5c51c92dda93f343b97ea
GET /f/AGSKWxUI03UiTwPVbQ-LZmclSCL9JdiOabRRKWQ1PFgTdMbLgRJMf00ocjcJumXg8GbPGG_OW5yOVORIjPmBoEdbkxYZaZc7R6PPIaRhnDQd2B5AR1u_gOMYc9cGPz04QKh18C2XpGfF73mxRwL0vxDBYZxCITxEHv1Vmw1AllkU3kCe8z_4pcfpaZmpkurv/_/contentAd._adsbgd._336x120./switchadbanner./ads10. HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:36 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-hpXLTUlK_-6LQMtmZ7KkqQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.facebook.com/ads/ig_redirect/?d=Ad-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2&a=1&hash=Ad_RZsHp2yTIG9NW
31.13.72.36302 Found 12 kB URL User Request GET HTTP/2 www.facebook.com/ads/ig_redirect/?d=Ad-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2&a=1&hash=Ad_RZsHp2yTIG9NW
IP 31.13.72.36:443
Certificate IssuerDigiCert Inc
Subject*.facebook.com
FingerprintEB:41:32:F9:AD:46:92:D5:DF:17:E9:9F:0F:DE:89:E3:F5:46:0D:47
ValidityMon, 18 Sep 2023 00:00:00 GMT - Sun, 17 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/ig_redirect/?d=Ad-JVM6myvCi-6_oJ_jpymHxv_BNnSP5BtYChIFeVjRkjOj-EiBF91kZi1YkNEYDhlUKLubGwRmKUknBZOJGVv4Dhm-J4WrLrxzXRcD0kQIl33LE11a33sR8QhoUOlNBLjNZ77oPuDsZhrzHFbi-MaFd7pbB0tP-u1rWpKFXM29r-tUf8oNX0n__G_IoLb26S_4ftV-YvmBKAY8jOUk8tlQ2&a=1&hash=Ad_RZsHp2yTIG9NW HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://away.vk.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: http://mucerentacar.com/hostbul.php?ref=FBSON
reporting-endpoints: default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown"
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
document-policy: force-load-at-top
permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), gamepad=(), keyboard-map=(), otp-credentials=(), picture-in-picture=(), xr-spatial-tracking=()
permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), geolocation=(self), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=()
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: CXR3MkZrAw7nWb27tEiGssIZPVCqAQEtmjKVGjBq6TgH2qt4fLNyDnVCHPkTUXNctLZ8I7qNwEOYV4UPZ5VMIQ==
content-length: 0
date: Sun, 10 Dec 2023 08:35:33 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mucerentacar.com/hostbul.php?ref=FBSON
104.21.93.119302 Found 12 kB URL User Request GET HTTP/2 mucerentacar.com/hostbul.php?ref=FBSON
IP 104.21.93.119:443
Certificate IssuerGoogle Trust Services LLC
Subjectmucerentacar.com
Fingerprint45:52:D1:DB:6E:2F:16:8C:B7:B7:83:AE:19:74:6B:63:AC:D5:AF:61
ValidityMon, 30 Oct 2023 13:22:43 GMT - Sun, 28 Jan 2024 13:22:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hostbul.php?ref=FBSON HTTP/1.1
Host: mucerentacar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://away.vk.com/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 10 Dec 2023 08:35:33 GMT
content-type: text/html; charset=UTF-8
location: https://m.askfollow.us/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wLp3KfO5%2FyC9EMEuOA21kHiS3EcAo68104zK9V63xX6D8HGpPhcfxJKDKDL6HmI7Nf0dzAPZVO9imWRaZ%2F5%2Bulr6e7rpaiICuI3tvJ6e57gv1YC1%2BWuFpFaxuJAy8fx131wm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833427b70d3b568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fundingchoicesmessages.google.com/i/pub-3344113132106788?ers=1
142.250.74.142200 OK 185 kB URL GET HTTP/2 fundingchoicesmessages.google.com/i/pub-3344113132106788?ers=1
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type ASCII text, with very long lines (3561)
Size 185 kB (184631 bytes)
Hash 20296698814ccfa0ce32e5eede2dc4bc
b8379f285ce8137a1a0023bb4ae8b6c9db4e2200
112d7808740c55e30cf9911c825ae685a815899f1d4cf2143a2adbdbc6cabeb1
GET /i/pub-3344113132106788?ers=1 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
timing-allow-origin: *
