clicknows.mlbbclaim22free.work.gd/
200 OK 9.0 kB URL HTTP/1.1 clicknows.mlbbclaim22free.work.gd/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1979)
Hash 8aeb33d2cffbecc35d36b93b71665477
b0af1deb2c8410bd860af32192f2fca35a9c0d3f
23bf459bbeafc42027a13c16f56ccd6655858b8fc8a513ee100ba037a3e83ff2
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: clicknows.mlbbclaim22free.work.gd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 9042
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 09 Dec 2022 04:45:24 GMT
server: LiteSpeed
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4631
Expires: Fri, 09 Dec 2022 06:02:35 GMT
Date: Fri, 09 Dec 2022 04:45:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea93551fa9deb76ae49a3b4019d64fe
e3b8862057ebe839959228e42246d7b1807fc90c
7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2177
Expires: Fri, 09 Dec 2022 05:21:41 GMT
Date: Fri, 09 Dec 2022 04:45:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 04:08:17 GMT
content-type: application/json
age: 2227
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21183
Expires: Fri, 09 Dec 2022 10:38:27 GMT
Date: Fri, 09 Dec 2022 04:45:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: AeUUgTeLubcBQMQeuu1XG92JIHADM+4dEGiPysYD4l74uhuDxvpsh+I/nTjpNAcbmGwdg1RZTOQ=
x-amz-request-id: 1M73Z5SNWRZH7X6J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 03:48:10 GMT
age: 3434
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:24 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/all.min.css
200 OK 10 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/all.min.css
IP
File type ASCII text, with very long lines (59158)
Hash 3e4019642322c3e0f1db17e4411b7d49
4481a79c38f6ff4651621e30fc05f4b6f4e2c98c
abfa1d2f03f268a7ac776f6a9c22f53ef759a6110b3a61eb0f7dce9bd446c8d8
GET /ajax/libs/font-awesome/5.15.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:24 GMT
content-type: text/css; charset=utf-8
content-length: 10472
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5fff7431-e7d0"
last-modified: Wed, 13 Jan 2021 22:29:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 642519
expires: Wed, 29 Nov 2023 04:45:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P9aeAHjSig7ElIoPJUPUOW%2BpTHRIWdDQ3TzgVr22FuaC89CiCIf4GIXQwYB2DDAgHjtDzuc93IvhHKO40aUKrzgWORiuWQ4RKpAEApSgVLpu1ey%2Bqv0lcJV6QXssXoHtEFnv6fB%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 776b175569e00b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css
200 OK 11 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css
IP
Hash 9d925d15680cff8c6ea221e68d4da6fc
4feb53c66abd34264a976f4fae5f5819fa2a454a
42afd5d11d0b1f94ab684c456c19e39f1ddfae78f2f14118e9891f68558fc26b
GET /npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"13a7e-T26mnA4DQx/6Ggl6RUU7WzskbYs"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 09 Dec 2022 04:45:24 GMT
age: 2443
x-served-by: cache-fra-eddf8230038-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11403
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
200 OK 5.8 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a7e25a22602a2b2ed35f90fd5210cff1
148c4f275b60e6cf6253d6b4c7bdc486515b2202
312d94bafa68e11e3a4a8d7c06bc25ee161d1d965afb1fa99db79815a272d0bf
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:24 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 645902
expires: Wed, 29 Nov 2023 04:45:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B51MQyAFa1jFDFNm%2BEz%2FnU1yNF8SRjNEeCrRcwdar88SJCbfy9Sy%2FU8%2BBOMAm4mhaRJtje8b7QjU8f2TaCjwi2BdncL%2FPRM%2B97Mz1OmYMjZdq6UCh2MnojiOvMgjpMEyMr9J2uMb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 776b175599ee0b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash d900ca08873ee57d40616d39a44cc0aa
7ab3ac8b1504b7b914a6e94c979b8390bb492f6a
1eea479cc0abe04a0846f41031207f9511f12ffef017a6109d4efb6f5523465b
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://clicknows.mlbbclaim22free.work.gd
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 801393
expires: Wed, 29 Nov 2023 04:45:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zhrt4%2FOZCL%2FaR6uOI%2FkDJsnFGmXbPxNWnxhHweQlyi1qImUbKxeC9ko2TLdluM%2BWtpfDvS91qJj47lMiIYREbARzQBo6155lMWz1xJ84o3uhOlzOzmH33oTQnydLN8FvINlQzmLm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 776b1755a9f30b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/gowebid/assets@main/go_login/facebook_white.png
200 OK 29 kB URL HTTP/2 cdn.jsdelivr.net/gh/gowebid/assets@main/go_login/facebook_white.png
IP
File type PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced\012- data
Hash 74190b93fc4f5d88f0c8e6411ba20bd8
89ce2ecb660a90b8e6ed1b335443d7767c59f28a
092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401
GET /gh/gowebid/assets@main/go_login/facebook_white.png HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: image/png
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"7075-ic4uy2YKkLjm7RszVEPXdnxZ8oo"
accept-ranges: bytes
date: Fri, 09 Dec 2022 04:45:24 GMT
age: 15497
x-served-by: cache-fra-eddf8230059-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 28789
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/gowebid/assets@main/go_login/vk.webp
200 OK 1.6 kB URL HTTP/2 cdn.jsdelivr.net/gh/gowebid/assets@main/go_login/vk.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8e2c62ec296ece5f6a69e2cfd1133310
a6ae37e62d2f201d0e783df0890df55bc11d52e0
ac250ff6fe61157727de9e17fedeb5c162452fc1aa031c4c1fe2f8eb3290ed98
GET /gh/gowebid/assets@main/go_login/vk.webp HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: image/webp
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"63a-pq435i0vIB0OeD3wiQ31W8EdUuA"
accept-ranges: bytes
date: Fri, 09 Dec 2022 04:45:24 GMT
age: 10196
x-served-by: cache-fra-eddf8230114-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1594
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/gowebid/assets@main/go_login/google.svg
200 OK 959 B URL HTTP/2 cdn.jsdelivr.net/gh/gowebid/assets@main/go_login/google.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2026), with no line terminators
Hash 1b0682cfe71bb94e574653811477972c
30295b83caf694dadea90b7bae9eba893a58ea6a
e14739e8a80d8f8d423ddbe777c3e1c670c9ee7b60563e47a2636ea4887bbdaf
GET /gh/gowebid/assets@main/go_login/google.svg HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: image/svg+xml
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"7ea-l2/BYZ4UntYWHYNNXjw757eVdmk"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 09 Dec 2022 04:45:24 GMT
age: 14307
x-served-by: cache-fra-eddf8230123-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 959
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/gowebid/assets@main/go_login/mlbb.webp
200 OK 55 kB URL HTTP/2 cdn.jsdelivr.net/gh/gowebid/assets@main/go_login/mlbb.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 903889e33eee9dc3c5e0931f33c0b814
621b1593bb4deb35f3858a25e2638ab5e22b5c16
78d66ff1ab1bd23f7fd6d9cdb93854881cb8f0b69e8a301faaf4f4eab058d19e
GET /gh/gowebid/assets@main/go_login/mlbb.webp HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: image/webp
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"d682-YhsVk7tN6zXzhYol4mOKteIrXBY"
accept-ranges: bytes
date: Fri, 09 Dec 2022 04:45:24 GMT
age: 16690
x-served-by: cache-fra-eddf8230027-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 54914
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/AlexHostX/mlbb@main/old/icon.webp
404 Not Found 67 B URL HTTP/2 cdn.jsdelivr.net/gh/AlexHostX/mlbb@main/old/icon.webp
IP
File type ASCII text, with no line terminators
Hash c7f6955dac488391444ec658fd4b6eb9
f598f7c0d9ed281a033961219faeec346e145e57
033d3a7a8314aaae3a752c13ba6c81eb384f2e5697b9f279c2ed1701fdeb747d
GET /gh/AlexHostX/mlbb@main/old/icon.webp HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=600, s-maxage=600
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/plain; charset=utf-8
etag: W/"30-mrCA2m5yFh5WWEa6T+mjJ5+Pms8"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 09 Dec 2022 04:45:24 GMT
age: 290
x-served-by: cache-fra-eddf8230098-FRA, cache-bma1637-BMA
x-cache: HIT, MISS
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 67
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/AlexHostX/mlbb@main/old/logo.png
404 Not Found 67 B URL HTTP/2 cdn.jsdelivr.net/gh/AlexHostX/mlbb@main/old/logo.png
IP
File type ASCII text, with no line terminators
Hash c7f6955dac488391444ec658fd4b6eb9
f598f7c0d9ed281a033961219faeec346e145e57
033d3a7a8314aaae3a752c13ba6c81eb384f2e5697b9f279c2ed1701fdeb747d
GET /gh/AlexHostX/mlbb@main/old/logo.png HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=600, s-maxage=600
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/plain; charset=utf-8
etag: W/"30-mrCA2m5yFh5WWEa6T+mjJ5+Pms8"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 09 Dec 2022 04:45:24 GMT
age: 30
x-served-by: cache-fra-eddf8230100-FRA, cache-bma1637-BMA
x-cache: HIT, MISS
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 67
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0905812e8498e6c5c0a9b4b584b972f
039b784fd1e0152ec7f49a54ba027f0b2bd1e833
ee3531ef0f334dcd73a86b1e4365a020d5db69ff7b82bad136eaf1a8e9d3b47f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d61883097c47c0fcb4a15cafc5bdbdfc
54411aba43093cafd1cb2acea7c2b4c69184611f
0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash f9aac3c48c36a018d080099eff89626a
6d339dc5831b5cca7e9596ce692f15e92162389d
05a756fec95a4bb5c2155c2f43368c9bce2024a9b9b6fb72a8659f4fea2d011c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4699
Cache-Control: max-age=117588
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:24 GMT
Etag: "6391d35d-1d7"
Expires: Sat, 10 Dec 2022 13:25:12 GMT
Last-Modified: Thu, 08 Dec 2022 12:06:53 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 40ed5ec0836e5a03f0c1347b5db96966
40a1f62afbf3c26ea40be6d287122f3ffd19870e
2fd03cac65cc434ddade13acacc1c68a2a4bbc557e3a03777ea20fdd6c91a441
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6472
Cache-Control: max-age=101039
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:24 GMT
Etag: "63918bcb-117"
Expires: Sat, 10 Dec 2022 08:49:23 GMT
Last-Modified: Thu, 08 Dec 2022 07:01:31 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash cfb30945d4be2552dd184e580ddd4999
a684c45d5eff910a6f7346373f583f36a242a4d6
20410a9da282531cdc8f11b1b9e9222e28a1b9e9041a817ac180d518c4f4c4b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3426
Cache-Control: max-age=89334
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:24 GMT
Etag: "639169f8-118"
Expires: Sat, 10 Dec 2022 05:34:18 GMT
Last-Modified: Thu, 08 Dec 2022 04:37:12 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash cfb30945d4be2552dd184e580ddd4999
a684c45d5eff910a6f7346373f583f36a242a4d6
20410a9da282531cdc8f11b1b9e9222e28a1b9e9041a817ac180d518c4f4c4b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4099
Cache-Control: max-age=90007
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:24 GMT
Etag: "639169f8-118"
Expires: Sat, 10 Dec 2022 05:45:31 GMT
Last-Modified: Thu, 08 Dec 2022 04:37:12 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash cfb30945d4be2552dd184e580ddd4999
a684c45d5eff910a6f7346373f583f36a242a4d6
20410a9da282531cdc8f11b1b9e9222e28a1b9e9041a817ac180d518c4f4c4b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3426
Cache-Control: max-age=89334
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:24 GMT
Etag: "639169f8-118"
Expires: Sat, 10 Dec 2022 05:34:18 GMT
Last-Modified: Thu, 08 Dec 2022 04:37:12 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash cfb30945d4be2552dd184e580ddd4999
a684c45d5eff910a6f7346373f583f36a242a4d6
20410a9da282531cdc8f11b1b9e9222e28a1b9e9041a817ac180d518c4f4c4b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4099
Cache-Control: max-age=90007
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:24 GMT
Etag: "639169f8-118"
Expires: Sat, 10 Dec 2022 05:45:31 GMT
Last-Modified: Thu, 08 Dec 2022 04:37:12 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash e981e5b795ed6130f5b71f4c75321eb5
34df8ce1e4658de3cb7db43b97812e4a1cdfe7db
b5edccf85fd19a012a49f062b7a9ae8815acc2dfd97364e84b6a515a811bc24a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B5EDCCF85FD19A012A49F062B7A9AE8815ACC2DFD97364E84B6A515A811BC24A"
Last-Modified: Wed, 07 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 09 Dec 2022 10:45:24 GMT
Date: Fri, 09 Dec 2022 04:45:24 GMT
Connection: keep-alive
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash f5eabe6a0ab4af70c46388096d85765b
bbc3adc839b79b4ac5ae4d776ad8b7787a443f14
8e7b540e51ee755a6caf286556bc56af81ac1fdd2fa361e1d908e9fbfddcf829
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 04:45:25 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "187EAA1C5BABE5C9F25911A34FC8F8537CD8EF53"
Expires: Fri, 09 Dec 2022 15:00:00 GMT
Last-Modified: Fri, 09 Dec 2022 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2404
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776b175738e6b506-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash 40ed5ec0836e5a03f0c1347b5db96966
40a1f62afbf3c26ea40be6d287122f3ffd19870e
2fd03cac65cc434ddade13acacc1c68a2a4bbc557e3a03777ea20fdd6c91a441
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6471
Cache-Control: max-age=101037
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:25 GMT
Etag: "63918bcb-117"
Expires: Sat, 10 Dec 2022 08:49:22 GMT
Last-Modified: Thu, 08 Dec 2022 07:01:31 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d61883097c47c0fcb4a15cafc5bdbdfc
54411aba43093cafd1cb2acea7c2b4c69184611f
0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bagasarya.xyz/img/border/boxOn.gif
200 OK 396 kB URL HTTP/2 bagasarya.xyz/img/border/boxOn.gif
IP
File type GIF image data, version 89a, 659 x 484\012- data
Size 396 kB (396150 bytes)
Hash d86797bdef66f5e5cab461276e1c4167
ed29a30c46b2ad6816a0d25bfb4b82faa73ef3d0
b79101637071c0b479a12dc57e70949a800139eec46fdd5df7599666e16568ab
GET /img/border/boxOn.gif HTTP/1.1
Host: bagasarya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 396150
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 01:20:45 GMT
last-modified: Sat, 06 Aug 2022 03:55:15 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 98680
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LV0FFwy%2FNnZe21zlnGXrkdWdZ%2FSHFu%2By1dYo6FPFZ4rgasEq0scp2zybbcL6s9vUpnyMDBW8cwRvdfGXfROWgpelI7%2FfyiOxgmTrVDv0ydIKs8yeG0sLOjBkHxjjETrG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b17575f84b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0905812e8498e6c5c0a9b4b584b972f
039b784fd1e0152ec7f49a54ba027f0b2bd1e833
ee3531ef0f334dcd73a86b1e4365a020d5db69ff7b82bad136eaf1a8e9d3b47f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
file.gifan.id/2022/06/29/ML/border/2.jpeg
200 OK 12 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 137x130, components 3\012- data
Hash 89dd611dc90e68c564dd9a332a461c40
6fa24fa9061cb2a6f0b5424854e4de35600ae2f5
1e714f2533ca0e0913503199304bc6ce466ec054705866c2ae340fe596ad4d05
GET /2022/06/29/ML/border/2.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 12408
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:27 GMT
last-modified: Wed, 29 Jun 2022 01:56:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X6%2F6%2BjVvRhu9kMz5vt%2B5bSMTkyGfxyPlqKnUo1%2FMcXmzBVKqfbaE0x39GUMjjvx%2BDaJ4ce2qrU4USN%2BcRWCt85swuZOHnCCKkKni7RgepKgE5dkEjPx%2BE9W1GiC6C%2BpV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175748fd23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
bagasarya.xyz/img/border/frame.gif
200 OK 1.2 MB URL HTTP/2 bagasarya.xyz/img/border/frame.gif
IP
File type GIF image data, version 89a, 250 x 336\012- data
Size 1.2 MB (1205095 bytes)
Hash e3383f3208c3ffae31d9bc14ce9062b2
d6c7c1492f9b420eccc5493ce24b42de68e83ba9
0e248db5cb16d669fb499ba1892bec20383bbfd53863a1fe345729d0fd15203a
GET /img/border/frame.gif HTTP/1.1
Host: bagasarya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 1205095
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 01:20:45 GMT
last-modified: Sat, 06 Aug 2022 01:33:42 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 98680
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BTritKVxd5oNMmia6h5Ei8kOKNOFmgMLN%2FKMNx%2ByCu2n%2FZmpIyUTowTfKVqx8pe%2Fl8E7NXw24IFG4C5d3qU2sLpm%2Ft9lNd0iCZ8aRjCsdF%2FeB5KNpJjWwREK0wRmJmNC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b17576f91b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
clicknows.mlbbclaim22free.work.gd/alexFrontEnd/tiktok.png
404 Not Found 1.2 kB URL HTTP/1.1 clicknows.mlbbclaim22free.work.gd/alexFrontEnd/tiktok.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /alexFrontEnd/tiktok.png HTTP/1.1
Host: clicknows.mlbbclaim22free.work.gd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Fri, 09 Dec 2022 04:45:25 GMT
server: LiteSpeed
www.youtube.com/s/player/72d3c60a/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/72d3c60a/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5a5b8eb5d8a3df4b72089b611a5e7deb
9eb088fd709aba51fcc2261764df57ddb6df1498
3e06a6dbf24b719e85dac71b46a939a516c246dee204817e5aee68f580b83406
GET /s/player/72d3c60a/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/pTiTQwuFizo?controls=0&loop=1&autoplay=1&fs=1&iv_load_policy=3&showinfo=0&rel=0&cc_load_policy=0&start=0&end=0&origin=https://youtubeembedcode.com
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49862
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:36:35 GMT
expires: Thu, 07 Dec 2023 19:36:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 01:17:24 GMT
content-type: text/css
age: 119330
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/border/4.jpeg
200 OK 12 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 137x131, components 3\012- data
Hash ed0142f6c936e02fa902084dfb20d32f
a551891b9b27510ad06787329490b9614875519c
292e4dab178b1ff88f05e2cf3060f3ff3af4eb09d22d8b70e19b5c4cce119c6e
GET /2022/06/29/ML/border/4.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 11944
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:27 GMT
last-modified: Wed, 29 Jun 2022 01:56:44 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lBw2e89fk3vUUKqLdozAs%2BBOd3WlADAS4cMnN2btIYFv293ne68FdtWoV2g6cR1jDOgm%2B0JXa9%2BVQRJ00Lb1gQbIAiwIeIlsDZdpXqwBjcDBN9RRGZ7iiDKWshgSRJy1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175748fe23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/border/1.jpeg
200 OK 14 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 127x125, components 3\012- data
Hash c3f23c759474b52b605376efbc3358ca
8aa3921a9d9996aa58400f7789c1b3a8d6bef993
bbfc84c4fbf2b869a000a32099492c9978c23d3a80695805c2c9fc8678b256d5
GET /2022/06/29/ML/border/1.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 13882
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:56:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FArAh%2FloGY0A%2Fw%2B66jJmRsBfn82vzw%2BQU91I%2B%2Bd2tZWgreYxsUXYTckemrZQ7JQq%2BPOEkREonkUR1GVC9optIcyq%2BASJKyKij6IloiLEBGd1LS5INhU0QcAISEeWkBUX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175748f923ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/border/7.jpeg
200 OK 10 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 123x125, components 3\012- data
Hash a45314cdf40507ef02c3ee779d608aca
bece15ef6fcb3339a5c9d32545a49d883ced5299
fb91a9fbfacfb720ffe9403476f8f0320cb6387492413191ef944555579dbe31
GET /2022/06/29/ML/border/7.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 10538
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:56:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IeJsl%2B0P3exUTcqtaT7xx2UDxgi9m22UEQ4cG8LuA0fC9Qq6xcCiKf3yp%2BbhQJvq0PxXJffzrgVpXfSg8oRvvtQAngmsg5%2FgTFWoJ%2B%2BqlAnHZ4cdXnBs3hBHQ%2BIi69eM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757490123ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/border/8.jpeg
200 OK 12 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x131, components 3\012- data
Hash bb3a6821a831388426333e7ff7c21b93
9b3ed817773e8a3cc88e7a7493855b0a68525444
afb9170b3c58fb81966bcf994426ada17c689040546525719b51b527bf4bee06
GET /2022/06/29/ML/border/8.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 12391
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:27 GMT
last-modified: Wed, 29 Jun 2022 01:56:52 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XyJ%2BHqZheajn3sMaTisejfIwa3%2BNH4yxfHaKDM%2BO36ecgjZJjrS%2F%2FZZ2ZoXJ53cqi7g02%2B3lJoHGHq8u%2FY5mtcfNSS7kW6kjweu9k%2BCUfAB6bFA8yr5EW6vam3xgx5G0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757490223ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/border/6.jpeg
200 OK 14 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 130x130, components 3\012- data
Hash 8d8317eea9213928e3c0319cf237e8ab
34073433e542bfcae6c627a09796828e6b2758f0
5eee23e2ba4c13b2a0d20266aa99d61d20f41725365760f63821ceaf836914b2
GET /2022/06/29/ML/border/6.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 13578
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:58 GMT
last-modified: Wed, 29 Jun 2022 01:56:48 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334585
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eGBOkY5qJJvOEEeJTk2lwgzXs4JDSrLL%2FbVAwHqkX4N0XdIpVIUo7%2FBOwXEQ6g73bH9dcHaUL%2BUsq%2FxN4Os%2F0dbdlQori7S%2FksuxGM%2FDSJ79KKmbgfWwcNw3SQyN1y%2Fn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757490023ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/border/3.jpeg
200 OK 12 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 124x127, components 3\012- data
Hash 943b4a00399dc4e693e4931cf33bef96
df0216e09753f2d2ca2efe7e5baa4b600308d020
de0441e81786232488b2a73e9c56e78040cdd2f9adf82dcda25f4e9d166fd925
GET /2022/06/29/ML/border/3.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 12468
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:56:42 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334587
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dwL1L1pC%2Bp8hspTMCrzHbhKAxMj25D0bxjEB4uoiZ%2F5%2BOp8oVv4ONQ5TzU6Jzj%2FYxsZYglOMo%2BE9wPWi%2BvpXlZIhCKqQYTU%2Fi3Knps8XKMaXbHbzI1nD30Es6OoaGobU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175748fc23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/border/9.jpeg
200 OK 12 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x125, components 3\012- data
Hash 12b66031d66c51b1861e2e964def545d
78e00bc755458b2662979fab06e3aeebeb5abf1c
336abc805d5ecf4e7b22df535cf7ccbedb2e0f7e4a8a78d2d5f67a3fa0f9ce02
GET /2022/06/29/ML/border/9.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 11893
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:56:54 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334584