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:34 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-kLI93g0vouncrundFAM94A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fundingchoicesmessages.google.com/f/AGSKWxVyXumQBpjfUlCCNvFn8QZsJowDzl0QOsQWscpeZ0pl9pgTpq-zgLKcGHnwIMLN57MVkqbwXlV6Tcyzlk7e7FzB-8tpTsEh8p-Q2ShU4PtpP3UXyOwL1h7OqjOa0Y1trU1wMNoWug==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzAyMTk3MzM2LDkyMTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vbS5hc2tmb2xsb3cudXMvIixudWxsLFtbOCwiUTdxazhhVy1La2siXSxbOSwiZW4tVVMiXSxbMTYsIlsxLDEsMV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0
142.250.74.142200 OK 3.2 kB URL GET HTTP/3 fundingchoicesmessages.google.com/f/AGSKWxVyXumQBpjfUlCCNvFn8QZsJowDzl0QOsQWscpeZ0pl9pgTpq-zgLKcGHnwIMLN57MVkqbwXlV6Tcyzlk7e7FzB-8tpTsEh8p-Q2ShU4PtpP3UXyOwL1h7OqjOa0Y1trU1wMNoWug==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzAyMTk3MzM2LDkyMTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vbS5hc2tmb2xsb3cudXMvIixudWxsLFtbOCwiUTdxazhhVy1La2siXSxbOSwiZW4tVVMiXSxbMTYsIlsxLDEsMV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type ASCII text, with very long lines (3330), with no line terminators
Hash 34c91731c5629ac8baf57cdf89ca4ef7
d5d4c3b84a6a891e1e1057e50506203c6b2f8220
ce5e78cd551080b8235b65bb59219695dcf775a7bcd0f017e74a35cc06f92418
GET /f/AGSKWxVyXumQBpjfUlCCNvFn8QZsJowDzl0QOsQWscpeZ0pl9pgTpq-zgLKcGHnwIMLN57MVkqbwXlV6Tcyzlk7e7FzB-8tpTsEh8p-Q2ShU4PtpP3UXyOwL1h7OqjOa0Y1trU1wMNoWug==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzAyMTk3MzM2LDkyMTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vbS5hc2tmb2xsb3cudXMvIixudWxsLFtbOCwiUTdxazhhVy1La2siXSxbOSwiZW4tVVMiXSxbMTYsIlsxLDEsMV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
timing-allow-origin: *
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:36 GMT
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-uCwwE-Kk3jQoz93aRx78Iw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
m.askfollow.us/images/twitter_logo.png
172.67.129.121200 OK 7.6 kB URL GET HTTP/3 m.askfollow.us/images/twitter_logo.png
IP 172.67.129.121:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerLet's Encrypt
Subjectaskfollow.us
Fingerprint14:3E:AE:30:B1:68:D3:BC:AD:EF:58:34:73:92:E8:BF:BA:74:EE:D5
ValiditySun, 19 Nov 2023 02:38:59 GMT - Sat, 17 Feb 2024 02:38:58 GMT
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced
- data
Hash 7d3b20757a323bc855a25b83e1744879
1aeac272142380fda2358a1ee5e80bfdbd107e73
53791cd5d4a8ff3b07d935cfc7a018393c14b76a7823eb788846574b8ec6da44
GET /images/twitter_logo.png HTTP/1.1
Host: m.askfollow.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 08:35:34 GMT
content-type: image/png
content-length: 7636
cache-control: public, max-age=604800
expires: Wed, 29 Nov 2023 02:09:20 GMT
etag: "1dd4-655c9f8f-e1581;;;"
last-modified: Tue, 21 Nov 2023 12:16:15 GMT
cf-cache-status: HIT
age: 4171
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aotAvRe9mY4SZtdE9t0epcka8xhHXkUgu%2BdW7u6uNbvGnK39WVMnPNUH01ZwJa7q8JGqJrUUzRaA%2FMZzKJCvb0LwgvGBN4dv9jLugXTaP%2FV0%2BMefijC5UMke3vHofvUxyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833427bbac901c0e-OSL
alt-svc: h3=":443"; ma=86400
m.askfollow.us/favicon.ico
172.67.129.121404 Not Found 388 B URL GET HTTP/3 m.askfollow.us/favicon.ico
IP 172.67.129.121:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerLet's Encrypt
Subjectaskfollow.us
Fingerprint14:3E:AE:30:B1:68:D3:BC:AD:EF:58:34:73:92:E8:BF:BA:74:EE:D5
ValiditySun, 19 Nov 2023 02:38:59 GMT - Sat, 17 Feb 2024 02:38:58 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document, ASCII text, with very long lines (419), with no line terminators
Hash d2464bbb5443ec288ba6f7cf897f4ac2
de15bd40bad98fe72801d2c08eb2409bddf856a7
73d4c1482ae224a47e1e89948bde8d2c2ebd1b022ffc80f5bd579ac4c2f806ad
GET /favicon.ico HTTP/1.1
Host: m.askfollow.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 10 Dec 2023 08:35:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fc8iPcGnQo8SSq%2FBQaQK%2BQUHatn9q5FkOjlKbYDivn7nDg4B0MZpxnTy3NP6jt8oPylfWKLNIMFmgy6e8HXjb0teCsTrFoLIw6V6bqsiJKCsut%2FvHFMHeuF9B8XOxqNRWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833427bdcd651c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