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZgWmTUjHT3ANfpzxcAufsw6FwsZ5RX58zZzBf2kVW0sa1gE1dE9mj6t1rL6iXdAR5BieRMXqB3pi%2FvvjpDgaRyb4avsjqXrzs0YfVgN0f02l7wXsLtbE8fQVLX9ZRvsf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757490323ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/border/10.jpeg
200 OK 14 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/10.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 129x123, components 3\012- data
Hash 5594fba93fa048c23b78ab94585d2c06
13ce3970dfd6ff588fc50fb18cf09f5016d9daf7
682d7221d4009f85742bf6e94480a7c7b552e26cec03f8bff41e5406d48dd39f
GET /2022/06/29/ML/border/10.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 13776
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:27 GMT
last-modified: Wed, 29 Jun 2022 01:56:56 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7JAERxuqIaf2jUWoeYFBBRH21Iqy8Hs%2FpJ61eBhblvOPkFJ40iNaPspx7vb%2FjYfv3dg9iAXEaFJ6iQTwzbdSD9kAOk3Wcg0ykz%2Fbom47sIzMrraSF2%2FOctSix%2BSzFyl5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757490423ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/border/5.jpeg
200 OK 13 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/border/5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x135, components 3\012- data
Hash 110de4b3386b174aa91799da526a5fa4
ca04da5930727af1dbcbe934b42dce6fe170fa72
567c71f609014824e4e9d15baccf60508b5a6fd9c32b89f4809b3f2d9dcd61f1
GET /2022/06/29/ML/border/5.jpeg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 12875
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:27 GMT
last-modified: Wed, 29 Jun 2022 01:56:46 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gLLoOr8tn6wtSIlL1xT1JZJ1vtEVPZSIlzNfmwZwbhHbQL3Cm8RM%2F2Fv9w9hXAFzRAjYpq77j5rbMl6Uj4WHEtjKtjIOjMOZXeCKaKpTT2RgBJQ2qfEvi47CRaDyCEUp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175748ff23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/s/player/72d3c60a/www-embed-player.vflset/www-embed-player.js
200 OK 99 kB URL HTTP/2 www.youtube.com/s/player/72d3c60a/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (679)
Hash 6278b7402fc83e24ebf6989d8de59b43
cb4217da0314cbbad9a59cd9a4c5c9791c5cf2c8
ab52b872c1360673bf1bde1a98e1cf7b9c8bc351bd07651d338f444db827b995
GET /s/player/72d3c60a/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/pTiTQwuFizo?controls=0&loop=1&autoplay=1&fs=1&iv_load_policy=3&showinfo=0&rel=0&cc_load_policy=0&start=0&end=0&origin=https://youtubeembedcode.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 99392
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:37:00 GMT
expires: Thu, 07 Dec 2023 19:37:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 01:17:24 GMT
content-type: text/javascript
age: 119305
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/72d3c60a/player_ias.vflset/en_US/base.js
200 OK 595 kB URL HTTP/2 www.youtube.com/s/player/72d3c60a/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (517)
Size 595 kB (594772 bytes)
Hash 7f5d760069d9cecea0d8dc1acfcabb2b
6acdef1e7fbbafbfbec0012a891af004b02fcb94
338bc6bd2e9aa2fccbe6a5d1a288af6d172aec6b3da3a30ddee4a9d68dc07240
GET /s/player/72d3c60a/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/pTiTQwuFizo?controls=0&loop=1&autoplay=1&fs=1&iv_load_policy=3&showinfo=0&rel=0&cc_load_policy=0&start=0&end=0&origin=https://youtubeembedcode.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 594772
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:41:43 GMT
expires: Thu, 07 Dec 2023 19:41:43 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 01:17:24 GMT
content-type: text/javascript
age: 119022
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/dm/1000.jpg
200 OK 64 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/dm/1000.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=720, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1280], progressive, precision 8, 292x212, components 3\012- data
Hash 2f3a912fb5a0576b7884466a499d546a
c5f08eeee75a0d0ebfd8f887f7b43939c7578df8
6e8a2198ba7e7e8c1e71c908445c2274bdbd48d414fbb0a7fc044df49c3ab0cd
GET /2022/06/29/ML/dm/1000.jpg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 63898
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:57:08 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334587
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nl5J63RnvELvF351kDdSUNKkKK9xzb%2FVI7vxSCoADLsPfxFG9WlyHoqSX6MJNfJjxt7l8GX09%2BG9C8wT00dyKqUvYAU5l%2F0wB5QC3qKd6lCqR0qld9ECJ0FMSUCBhQoU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757490723ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/dm/500.jpg
200 OK 64 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/dm/500.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=720, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1280], progressive, precision 8, 292x212, components 3\012- data
Hash a5ad315a073e74e09b2d4d8294f15a94
57f386aa235168725dedfab8763bfba9a9e77fe4
32cf399c29db81a1e0362fbd3a925ab217fee31de6a092c2396807a2ade9a6cb
GET /2022/06/29/ML/dm/500.jpg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 63592
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:27 GMT
last-modified: Wed, 29 Jun 2022 01:57:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VeRGObq9duiXnEU9l7zI2P1D0HXaYna%2BO%2FYR4zWZLFKcdNV9GiXmfe21anZN7cLnT2%2BeInvi1uokX05H17KnRzeoayk%2BZmRnZTqXSSV%2F8wCoiFYB4w7RcZMf9WJoJkQl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757490623ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/dm/2500.jpg
200 OK 81 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/dm/2500.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=720, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1280], progressive, precision 8, 292x212, components 3\012- data
Hash 8f66c7a0904e304b14cd3cbbd31eafb8
92d81b84c9554f8ac5c1a85f21ded1659e709287
8dff9b35c156d6e7f4cdbf0c3499d5a41dd673360cd3ebb92d34b44b0ee6d9ad
GET /2022/06/29/ML/dm/2500.jpg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 81165
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:27 GMT
last-modified: Wed, 29 Jun 2022 01:57:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=muoHSt2k9UTOWVGbu%2F78nt%2FtcKSIYf5roYQ26slwI2JRVXNdoi%2FQ2eVhljQoJfxh5GX2fGPDiv6BIuvX39m2mGvbWY5pPSJBeD%2F1%2Fc1EuCvwV2FwbJ%2FiuvcgwtXWRrnj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757590923ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash cfb30945d4be2552dd184e580ddd4999
a684c45d5eff910a6f7346373f583f36a242a4d6
20410a9da282531cdc8f11b1b9e9222e28a1b9e9041a817ac180d518c4f4c4b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3427
Cache-Control: max-age=89334
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:25 GMT
Etag: "639169f8-118"
Expires: Sat, 10 Dec 2022 05:34:19 GMT
Last-Modified: Thu, 08 Dec 2022 04:37:12 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 280
www.youtube.com/s/player/72d3c60a/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/72d3c60a/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/72d3c60a/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/pTiTQwuFizo?controls=0&loop=1&autoplay=1&fs=1&iv_load_policy=3&showinfo=0&rel=0&cc_load_policy=0&start=0&end=0&origin=https://youtubeembedcode.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:37:00 GMT
expires: Thu, 07 Dec 2023 19:37:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 01:17:24 GMT
content-type: text/javascript
age: 119305
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash e981e5b795ed6130f5b71f4c75321eb5
34df8ce1e4658de3cb7db43b97812e4a1cdfe7db
b5edccf85fd19a012a49f062b7a9ae8815acc2dfd97364e84b6a515a811bc24a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B5EDCCF85FD19A012A49F062B7A9AE8815ACC2DFD97364E84B6A515A811BC24A"
Last-Modified: Wed, 07 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21599
Expires: Fri, 09 Dec 2022 10:45:24 GMT
Date: Fri, 09 Dec 2022 04:45:25 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/teko/v15/LYjNdG7kmE0gfaN9pQ.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/teko/v15/LYjNdG7kmE0gfaN9pQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13324, version 1.0\012- data
Hash b4082c888eefa2dca3fe2c9d46a87180
05aeb6c58175f659fe59eaca5a9d3735dd0530e3
352ad1513eeaeec51060f01d5bed32345862ec4d9c0802b81e0a47885951e4b6
GET /s/teko/v15/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://clicknows.mlbbclaim22free.work.gd
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13324
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:46:17 GMT
expires: Thu, 07 Dec 2023 19:46:17 GMT
cache-control: public, max-age=31536000
age: 118748
last-modified: Wed, 27 Apr 2022 17:05:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.postimg.cc/qv1M6WT2/images-3-10.jpg
200 OK 25 kB URL HTTP/2 i.postimg.cc/qv1M6WT2/images-3-10.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 391x783, components 3\012- data
Hash 8c02720b8d1ae024021996fb38a0996c
d0729d7a71ee6dc4324a8ae57157dae1c844b8fc
435918ae1911c9c51534b31bb239d06a5a2c477ccad41cb66d4d477348b4173a
GET /qv1M6WT2/images-3-10.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 25019
last-modified: Sat, 06 Aug 2022 14:53:26 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 16:40:43 GMT
expires: Fri, 08 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 43482
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 21:48:03 GMT
expires: Fri, 08 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 25042
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 04:07:59 GMT
age: 2246
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
file.gifan.id/2022/06/29/ML/skin/Lance-Hero.gif
200 OK 2.0 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Lance-Hero.gif
IP
File type GIF image data, version 89a, 156 x 264\012- data
Size 2.0 MB (1997580 bytes)
Hash 7daa7d572c5eb0a18197db0c38381a6d
58b4cfd05eac1d5ba8267c0a9aabb16e6de80a46
1e6aa13905b48a0a77832b43758703d1ba81817d3ab47f3acba64615de214de4
GET /2022/06/29/ML/skin/Lance-Hero.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 1997580
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:55:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78419
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vxOss205mhzmVLtsS9Er01q748Pw9WH30gd%2BGc3yf7Kjc%2FVHwkrDjtPPN0EQybI%2FdPTXSKABted2Y8PC3%2FXqlQO7p7Z1hIF3pirU6xB9viiVcDupbTbz7Fxs7imkHF%2FX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757592723ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Valir-Heli.gif
200 OK 2.2 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Valir-Heli.gif
IP
File type GIF image data, version 89a, 168 x 274\012- data
Size 2.2 MB (2171199 bytes)
Hash 06d19a497eef7ea3c7b43e60de1adff0
8b5ee547993f60efad0da26c95c69435fe407248
a67bf92f5baf3adb08135edc15b88fef237168111f107b32a783d9eea8f76883
GET /2022/06/29/ML/skin/Valir-Heli.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 2171199
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:55:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334587
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FUljVx0E1%2BIPHSNbiaGDnmcl6tWrbJ6bAUz32u4uNqzWwvmQljP%2FV%2Fi8oCHg9yMEmEpnWHW0CpIGHplPbC3pUhpd9r6lbisyeg9dpt0zUF7IUCGLZzHfny%2FsQw1yg3QU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175748fa23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Valehero.gif
200 OK 2.3 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Valehero.gif
IP
File type GIF image data, version 89a, 168 x 272\012- data
Size 2.3 MB (2283696 bytes)
Hash 0500d81075ce591a2241a402ec41c774
00344ebf189dbbf52bc7c236fc0fb3d7c14a6853
3a7789f155963c8ce64d9787af622580498a14258bfd4d7eae31a6872cb3bee9
GET /2022/06/29/ML/skin/Valehero.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 2283696
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:55:36 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78419
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8PdHsj2bJeZMUfBLUZz9UkEXuovUl%2BGQQsnp%2FM25V1C3nBUXk0p3P5fbwd7QiCz3MJYnb4Xz1PHjrka0hXMj%2Bb8A6eNQzqno7TMlKpLP4vVm6fisQd2OCDYmeN8IPWwk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175748f723ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/YssCl.gif
200 OK 2.5 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/YssCl.gif
IP
File type GIF image data, version 89a, 162 x 266\012- data
Size 2.5 MB (2514913 bytes)
Hash 8087cea3cb95aff725f300a74ad7b048
1fc8e227ed1375dc72234c519d6ebe11172293fa
d9389c94b82c44017fe83f43f19b37e1a17977a600b381549e7966e430367094
GET /2022/06/29/ML/skin/YssCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 2514913
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:55:28 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334587
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ajUFFEZrpbjA%2BfQwUApyhR%2BWY76l5F0tuOHnwf2RrLOesTp8Bo367C2DtbuhP8pLY0andxB5NMLlhvuxCkwXtU2wDTCH%2FahRw5n1%2BxuhLUgHhJ7kRKiIS5rNVnG85qFj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757592a23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Bruno-Hero.gif
200 OK 2.6 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Bruno-Hero.gif
IP
File type GIF image data, version 89a, 168 x 274\012- data
Size 2.6 MB (2619008 bytes)
Hash 40fea27cb9481ed87e5b02c47f4ec1c9
6afa46d4227b330b5cb536fb9fa482e14d3056b6
458bd1e7919460b5e5b98300e8a060092e360683177a74d350a7ca019e32ae03
GET /2022/06/29/ML/skin/Bruno-Hero.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 2619008
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:51:16 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g%2BxwiGeW%2FmLEqKgRmhpB89VdJeCKy%2FNE2L9uPMl13N2%2F3vdmNFu0GZvE2nyJNHrSJcyJvSJsST29Na1W7CFZz1ODoOXKl92XGwV3YvO49qeHBh30SQ31d9qQk8TUYsYa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757592023ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/EsmeHero.gif
200 OK 2.7 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/EsmeHero.gif
IP
File type GIF image data, version 89a, 166 x 274\012- data
Size 2.7 MB (2720064 bytes)
Hash a6d7184a2c284975281122ef7909c95a
b6e229858e5976dc8a6da19c66ecec80fac05af6
7d54a52f29f2eedf9d1557405f8f2331b22fa05e0982349f1cf93d9539613cd3
GET /2022/06/29/ML/skin/EsmeHero.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 2720064
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:51:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L7iUI%2BbZW4nXM1FJKKwMmguvwgx000J34zlvO8%2FSo%2Fo3CEra2X%2FMKikeDO73WOx61AYEilo884oto4U%2F6Smse1XCxb7eWoIgKZXmoQPGJCfVj%2BCAwmYWVHndIBy%2F0v08"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757590e23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Balmond-Cl.gif
200 OK 3.0 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Balmond-Cl.gif
IP
File type GIF image data, version 89a, 193 x 320\012- data
Size 3.0 MB (3015376 bytes)
Hash 0d8aff50e3645572903e3df3f6b6e665
f4129a3000c012af19aff09dfafe78e5c79c861d
0a6864b6821594e7d8437f94fd301c7511cedbf819529370c28d17753bbad1d9
GET /2022/06/29/ML/skin/Balmond-Cl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 3015376
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:51:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78419
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u5jH6EaojDxQBTQLRId088%2FxHG%2BKkLfAnzldALPesoWd9whHDE7NtewaAHW58QEPb%2BtnKug%2B%2BLnUkeGCiaMhJMoDueLdaEgQkL9Eml54%2Fudnfy7tpEcZ8PFxMv6TgEEp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757590b23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/dm/5000.jpg
200 OK 21 kB URL HTTP/2 file.gifan.id/2022/06/29/ML/dm/5000.jpg
IP
Hash 7748b770c9ddcaf6cf91236cfbd36982
f62b4203e683e1ec3ea080227ed7fa0bce80f771
45ad5a811134f8df58113716f994ea8384f070faeb92d46e0ed49fabeba9b972
GET /2022/06/29/ML/dm/5000.jpg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 81805
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:57:14 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334587
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7mC3VYLjTNuiXNwvJNNOMT78cmDGTpoxxGdmPPo3XpRR3iFlKzSzhh46Eyp%2FUzmM1oMmPHaWtl7nexJVQzjZcB8LiDKUM%2Fw0pf63ARgajtfQqiHB5KwP4jWTTV4aiPFn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757590a23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/dm/1500.jpg
200 OK 472 B URL HTTP/2 file.gifan.id/2022/06/29/ML/dm/1500.jpg
IP
Hash dcb0ed86727c359c48d60000d5ce055b
f7e736e0e1f78ec89eacaa08fd5648e1cf47d4fc
68713a99b06419fcaa5ee2c4b2b1a2772ff6a47df9ca0f5dda78189fefa108a7
GET /2022/06/29/ML/dm/1500.jpg HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/jpeg
content-length: 69616
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:58 GMT
last-modified: Wed, 29 Jun 2022 01:57:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334585
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zJNs3e%2Bl16U8cL2rjdr70FIgCghTWHq2bdMtLjA%2B44DyK%2FVrpdnm3pxJAP8NoD2ep80fFgzyfzD66hjbLyRRHOZq74mgPZYn5nkv6jRZ5HEA4GdP0cibo1WJmSXL3iAp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757590823ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e3b657ebd655fbfa5f10c01c775f2aa0
2478fd171e6791a10d83b2bad9de0165d268db7e
2d91737e61e5338bc24c7df4aa36b1c20d9f79fe8ea4bb4914fd2c15e99a7ee3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash fd55f4aaaab6ec40bc7dc10252cd819a
a72523f60be265a391fa9edc43e0a93418ad1fd0
bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 163
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:26 GMT
Last-Modified: Fri, 09 Dec 2022 04:42:43 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 04:36:04 GMT
expires: Fri, 09 Dec 2022 04:51:04 GMT
cache-control: public, max-age=900
age: 563
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 09 Dec 2022 04:45:27 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Fri, 09 Dec 2022 04:45:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/AldousCl.gif
200 OK 3.5 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/AldousCl.gif
IP
File type GIF image data, version 89a, 196 x 320\012- data
Size 3.5 MB (3498248 bytes)
Hash 566ab198df3bd9fd95fe9c5e6415df0e
4b2627739c47ec8d61b3a82c4967794baeab60a8
6344f5dc259c2412240089b85394e891734aa5332676b958e7c52b24d1d2ee88
GET /2022/06/29/ML/skin/AldousCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 3498248
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:56 GMT
last-modified: Wed, 29 Jun 2022 01:50:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mvJw0EqTX79v8x%2Bd486GbfUCauUqtFlAbp%2BqYicctRLJWZnhwgR1ECfGp1Lk4EA4ddV4fWkyfAIY6ui5DNAo%2FC1pAHLHGSvgtqmxKReowoOpSCsBhMrYoRyKnXSyDcLg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175738eb23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/LingCl.gif
200 OK 3.5 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/LingCl.gif
IP
File type GIF image data, version 89a, 201 x 320\012- data
Size 3.5 MB (3537877 bytes)
Hash 0b925ec632728797e842c89d1a1910fd
b0694a5817e94607433f8cff1b4db6c38d2f7d05
31b0a899c2b5ddad15599fc1768613dfa059e9637cee8d49ea82b40038ad1951
GET /2022/06/29/ML/skin/LingCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 3537877
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:55:22 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78419
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xqv23lXX2ev9UyGyabWVrZrk1kZZJ1cyD9w5dLNbix45cYJdG4l0c4hXnEBrVcIcWRA1PgGVc4%2BX9Qk6YBqPfYKSApQdy9jaHrEkud8UQEXeuvyY7ZgrpIfxhMt%2F1c2g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757592923ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Alphabsy.gif
200 OK 3.7 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Alphabsy.gif
IP
File type GIF image data, version 89a, 195 x 320\012- data
Size 3.7 MB (3683660 bytes)
Hash 315d439f4dbed7d628b012e840260d4a
8629154861f3c4ff6e9e3c194506ecd18abd2a13
b205cfcfac527d4ce50bed482b3dc38e18e3d9f44a24fcd271ae3bcfec725ece
GET /2022/06/29/ML/skin/Alphabsy.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 3683660
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:50:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78417
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pRYenUQw5u9bD30j53%2BekBNb5nYdE0EajHQIYNbXlV9kg0qW9fSxXPAI8%2FSxfTPwQSf7qoSAf%2BILY77kgIAzA73aGhHTceAh5utD6ZBFxQ3IKn7jArFCM%2FFET8Ci0CFL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175738ed23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/BadangCl.gif
200 OK 3.9 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/BadangCl.gif
IP
File type GIF image data, version 89a, 198 x 320\012- data
Size 3.9 MB (3883913 bytes)
Hash e3f9d0a9db046388d1261f575eda15c7
3437ef99433f5cf310acb99ed6402ef7490616b6
e60b7dfcc7021246f7ad0b0f536305c586f372a9a6e2e532a5bbcc546e5e54d5
GET /2022/06/29/ML/skin/BadangCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 3883913
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:50:56 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78419
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f%2FD%2Fy3JrCB6lZPpSilYR6skktAEiZkeC9FhOSGx4RbqyP8zbVHTijZTTmRjQia6bU4%2Fk50L2amYrRadCF78doO6wIWaQ9BM%2B6faqwdBCUHOb50C04ELC4VoKXZ8OJlKO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175748f623ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3b873c6396aca4019ea51aed119cc8b6
b9684a5bf5075eb4e8ae2512b9ab3f1ddbddf80a
0045a8cb68ae0065903c118fcce7eb8b5eb1ad3bf92da3a50630346f5b45ca34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23f0fed6cb9af080a75d8b899ae5bd84
2c02a8cb4a6e70d8ba58696fd709838656d443c3
b1102b6924fcffe1f07a07385010a47aa142435d4efc79b338e50f8258a4d5da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ibb.co/xqy1krt/Kimyy.gif
200 OK 1.3 MB URL HTTP/2 i.ibb.co/xqy1krt/Kimyy.gif
IP
File type GIF image data, version 89a, 314 x 480\012- data
Size 1.3 MB (1297708 bytes)
Hash e19be366bf2e8bf008f722a876dbe829
684fb0780b1fee4ab9d7439f92c33de5d78d3cb6
3046e763f8bd33cdcce5c970faf8cf2d44fd36edca393048fb75a7bf6754d574
GET /xqy1krt/Kimyy.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 1297708
last-modified: Sat, 16 Jul 2022 19:17:21 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23f0fed6cb9af080a75d8b899ae5bd84
2c02a8cb4a6e70d8ba58696fd709838656d443c3
b1102b6924fcffe1f07a07385010a47aa142435d4efc79b338e50f8258a4d5da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QP0IiScH7QuiqiGx4aniMQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9utx024OgmW0vBEWzaWPhrZAugs=
googleads.g.doubleclick.net/pagead/id?slf_rd=1
200 OK 120 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id?slf_rd=1
IP
Hash 742fb782e1bdbe541ec9d62227efad6b
7a000e08171015e28c71f1875accc50585bace45
fe2d5a34fea73a8fb05a78f35af2f211eedc58735d8f1944a74dfe54fa4c8dfb
GET /pagead/id?slf_rd=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Referer: https://www.youtube.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
content-type: application/json; charset=UTF-8