m.askfollow.us/cdn-cgi/challenge-platform/h/b/jsd/r/833427b91b875687
172.67.129.121200 OK 0 B URL POST HTTP/3 m.askfollow.us/cdn-cgi/challenge-platform/h/b/jsd/r/833427b91b875687
IP 172.67.129.121:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerLet's Encrypt
Subjectaskfollow.us
Fingerprint14:3E:AE:30:B1:68:D3:BC:AD:EF:58:34:73:92:E8:BF:BA:74:EE:D5
ValiditySun, 19 Nov 2023 02:38:59 GMT - Sat, 17 Feb 2024 02:38:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/833427b91b875687 HTTP/1.1
Host: m.askfollow.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12321
Origin: https://m.askfollow.us
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 08:35:34 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=DmTTfgTQa1vuXOrERQk3GKf_SyBJYeqEck5IEwaYoaI-1702197334-0-1-730ca2d2.73a07051.5b213570-0.2.1702197334; path=/; expires=Mon, 09-Dec-24 08:35:34 GMT; domain=.askfollow.us; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dmoFt5EMbNAJB0V3ArSIB3akoyeGyAwTVsu8LKexgIeXNFgveghwwTfuXTYwhpRzN1iAe1Dx7%2F1%2FATFYJUh5qruIO6vpVP2gJA1ez48f6bVKMoVH6SPdhCNVIjeWJWcNTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833427bf4e171c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fundingchoicesmessages.google.com/f/AGSKWxVUUUQkFPLBvR56E9ouaOsYKle5dzRRU3qtibIvuyMyxe3TH2fK8jju0mYj-8DYmIvV3QU5fl2QdiRfN-JP6Mn3Fzta2xfNmsnx1eeTnivUkYhjhBhp7UulfEB1X9sb4ncxKBThUA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzAyMTk3MzM0LDk4NDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly9tLmFza2ZvbGxvdy51cy8iLG51bGwsW1s4LCJRN3FrOGFXLUtrayJdLFs5LCJlbi1VUyJdLFsxNiwiWzEsMSwxXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ
142.250.74.142200 OK 14 kB URL GET HTTP/3 fundingchoicesmessages.google.com/f/AGSKWxVUUUQkFPLBvR56E9ouaOsYKle5dzRRU3qtibIvuyMyxe3TH2fK8jju0mYj-8DYmIvV3QU5fl2QdiRfN-JP6Mn3Fzta2xfNmsnx1eeTnivUkYhjhBhp7UulfEB1X9sb4ncxKBThUA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzAyMTk3MzM0LDk4NDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly9tLmFza2ZvbGxvdy51cy8iLG51bGwsW1s4LCJRN3FrOGFXLUtrayJdLFs5LCJlbi1VUyJdLFsxNiwiWzEsMSwxXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type ASCII text, with very long lines (3623)
Hash 5c462e08e0f73a5bb3c8994d2df9d807
42ea2301e67e4c16cfcfecebe34efeef9207ddb5
307af8124784e9ee740e28d4b78c9c9e891fa357d880767bb091dd80be5c6159
GET /f/AGSKWxVUUUQkFPLBvR56E9ouaOsYKle5dzRRU3qtibIvuyMyxe3TH2fK8jju0mYj-8DYmIvV3QU5fl2QdiRfN-JP6Mn3Fzta2xfNmsnx1eeTnivUkYhjhBhp7UulfEB1X9sb4ncxKBThUA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzAyMTk3MzM0LDk4NDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly9tLmFza2ZvbGxvdy51cy8iLG51bGwsW1s4LCJRN3FrOGFXLUtrayJdLFs5LCJlbi1VUyJdLFsxNiwiWzEsMSwxXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
timing-allow-origin: *
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:35 GMT
cross-origin-opener-policy: same-origin
content-security-policy: script-src 'nonce-J19sXPOzPhK2R-kbWqkvrw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fundingchoicesmessages.google.com/img/px.gif?ch=1&rn=7.034202750978415
142.250.74.142200 OK 43 B URL GET HTTP/3 fundingchoicesmessages.google.com/img/px.gif?ch=1&rn=7.034202750978415
IP 142.250.74.142:443
Requested by https://m.askfollow.us/#4019284641|https://pbs.twimg.com/profile_images/1348943419889102848/B0_BSVtf_normal.jpg|NLzoeker
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /img/px.gif?ch=1&rn=7.034202750978415 HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.askfollow.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/gif
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Dec 2023 08:35:36 GMT
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-5px9d-wTXtJeNwmURXystg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingDetectionHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingDetectionHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorServingDetectionHttp/cspreport
cross-origin-opener-policy: same-origin
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000