date: Fri, 09 Dec 2022 04:45:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 120
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 5ab4afb329521a736b3a8ebff5d1bd22
e6707f7abace5f03e5a3093cf257940823bf40b9
9895be221be84b1b321d7d3afe3b280d58bf096bd85ec98e8e83548eefff9818
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 09 Dec 2022 04:45:27 GMT
server: ESF
cache-control: private
content-length: 30923
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Grangerclll.gif
200 OK 4.2 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Grangerclll.gif
IP
File type GIF image data, version 89a, 197 x 320\012- data
Size 4.2 MB (4175605 bytes)
Hash 5e05c807d953b9598c8ea3c3ae352077
4e616a7390c9541da600c9f26e1cb9b7482bddcc
4a5bf258a8913f63d5ee57061d263f419a9034a7dbaa644ec788fdf4b5477855
GET /2022/06/29/ML/skin/Grangerclll.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 4175605
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:51:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78419
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BAAH0svpnWB%2Fazf4nC7a7%2FF29q2VXrzIfPKW%2BShYftQpHWZ32CtJ1qkTYBrVHgRaPZIMwb9805oZmmqd7EsVy%2Bc1PnPgc48%2Ba1YNCCU%2Bb2i71GfbqndhPZJZy7PbYf4%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757590d23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.ibb.co/Kx12yz6/Lawack.gif
200 OK 1.3 MB URL HTTP/2 i.ibb.co/Kx12yz6/Lawack.gif
IP
File type GIF image data, version 89a, 244 x 396\012- data
Size 1.3 MB (1312055 bytes)
Hash 0e3433a84395e8feca91378e450cc9ae
ac1f64a5f5325e00442a76fab87577ee39884f00
8708b5a9b195a6c881a7226bd5033c23e8fc733a517c70c372dc5bff4b128655
GET /Kx12yz6/Lawack.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 1312055
last-modified: Sat, 06 Aug 2022 06:34:35 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/ChouHero.gif
200 OK 4.4 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/ChouHero.gif
IP
File type GIF image data, version 89a, 200 x 320\012- data
Size 4.4 MB (4411705 bytes)
Hash 7f9a767a7b8dde0b54a05b06283055ed
cef2bd430c9ebea67472e0f398ac38b0161c1aab
77c0c5b2327b6d68804cf045738cd868b377c7c8e25e3285d31f19a30ac33eb3
GET /2022/06/29/ML/skin/ChouHero.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 4411705
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:51:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78419
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u3p2y8lUwPDRwN4bVc%2FKrsSm6WNzubyT8bAC7c81burDkEym0h5ddxX%2FSpP4Py5bPrxBn9cLNgswWfqTNCGRWbygdXQfKlDZ5Pm%2F6yOXGvwFVCAARNH40j%2F6ySt7S3al"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757590f23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.ibb.co/zbpCdRf/Ling1.gif
200 OK 1.4 MB URL HTTP/2 i.ibb.co/zbpCdRf/Ling1.gif
IP
File type GIF image data, version 89a, 258 x 400\012- data
Size 1.4 MB (1432328 bytes)
Hash b6918ae9cb1444a802e47a744d0c2968
7fe86c0a82a77664e84f2308c4798548098e3485
baf87c9c950823c2f6fcc20ed4c7d80bc481cc4c6afd3f948fe8165767697aa8
GET /zbpCdRf/Ling1.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 1432328
last-modified: Sat, 06 Aug 2022 06:27:04 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/ZWBtLcW/pamda.gif
200 OK 1.7 MB URL HTTP/2 i.ibb.co/ZWBtLcW/pamda.gif
IP
File type GIF image data, version 89a, 248 x 406\012- data
Size 1.7 MB (1692485 bytes)
Hash 902b78e16521e0cfaf73710b27b567b7
c9a306e9f12bfc8cc649c356f21eb689405d70ef
a1d0a85d58f6ffc848af4f45e32407fa7cc21e719acbf618be28f19a59b09cd3
GET /ZWBtLcW/pamda.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 1692485
last-modified: Sat, 06 Aug 2022 06:33:09 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/mqqp4F5/ezgif-com-gif-maker-2.gif
200 OK 1.9 MB URL HTTP/2 i.ibb.co/mqqp4F5/ezgif-com-gif-maker-2.gif
IP
File type GIF image data, version 89a, 234 x 396\012- data
Size 1.9 MB (1868040 bytes)
Hash 3d913d6b4ee5b4dccf9d0ec3ebc6256c
e6d6ef937eb55b610225db61b89035c0921a8167
d3b6945414b32e02c722c845231c07ffb15edcbb1286f4317355c3548e50fc0c
GET /mqqp4F5/ezgif-com-gif-maker-2.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 1868040
last-modified: Sat, 10 Sep 2022 01:39:22 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 09 Dec 2022 04:45:28 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.ibb.co/ygpLtHW/ezgif-com-gif-maker-3.gif
200 OK 2.0 MB URL HTTP/2 i.ibb.co/ygpLtHW/ezgif-com-gif-maker-3.gif
IP
File type GIF image data, version 89a, 248 x 412\012- data
Size 2.0 MB (1989862 bytes)
Hash 0b1bd197b96f6379ea22a8d540589447
a72f76ed5fe668b2276354d85ddce06bc29b9d28
73b655f576158d118c8bdfc726e198c35ce0f810a719d0f466e4113fd0beead4
GET /ygpLtHW/ezgif-com-gif-maker-3.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 1989862
last-modified: Sat, 10 Sep 2022 01:40:52 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/kK0Jct8/1000.gif
200 OK 2.5 MB URL HTTP/2 i.ibb.co/kK0Jct8/1000.gif
IP
File type GIF image data, version 89a, 306 x 464\012- data
Size 2.5 MB (2491725 bytes)
Hash 29e8b24f23dac9f5c783618d77b9a723
185438a861b287c04ba40d0b7bd6950faa53a031
402b488e356387d49c7dd25e691c91b5a9d89b2c327e32d239c2d2a565449f92
GET /kK0Jct8/1000.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 2491725
last-modified: Sat, 16 Jul 2022 05:00:44 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3b873c6396aca4019ea51aed119cc8b6
b9684a5bf5075eb4e8ae2512b9ab3f1ddbddf80a
0045a8cb68ae0065903c118fcce7eb8b5eb1ad3bf92da3a50630346f5b45ca34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ibb.co/j6Hz5L5/ezgif-2-c70f622cb5.gif
200 OK 2.8 MB URL HTTP/2 i.ibb.co/j6Hz5L5/ezgif-2-c70f622cb5.gif
IP
File type GIF image data, version 89a, 296 x 472\012- data
Size 2.8 MB (2754633 bytes)
Hash a0d69973fa012a2ff6b0150f70e4d2bf
4d0ded05e7fe2917a12efbf202d100b08c80ba64
6b5467dcc32bc30067c30add7063243a0908884d561081af36bd6a5ef83592bb
GET /j6Hz5L5/ezgif-2-c70f622cb5.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 2754633
last-modified: Wed, 03 Aug 2022 14:23:26 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8498eae23cb6f210752019d814ff4a52
1b5cbadb63d3052190899a240af582287c45af20
b1ece4b6e4eb557cf274761a734029f5427b5cc62bf2d86278984dcbb648b054
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1318
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 09 Dec 2022 04:45:28 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yt3.ggpht.com/m9BweRP-L6wrdJJp24JCKUAZ1MVpk2Uxn3KdAvGZjKTBGR5xVLZwozXKZUq9YDLvXBh_3xwQYsI=s68-c-k-c0x00ffffff-no-rj
200 OK 4.9 kB URL HTTP/2 yt3.ggpht.com/m9BweRP-L6wrdJJp24JCKUAZ1MVpk2Uxn3KdAvGZjKTBGR5xVLZwozXKZUq9YDLvXBh_3xwQYsI=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 23fb59dbdd6b7dc76cd71088fecb56be
2c0ed5d42d5651037c27f7a070e3935aba026534
c0bd67f0c5c74150fcaf4f174c8133fc74ef2d2340b548974126612096e9c7c9
GET /m9BweRP-L6wrdJJp24JCKUAZ1MVpk2Uxn3KdAvGZjKTBGR5xVLZwozXKZUq9YDLvXBh_3xwQYsI=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4909
x-xss-protection: 0
date: Fri, 09 Dec 2022 01:06:44 GMT
expires: Tue, 21 Jun 2022 08:57:50 GMT
cache-control: public, max-age=86400, no-transform
age: 13125
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/98eZ1SvQKncrIy_uxRv1pSvbmSGZ50EV24E3eut_s2o.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/98eZ1SvQKncrIy_uxRv1pSvbmSGZ50EV24E3eut_s2o.js
IP
File type ASCII text, with very long lines (35818)
Hash 511a3814cb1663e9d9286015da587ae2
a9ef6e40f17b2659c823195354e912a8979cc1a0
a2e4a4711f28ea423fdcadcced71bdf38e190b285fdde3fc9f11868ad8730375
GET /js/th/98eZ1SvQKncrIy_uxRv1pSvbmSGZ50EV24E3eut_s2o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14262
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 10:20:32 GMT
expires: Fri, 08 Dec 2023 10:20:32 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
age: 66297
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dcb0ed86727c359c48d60000d5ce055b
f7e736e0e1f78ec89eacaa08fd5648e1cf47d4fc
68713a99b06419fcaa5ee2c4b2b1a2772ff6a47df9ca0f5dda78189fefa108a7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 272ec26183190d48a1849acf0272f112
76ea3dba55c09c3d46b1847b280fb68a37d250cf
3151d89b6e99d9b9ec3cf098d5b26e7ca7b2da5e2c9951589b0f33d302cab399
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e3b657ebd655fbfa5f10c01c775f2aa0
2478fd171e6791a10d83b2bad9de0165d268db7e
2d91737e61e5338bc24c7df4aa36b1c20d9f79fe8ea4bb4914fd2c15e99a7ee3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 272ec26183190d48a1849acf0272f112
76ea3dba55c09c3d46b1847b280fb68a37d250cf
3151d89b6e99d9b9ec3cf098d5b26e7ca7b2da5e2c9951589b0f33d302cab399
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5715
Expires: Fri, 09 Dec 2022 06:20:44 GMT
Date: Fri, 09 Dec 2022 04:45:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5715
Expires: Fri, 09 Dec 2022 06:20:44 GMT
Date: Fri, 09 Dec 2022 04:45:29 GMT
Connection: keep-alive
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&mh=9g&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1726250&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&mt=1670560614&fvip=2&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAIkdW89RDJEga9cJxN3HAY1hOZOL48nlJmAQk98m1b7KAiBB3anLEEDEl3Lp8ler3otwSOfocBEINUee3RjvGKOoAQ%3D%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&range=0-94100&rn=1&rbuf=0
200 OK 1.1 kB URL HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&mh=9g&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1726250&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&mt=1670560614&fvip=2&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAIkdW89RDJEga9cJxN3HAY1hOZOL48nlJmAQk98m1b7KAiBB3anLEEDEl3Lp8ler3otwSOfocBEINUee3RjvGKOoAQ%3D%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&range=0-94100&rn=1&rbuf=0
IP
ASN #50304 Blix Solutions AS
File type ASCII text, with very long lines (1144), with no line terminators
Hash 077442e9c0d1c55d13057605792220d4
19f9de79a57948d8d33eecfd31546aef5c9a3bfc
c0f1e31f9af384d2e67e1ffb16144f75e73ade599c8f619b19818a5f1a36eeb4
POST /videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&mh=9g&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1726250&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&mt=1670560614&fvip=2&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAIkdW89RDJEga9cJxN3HAY1hOZOL48nlJmAQk98m1b7KAiBB3anLEEDEl3Lp8ler3otwSOfocBEINUee3RjvGKOoAQ%3D%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&range=0-94100&rn=1&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Fri, 09 Dec 2022 04:45:29 GMT
Expires: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: private, max-age=21297
Accept-Ranges: bytes
Content-Length: 1144
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=251&source=youtube&requiressl=yes&mh=9g&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1726250&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=audio%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=773335&dur=49.281&lmt=1660374709250648&mt=1670560614&fvip=2&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4532434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAMErYvEnB4MH83x1o8JD5PXGWywhpuFom1JzTcXLtTiVAiAT09beWyzKFAducsvIQjo3gTfvslyQbQGUvlpSNh-7Mw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAIkdW89RDJEga9cJxN3HAY1hOZOL48nlJmAQk98m1b7KAiBB3anLEEDEl3Lp8ler3otwSOfocBEINUee3RjvGKOoAQ%3D%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&range=0-65884&rn=2&rbuf=0
200 OK 1.0 kB URL HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=251&source=youtube&requiressl=yes&mh=9g&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1726250&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=audio%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=773335&dur=49.281&lmt=1660374709250648&mt=1670560614&fvip=2&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4532434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAMErYvEnB4MH83x1o8JD5PXGWywhpuFom1JzTcXLtTiVAiAT09beWyzKFAducsvIQjo3gTfvslyQbQGUvlpSNh-7Mw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAIkdW89RDJEga9cJxN3HAY1hOZOL48nlJmAQk98m1b7KAiBB3anLEEDEl3Lp8ler3otwSOfocBEINUee3RjvGKOoAQ%3D%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&range=0-65884&rn=2&rbuf=0
IP
ASN #50304 Blix Solutions AS
File type ASCII text, with very long lines (1030), with no line terminators
Hash 1224c308ed7a9793c9bba18b6b9eef68
40fb182af0c98f95e5e2500328773d049c826f16
9013e3d716e53c66df9150c278ab0593c652afe726e4f0c442ba6806516392ac
POST /videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=251&source=youtube&requiressl=yes&mh=9g&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynl6&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1726250&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=audio%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=773335&dur=49.281&lmt=1660374709250648&mt=1670560614&fvip=2&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4532434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAMErYvEnB4MH83x1o8JD5PXGWywhpuFom1JzTcXLtTiVAiAT09beWyzKFAducsvIQjo3gTfvslyQbQGUvlpSNh-7Mw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAIkdW89RDJEga9cJxN3HAY1hOZOL48nlJmAQk98m1b7KAiBB3anLEEDEl3Lp8ler3otwSOfocBEINUee3RjvGKOoAQ%3D%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&range=0-65884&rn=2&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Fri, 09 Dec 2022 04:45:29 GMT
Expires: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: private, max-age=21297
Accept-Ranges: bytes
Content-Length: 1030
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5715
Expires: Fri, 09 Dec 2022 06:20:44 GMT
Date: Fri, 09 Dec 2022 04:45:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5715
Expires: Fri, 09 Dec 2022 06:20:44 GMT
Date: Fri, 09 Dec 2022 04:45:29 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45e0c1638ad919bde19731f7987ab064
1e492807c665e6e6b24ec6ce19035fdfc6f23b92
f0d3738ec8406958470c8fd152a02a123d7654c30f974c1df5c4977a380c2d62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10205
x-amzn-requestid: c5704c7a-60c4-402b-8018-5885a8dae971
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F9BIAMF3ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-3e9573d900714e3250f43e17;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mLTL7L808-OguYGrl3FUvwmFmPQjBPRj7PVfgEheFHWg4g4skoBvOg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 00:33:39 GMT
age: 15110
etag: "1e492807c665e6e6b24ec6ce19035fdfc6f23b92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
yt3.ggpht.com/m9BweRP-L6wrdJJp24JCKUAZ1MVpk2Uxn3KdAvGZjKTBGR5xVLZwozXKZUq9YDLvXBh_3xwQYsI=s88-c-k-c0x00ffffff-no-rj
200 OK 7.0 kB URL HTTP/2 yt3.ggpht.com/m9BweRP-L6wrdJJp24JCKUAZ1MVpk2Uxn3KdAvGZjKTBGR5xVLZwozXKZUq9YDLvXBh_3xwQYsI=s88-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 88x88, components 3\012- data
Hash fa65bf9de7118fcade9280a544b93e35
ed1c252dafe348df020d660e969fb0c4be8c0311
78cec743a6877cc2618be41753f75297a8392d714377bf235f126774b6f50431
GET /m9BweRP-L6wrdJJp24JCKUAZ1MVpk2Uxn3KdAvGZjKTBGR5xVLZwozXKZUq9YDLvXBh_3xwQYsI=s88-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 7008
x-xss-protection: 0
date: Fri, 09 Dec 2022 04:26:14 GMT
expires: Tue, 21 Jun 2022 07:34:40 GMT
cache-control: public, max-age=86400, no-transform
age: 1155
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06514ce96ae21cb01f526a5febdcbeb4
ebb97e5b97f394e8c67098f55581d5329ce819a2
4099a2fb6ddc4feaa30f357a180d64aeb7c9fc73f115fc762d5fe5c221d2e89e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5169
x-amzn-requestid: 277a1b04-4e19-4313-8aac-5f9ab9076305
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEdkFGrIAMFvHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb456-5b21edd57297665012d536cc;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Xi-bshsYa4LlKbJgAt0h-lPnB_5uQbqln5JGBRE8io2Fp1y41cS9xg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 04:08:48 GMT
age: 2201
etag: "ebb97e5b97f394e8c67098f55581d5329ce819a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce1766043f69325e09c488fbaa358209
92bb4135276815b0d2483cb381acf5428ab29762
da0d7aaba1a074ae2e43bb539a1d92072e9288838a50c937370a58f8fb94d14b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9cb76c68a8cd472600106cc118067868
6cee6b1828c709f68b995197ca943a5c393f86fb
009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8204
x-amzn-requestid: cf54b5f8-ede8-49d5-aa56-5d9de98e3ab8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjtKfEiToAMFSXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af576-6ddfe35c0b31074d6a07076f;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:06:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UfqFAlLedF6ZkfbGXhyYDcvu0porNJb6LPaeQ8p4dqWqsFD6iRgWLw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 15:12:28 GMT
age: 48781
etag: "6cee6b1828c709f68b995197ca943a5c393f86fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7b1b2f1-0b18-4097-a282-a7ddd9b33b97.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7b1b2f1-0b18-4097-a282-a7ddd9b33b97.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cb7655c8fe89a83f0096c51684aa21c
4946fcab2a99d926c45abaecf8f97b6214dee0cd
60a3066f2dcc2f696413ecec56ef1d0c1a9392f6845fac5c4319b8b9e02074fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7b1b2f1-0b18-4097-a282-a7ddd9b33b97.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6637
x-amzn-requestid: a1b14c0b-ceb5-4a3e-9dec-2503a0841bd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZPMEQJoAMF6uQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2d-1aec46bb5d73f0c47c824174;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rft2LEct9jDCAiIawPp0pGAg7S-bDRqXWxzM4H28FFqN2bS6TYwV7A==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:59:55 GMT
age: 24334
etag: "4946fcab2a99d926c45abaecf8f97b6214dee0cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb00a2a503a690cee3e4dd729b5bc9bd
cfb1e5bcab2148a777889680e6e36b9d7e8917ec
7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7960
x-amzn-requestid: beadd240-39d0-407d-a890-6a095657cac3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEd8HC0oAMFUag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb459-44d4f63c62f58684782ef14a;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kTEbkncBnAJmQE8cdAqvDtejiwaetpRBsVcpLXy1h52lO4iUkzmOGA==
via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 16:28:48 GMT
age: 44201
etag: "cfb1e5bcab2148a777889680e6e36b9d7e8917ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce1766043f69325e09c488fbaa358209
92bb4135276815b0d2483cb381acf5428ab29762
da0d7aaba1a074ae2e43bb539a1d92072e9288838a50c937370a58f8fb94d14b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8585fe73b51c643ee300c3df9313bfe1
c184ce0c12fbfc0f17a81ad0e0bdaad5503bceb1
807b590f961c83886bbd27c879dfbf03a3336005cdabbba42d4d63bdcb11bf51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3b873c6396aca4019ea51aed119cc8b6
b9684a5bf5075eb4e8ae2512b9ab3f1ddbddf80a
0045a8cb68ae0065903c118fcce7eb8b5eb1ad3bf92da3a50630346f5b45ca34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c8ed2c5-144c-4fce-bb57-7d9918c1ab31.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c8ed2c5-144c-4fce-bb57-7d9918c1ab31.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 44ed82780732ed682ee46b2df52b3ca2
0b3fe77e142178561b28c93b94b1aea2e1c395a5
383da5ca2927044c69ff1d10b630fe3439ca48f1845031ef1b6607fcd054c54b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c8ed2c5-144c-4fce-bb57-7d9918c1ab31.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4049
x-amzn-requestid: dbde9a26-7609-43b7-a9a5-6e4d2f559989
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwRFHIooAMFVmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-5f5131b8315a458d18cdc70f;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6_KiAcPwtB6XJyanlunX6qvT9jdlEgMPMdGHM10HmJwQ2Ue_pDsCXg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 12:37:33 GMT
age: 58076
etag: "0b3fe77e142178561b28c93b94b1aea2e1c395a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
i.ytimg.com/vi/pTiTQwuFizo/sddefault.jpg
200 OK 48 kB URL HTTP/2 i.ytimg.com/vi/pTiTQwuFizo/sddefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 70e3422d5f021e140cad4749f2310c94
4840cfb51609dbe3f8a404c40b07b238aaadb9f6
3c357c08aee4a4dfe498312b7bb7d174fd438556fb281e808953830824c08d8f
GET /vi/pTiTQwuFizo/sddefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 48041
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 04:45:29 GMT
expires: Fri, 09 Dec 2022 06:45:29 GMT
cache-control: public, max-age=7200
etag: "1659939999"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 272ec26183190d48a1849acf0272f112
76ea3dba55c09c3d46b1847b280fb68a37d250cf
3151d89b6e99d9b9ec3cf098d5b26e7ca7b2da5e2c9951589b0f33d302cab399
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce1766043f69325e09c488fbaa358209
92bb4135276815b0d2483cb381acf5428ab29762
da0d7aaba1a074ae2e43bb539a1d92072e9288838a50c937370a58f8fb94d14b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7d0707b86cc9bea2baab5f776c6a2fa6
1ca4152999f650f43d0bddc79c74d744652cd2b7
f67f5184bb3c0696479dc1d1eaa77eded6b150aa2dd7a23112e4e315299e0e56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr2---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=9g&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1670560876&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgN0G1jxjP_pO2UKhS86HNrlxeiVz8eqC6MB8MrEGSk_4CIQDbLXThk_ep9KZxchlIPbmlXf-n68VGwSadP0uoCynlbA%3D%3D&range=0-94100&rn=3&rbuf=0&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA=
200 OK 1.3 kB URL HTTP/1.1 rr2---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=9g&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1670560876&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgN0G1jxjP_pO2UKhS86HNrlxeiVz8eqC6MB8MrEGSk_4CIQDbLXThk_ep9KZxchlIPbmlXf-n68VGwSadP0uoCynlbA%3D%3D&range=0-94100&rn=3&rbuf=0&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA=
IP
File type ASCII text, with very long lines (1292), with no line terminators
Hash 1f74c23abff37947a3ba05eef4ef6ea3
0ccf9a560df5f2497a515e19d8c65df4183d429a
8f77549a781671495a88328c7beaf57761f882884492506693c2274b5ce244f9
POST /videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=9g&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1670560876&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgN0G1jxjP_pO2UKhS86HNrlxeiVz8eqC6MB8MrEGSk_4CIQDbLXThk_ep9KZxchlIPbmlXf-n68VGwSadP0uoCynlbA%3D%3D&range=0-94100&rn=3&rbuf=0&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA= HTTP/1.1
Host: rr2---sn-5go7ynl6.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Fri, 09 Dec 2022 04:45:29 GMT
Expires: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: private, max-age=21297
Accept-Ranges: bytes
Content-Length: 1292
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7d0707b86cc9bea2baab5f776c6a2fa6
1ca4152999f650f43d0bddc79c74d744652cd2b7
f67f5184bb3c0696479dc1d1eaa77eded6b150aa2dd7a23112e4e315299e0e56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr2---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=251&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=audio%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=773335&dur=49.281&lmt=1660374709250648&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4532434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAMErYvEnB4MH83x1o8JD5PXGWywhpuFom1JzTcXLtTiVAiAT09beWyzKFAducsvIQjo3gTfvslyQbQGUvlpSNh-7Mw%3D%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=9g&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1670560876&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgLRaW_P5jEOiy4dcKYSXQx71UV9dPcOcdQlxXJo2jE5QCIQCevcV4AP4czLrcDUhG7qrObMLsZmMgOiCjEdIVB0TaZg%3D%3D&range=0-65884&rn=4&rbuf=0&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA=
200 OK 66 kB URL HTTP/1.1 rr2---sn-5go7ynl6.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=251&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=audio%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=773335&dur=49.281&lmt=1660374709250648&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4532434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAMErYvEnB4MH83x1o8JD5PXGWywhpuFom1JzTcXLtTiVAiAT09beWyzKFAducsvIQjo3gTfvslyQbQGUvlpSNh-7Mw%3D%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=9g&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1670560876&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgLRaW_P5jEOiy4dcKYSXQx71UV9dPcOcdQlxXJo2jE5QCIQCevcV4AP4czLrcDUhG7qrObMLsZmMgOiCjEdIVB0TaZg%3D%3D&range=0-65884&rn=4&rbuf=0&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA=
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 890588ae2665ed137d336b9687c81a37
2c626b66c011d40f2fed12c400e4805818015a24
021bd566aa990334df6848e55ccb048d5deb7daa990038b7f45f421bc0174550
POST /videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=251&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=audio%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=773335&dur=49.281&lmt=1660374709250648&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4532434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAMErYvEnB4MH83x1o8JD5PXGWywhpuFom1JzTcXLtTiVAiAT09beWyzKFAducsvIQjo3gTfvslyQbQGUvlpSNh-7Mw%3D%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=9g&mm=29&mn=sn-5go7ynl6&ms=rdu&mt=1670560876&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgLRaW_P5jEOiy4dcKYSXQx71UV9dPcOcdQlxXJo2jE5QCIQCevcV4AP4czLrcDUhG7qrObMLsZmMgOiCjEdIVB0TaZg%3D%3D&range=0-65884&rn=4&rbuf=0&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA= HTTP/1.1
Host: rr2---sn-5go7ynl6.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 13 Aug 2022 07:11:49 GMT
Content-Type: audio/webm
Date: Fri, 09 Dec 2022 04:45:29 GMT
Expires: Fri, 09 Dec 2022 04:45:29 GMT
Cache-Control: private, max-age=21297
Accept-Ranges: bytes
Content-Length: 65885
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr2---sn-5hne6nzs.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&cm2rm=sn-capm-vnae7e,sn-5golr7l&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=9g&mm=34&mn=sn-5hne6nzs&ms=ltu&mt=1670560849&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgELxVJeGYjawvpqFuK8aEBg_rNl5RuJlQByW1Vpq_q4YCIGPYZEthUu3x0R6cVAa5z3bxoc8FwgJwJuWyRepEGdON&range=0-94100&rn=7&rbuf=0&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA=
200 OK 94 kB URL HTTP/1.1 rr2---sn-5hne6nzs.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&cm2rm=sn-capm-vnae7e,sn-5golr7l&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=9g&mm=34&mn=sn-5hne6nzs&ms=ltu&mt=1670560849&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgELxVJeGYjawvpqFuK8aEBg_rNl5RuJlQByW1Vpq_q4YCIGPYZEthUu3x0R6cVAa5z3bxoc8FwgJwJuWyRepEGdON&range=0-94100&rn=7&rbuf=0&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA=
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Hash cc3a69adcf766e4fdffbf83427ffdfd2
5962ee30d99185feef1b2e40093292c4091b0e74
06f0675bd8fce2a5d373f9d24f00190f287faa86302a3c2bad932abb84899147
POST /videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&cm2rm=sn-capm-vnae7e,sn-5golr7l&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=9g&mm=34&mn=sn-5hne6nzs&ms=ltu&mt=1670560849&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgELxVJeGYjawvpqFuK8aEBg_rNl5RuJlQByW1Vpq_q4YCIGPYZEthUu3x0R6cVAa5z3bxoc8FwgJwJuWyRepEGdON&range=0-94100&rn=7&rbuf=0&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA= HTTP/1.1
Host: rr2---sn-5hne6nzs.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 13 Aug 2022 08:35:49 GMT
Content-Type: video/webm
Date: Fri, 09 Dec 2022 04:45:30 GMT
Expires: Fri, 09 Dec 2022 04:45:30 GMT
Cache-Control: private, max-age=21296
Accept-Ranges: bytes
Content-Length: 94101
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
file.gifan.id/2022/06/29/ML/skin/Yusungcl.gif
200 OK 8.7 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Yusungcl.gif
IP
File type GIF image data, version 89a, 298 x 480\012- data
Size 8.7 MB (8743123 bytes)
Hash f3deeae9fa6b3b05e1a9803a9711f8ee
b842f3755d75aa9081db19ae35857f54209cd776
8e18e5106f26cdf8389aa72ce450e8b1d6eaaf0ec7a998cd9d9d7686170b64a5
GET /2022/06/29/ML/skin/Yusungcl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 8743123
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:58 GMT
last-modified: Wed, 29 Jun 2022 01:54:22 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334586
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gj8MjQYWkJLM8yHhPQU01Tzz29wt5yChCoSozFLq37NlYfFHb%2BvrM2VX48kotrW8kvP9OnMmmsio%2BELJufJlkVkIP15LEF1pczbQ9W2QFULWtNaA8XTUSfG%2FXRmdqZ3v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757592623ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/GusionCl.gif
200 OK 8.9 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/GusionCl.gif
IP
File type GIF image data, version 89a, 320 x 526\012- data
Size 8.9 MB (8876760 bytes)
Hash 1ee9e524fbb79835b4702006711a24d3
41f87d28a50cb18ea51877366b3c68060f09cb6a
20949ebdb1be81acdd01375332588a4810cf0b1721011753694e05a191243148
GET /2022/06/29/ML/skin/GusionCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 8876760
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:51:14 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rmWFbnbcbJdckGRKN7zkSvlujK2idOS7FV2FFhRecVplPsDzy%2BBgWdUgs2%2BJL%2BRfCmNioTB2pPEk3L7%2BTUoDba4jI8PY0cIE%2BpYXGL14beAfRQB%2BiGoDqu3X1ufAadPU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757591023ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Harleycll.gif
200 OK 9.3 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Harleycll.gif
IP
File type GIF image data, version 89a, 193 x 320\012- data
Size 9.3 MB (9330096 bytes)
Hash d283098eb8bc4fb3b9084e0443c51cab
2093a4ff9a7473c01c6de8611bcc37c02cfe6599
38c50036b97b7d98be7575b51705d156df0a1892ecb5a52975537c9fd738e51c
GET /2022/06/29/ML/skin/Harleycll.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 9330096
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:58 GMT
last-modified: Wed, 29 Jun 2022 01:51:24 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334587
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0kLZfgmR1EQeJ1La1SLumLEo7cOuZF%2BzyM3kel%2FLG6zJU%2F2HlKXfjLMf6L9KgrWC51bRUir3%2BijwbxaqukQK6KyJbH8V1Tfl8PYSuirEA32htmSNyhF990fa3VjxQmB1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757592423ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rr2---sn-5hne6nzs.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&cm2rm=sn-capm-vnae7e,sn-5golr7l&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=9g&mm=34&mn=sn-5hne6nzs&ms=ltu&mt=1670560849&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgELxVJeGYjawvpqFuK8aEBg_rNl5RuJlQByW1Vpq_q4YCIGPYZEthUu3x0R6cVAa5z3bxoc8FwgJwJuWyRepEGdON&range=94101-187818&rn=8&rbuf=2450&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA=
200 OK 94 kB URL HTTP/1.1 rr2---sn-5hne6nzs.googlevideo.com/videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&cm2rm=sn-capm-vnae7e,sn-5golr7l&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=9g&mm=34&mn=sn-5hne6nzs&ms=ltu&mt=1670560849&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgELxVJeGYjawvpqFuK8aEBg_rNl5RuJlQByW1Vpq_q4YCIGPYZEthUu3x0R6cVAa5z3bxoc8FwgJwJuWyRepEGdON&range=94101-187818&rn=8&rbuf=2450&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA=
IP
Hash f83c33921bc2ca5853a423278ac7803e
5b92037dcb7e76fe9505bee5da352bbfa0ad69a8
5c2cea56bfa877e6c2b98b189c48d70c287aa5b4d797acab9c2ab112a61b6698
POST /videoplayback?expire=1670582726&ei=Zr2SY5LaKIzLyQWDqYugDA&ip=91.90.42.154&id=o-AFCs8bevHQ5gphxqoc8UmGjnPF-x5nbC7CjoIC4OTPDh&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&spc=SFxXNvEr_BFpYPmGcYcVdgw0t9acsM4&vprv=1&mime=video%2Fwebm&ns=FtGu4tkbbR9CEpHZ32AVW4UJ&gir=yes&clen=1859280&dur=49.267&lmt=1660379749811766&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4535434&n=1DnTIc_ufoUStw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAKCtKNKH1UX1BWNOiHn8k5_HxOyxGHpNwIPwOAZ2VAV3AiEAgbnOXGXYku1cufSq71uaPkqqhxkhdJ6r4OdRrcmIsBI%3D&alr=yes&cpn=HLLbsrpwzWw8IzEp&cver=1.20221206.01.00&cm2rm=sn-capm-vnae7e,sn-5golr7l&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=9g&mm=34&mn=sn-5hne6nzs&ms=ltu&mt=1670560849&mv=m&mvi=2&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgELxVJeGYjawvpqFuK8aEBg_rNl5RuJlQByW1Vpq_q4YCIGPYZEthUu3x0R6cVAa5z3bxoc8FwgJwJuWyRepEGdON&range=94101-187818&rn=8&rbuf=2450&pot=D9g-LR3v62Nf2AXwyaGWg9WZY9i1AL6t5XcHwIkvomqXLqlAY82-Cs95WaLV1lTa1jnUM6OH7FwwRL6uW5Eb7mW1T2mZBDtJRy81LIOoCakT10z1w2spkVWgHq-lAcfcWEdLTiUG2MA= HTTP/1.1
Host: rr2---sn-5hne6nzs.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 13 Aug 2022 08:35:49 GMT
Content-Type: video/webm
Date: Fri, 09 Dec 2022 04:45:30 GMT
Expires: Fri, 09 Dec 2022 04:45:30 GMT
Cache-Control: private, max-age=21296
Accept-Ranges: bytes
Content-Length: 93718
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
m.mobilelegends.com/static/images/favicon.ico
200 OK 3.7 kB URL HTTP/1.1 m.mobilelegends.com/static/images/favicon.ico
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8a0265ac4de99fecb06a228665826c47
b09ac9ebff9a7c1d1be77b8145eabf09e71a8887
6015b7a8d02a108284971a4357f1a3d36d488804fec914a72e962593f37d5973
GET /static/images/favicon.ico HTTP/1.1
Host: m.mobilelegends.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Content-Type: image/x-icon
Last-Modified: Wed, 17 Nov 2021 11:32:35 GMT
ETag: W/"6194e853-e76"
Content-Security-Policy: upgrade-insecure-requests
Content-Encoding: gzip
Content-Length: 3730
Cache-Control: max-age=5742733
Expires: Mon, 13 Feb 2023 15:57:44 GMT
Date: Fri, 09 Dec 2022 04:45:31 GMT
Connection: keep-alive
Vary: Accept-Encoding
Akamai-Mon-Iucid-Del: 1099597
file.gifan.id/2022/06/29/ML/skin/wanwanCl.gif
200 OK 11 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/wanwanCl.gif
IP
File type GIF image data, version 89a, 400 x 657\012- data
Size 11 MB (11291191 bytes)
Hash 05396d9a66df9eaa80922a77d5e3104d
d136df836209dc2e8795267bc12aec30d1aff69e
016e25318dd096627742e00b1a9147022c13c4a2449c941955f2e3414414cdb2
GET /2022/06/29/ML/skin/wanwanCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 11291191
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:55:36 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78417
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1jAu335ptJXUr3sJFL8MVp1jUcFKhWbcmC6Vj2EqSlIakdQz65Q2hXaDcTiANefzSgJSyaD%2BKVVCsHXiKqRZ88NHhMq2AHaGbUyRLghaJpy%2F73F42kjFTR1kvF3tjeAy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175738e923ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Lessley-CL.gif
200 OK 12 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Lessley-CL.gif
IP
File type GIF image data, version 89a, 488 x 800\012- data
Size 12 MB (11530257 bytes)
Hash 6a91acf53b5cdb3e8417d02a8afe5009
4e12039a50f718a70a438b101decb68d1f54b2ca
6abad3b66ebb898ac6760bc54402ecef1ba6be43372e5a1e8398db7d64083802
GET /2022/06/29/ML/skin/Lessley-CL.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 11530257
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:50:44 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RfH7ofJjNr47ZUBbrF%2BUevpHWbE5nZh40tjt3aJ8mG4drn5yg3AvBWl73GDgQ1VGQNkecZIEy6kupcC5aoxh4whvQocTUCWv%2BlBEHDcdy11noe0RRurFoMgnwCRLmp7%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175738e723ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Silvana-Cl.gif
200 OK 12 MB URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Silvana-Cl.gif
IP
File type GIF image data, version 89a, 490 x 800\012- data
Size 12 MB (12054027 bytes)
Hash 28ce737056a7fd8cc1420b745af04519
d2441b9a627df165f9a188601f9ec5d8b95ef9ef
ea4b7f1bbf96c9da8b1631759d7a40d4a7909ce05614610eb74a193a75189fac
GET /2022/06/29/ML/skin/Silvana-Cl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 12054027
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:11 GMT
last-modified: Wed, 29 Jun 2022 01:50:28 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78434
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eA8vSxGdxr56U8m5ttMgJl5E5khEZMxeT6mrNlt%2BUuhyCkYBllDIyxP8%2FnY4TAct%2Fb9niQ6RLAzkPf4JG0S%2FCIv7PuyAkSX6Wt6Po%2FWl4AlhCuPAgefYJo8wJusatcCE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175738e223ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:24 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/15/2021 21:49:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 2729ae8f2fc6c761bdc17d91cc795f58
cdn-cache: HIT
cf-cache-status: HIT
age: 16007878
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 776b175659740b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
site-assets.fontawesome.com/releases/v6.1.1/css/all.css
200 OK 0 B URL HTTP/2 site-assets.fontawesome.com/releases/v6.1.1/css/all.css
IP
GET /releases/v6.1.1/css/all.css HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:24 GMT
content-type: text/css
x-amz-id-2: 332zxxLyeOA0bVHaDihkoNN8z15TpqoPHwlgSqo0+JYF9Eb1EbFs+dM6zZXyMDQJzxobqXmUSog=
x-amz-request-id: DBBNDRR8JR1BQ6BC
last-modified: Tue, 22 Mar 2022 15:39:41 GMT
etag: W/"325672b036bab9b57f6873aed5eccc43"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 22579049
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b17565d91b4f1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Teko:wght@300;400;500;600;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Teko:wght@300;400;500;600;700&display=swap
IP
GET /css2?family=Teko:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 04:45:24 GMT
date: Fri, 09 Dec 2022 04:45:24 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rawcdn.githack.com/AlexHostX/all.asset/c9f3ddecc56e688f8660a2d31a5beea4909fa5b9/alex-facebook.css
200 OK 0 B URL HTTP/2 rawcdn.githack.com/AlexHostX/all.asset/c9f3ddecc56e688f8660a2d31a5beea4909fa5b9/alex-facebook.css
IP
GET /AlexHostX/all.asset/c9f3ddecc56e688f8660a2d31a5beea4909fa5b9/alex-facebook.css HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:24 GMT
content-type: text/css; charset=utf-8
etag: W/"0a8f3f8981d9c9102640cd89134620b5b03a473db8c3d339e31ddde5838eb64c"
x-content-type-options: nosniff
x-github-request-id: 832E:903D:7B4DA:BC658:620D6C7C
via: 1.1 varnish
x-served-by: cache-bma1669-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1645046909.966790,VS0,VE227
vary: Authorization,Accept-Encoding,Origin
x-fastly-request-id: 0f679fd790b6e4a63f1b2d3444a267d4c630685c
source-age: 0
expires: Sat, 05 Aug 2023 06:37:02 GMT
cache-control: max-age=31536000, public, immutable
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: STALE
cf-cache-status: HIT
age: 8640675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EIq3pqJAXZvLpbzIfqwQyRZd2qqHTAtR0es4sCxpt3dSb%2F9TKwLL%2BNIag0qcknB5Q%2BLTv5ZRQsTw5MmjuX4VtOpWOJp1%2F9eBhkbxCvvE2aalQyFbLsZDli45Q8ibXe%2BqBEOUZhQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776b17571efcdcbb-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/EsmeCC.gif
200 OK 0 B URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/EsmeCC.gif
IP
GET /2022/06/29/ML/skin/EsmeCC.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 12807965
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:11 GMT
last-modified: Wed, 29 Jun 2022 01:50:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78434
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wasSSAU%2FivJfAXT6Sf%2BcMAe9pf%2Bflo3QQ89uksh0l0h%2BSs3c1cnIixf8ytdr3AZItl9bcaYfwpU4lWM4tUl4Jq2QLZ2Q%2BJMFakGap0dBw4pYkIvwHC8tkp62B64Yqdqb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175738ea23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Granger-Legend.gif
200 OK 0 B URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Granger-Legend.gif
IP
GET /2022/06/29/ML/skin/Granger-Legend.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 14271962
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:26 GMT
last-modified: Wed, 29 Jun 2022 01:51:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78419
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oa5W7UiqqwC3Ji4IiHMThdCCXiOeB%2F%2BT2jYeyAhDqm0EGxWulxFcEN%2Fya5VxUgH%2FnLzmJt0QW0ixckm0W0XMMhY0IHYkg%2FqGp8Gj7OS%2B7KMDE1KmnMvwpfRUAZ3ZLYPA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757590c23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/Phasracl.gif
200 OK 0 B URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/Phasracl.gif
IP
GET /2022/06/29/ML/skin/Phasracl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 11995193
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:55:26 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334586
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cuB2kbu3ATPrpVy4I8ut0B8feEzMLtwoOBO%2BlC9AsypcIjqODboxBur9BOHPODdGMAXwS8oK3ZiauTFEIPCBpPil0xr1%2BV66%2FLkgExKJViGWlKYH2yqu0sKMXure2W5w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757592d23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/NanaCL.gif
200 OK 0 B URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/NanaCL.gif
IP
GET /2022/06/29/ML/skin/NanaCL.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 12187151
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:56 GMT
last-modified: Wed, 29 Jun 2022 01:50:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UkFSYYZ0KMliHXm7NzFvG0rZpNHUDHzeNR57Y4SS9S53JlBD5QbbNmzIwJMWBWLdq1lcs7mkTsDExyGYEzVgD6RZAFx9Oi2X2JSLhXCwHqa5R%2FBICnhxqzI%2Bu0q%2B2a0S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175738e523ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rawcdn.githack.com/AlexHostX/all.asset/3ddd40ca064d997b6655739e7a0e8a65acc106e8/alex-vikontakte.css
200 OK 0 B URL HTTP/2 rawcdn.githack.com/AlexHostX/all.asset/3ddd40ca064d997b6655739e7a0e8a65acc106e8/alex-vikontakte.css
IP
GET /AlexHostX/all.asset/3ddd40ca064d997b6655739e7a0e8a65acc106e8/alex-vikontakte.css HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: text/css; charset=utf-8
etag: W/"33998733f6a9eb8b3c332b13955bd762a11ec93754237a496b5a9c93b1186a86"
x-content-type-options: nosniff
x-github-request-id: 0C9C:0322:415BB5:45E796:620D62BA
via: 1.1 varnish
x-served-by: cache-bma1664-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1645044411.853607,VS0,VE197
vary: Authorization,Accept-Encoding,Origin
x-fastly-request-id: d01e9fa770a852a5d82f55f2184290f3448a8b5a
source-age: 0
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: STALE
cf-cache-status: HIT
age: 8640675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hKDjC0DobJ47pcxtD3AtzpCNOBby2F0gD5Ej3EtK%2B5gPD7eL%2FUUmKuykWFlbnySjvkPpoBSId9on%2BVcd7Lbpp6bADiy%2FWfJs0NovXH6OuN69p%2FCbjgeF0baiWS3AygLgcv4gTLQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776b17572f00dcbb-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/zilongCl.gif
200 OK 0 B URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/zilongCl.gif
IP
GET /2022/06/29/ML/skin/zilongCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 13225542
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:11 GMT
last-modified: Wed, 29 Jun 2022 01:50:36 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78434
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uYVjN94Gc4Vcgd33HUObvNRneP51tlcxjkPdsBI3EKGXWuIllbIrD%2Flr50Bont0KjAheyZhSs78BvWfeDNhN4oTJsSAsy%2FhmJLsYZVCY3iZWO7XZDmzYHJPHA4fz6brc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175738e423ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rawcdn.githack.com/AlexHostX/all.asset/1591ba04a57c11f4b18d2ebb39e03e4a81715c83/alex-google.css
200 OK 0 B URL HTTP/2 rawcdn.githack.com/AlexHostX/all.asset/1591ba04a57c11f4b18d2ebb39e03e4a81715c83/alex-google.css
IP
GET /AlexHostX/all.asset/1591ba04a57c11f4b18d2ebb39e03e4a81715c83/alex-google.css HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:24 GMT
content-type: text/css; charset=utf-8
etag: W/"7652d432e77389d2064f55511cc6b91d5be6c83a7c4a508c20c6cd28cb795570"
x-content-type-options: nosniff
x-github-request-id: EFA0:E40D:24C4CD:27461C:62CF793D
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1657764157.161681,VS0,VE189
vary: Authorization,Accept-Encoding,Origin
x-fastly-request-id: 266b1d43065e9251ebe06940a2d911f81e6f669c
source-age: 0
expires: Sat, 05 Aug 2023 05:54:34 GMT
cache-control: max-age=31536000, public, immutable
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: STALE
cf-cache-status: HIT
age: 1918967
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NSBtZt4zQMDMMUevX5jh2QxycQdujfSLWJY75zNyaffxF12%2Fja1hoIOaEeOmBiOG1f1F%2BEYTFQhTvFmFH0dj5Fjfiph4rmREK1ypmR2ZNzhtDDjXmArrYl6yoRd0lM2smstJBTk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776b17571ef6dcbb-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rawcdn.githack.com/AlexHostX/all.asset/3fce8843edde49a48905ae1ed9cf237534e547dd/alex-moonton.css
200 OK 0 B URL HTTP/2 rawcdn.githack.com/AlexHostX/all.asset/3fce8843edde49a48905ae1ed9cf237534e547dd/alex-moonton.css
IP
GET /AlexHostX/all.asset/3fce8843edde49a48905ae1ed9cf237534e547dd/alex-moonton.css HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:24 GMT
content-type: text/css; charset=utf-8
etag: W/"df62c345015dd15b0da73d379ec88e3e896cadddc0c4d97d9b8cd19b4d2d065b"
x-content-type-options: nosniff
x-github-request-id: FB5E:8AF3:2B96F:41721:620D62BA
via: 1.1 varnish
x-served-by: cache-bma1640-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1645044411.712094,VS0,VE205
vary: Authorization,Accept-Encoding,Origin
x-fastly-request-id: b4e487a4f844fbae1c64f213ca3896a410e7e4fc
source-age: 0
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: STALE
cf-cache-status: HIT
age: 108379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uR8JHbe0K7kvSZr5Obd%2BUbmf3TlxIC5LYjTUG1TYOwl%2FzoLSpIkNs%2Bx6TGtcvBcyFO%2BioBsXsMKyMcQKaUJWfHdz%2BKubsmq8hRqOetbjqnVIujCTNZZFqvJT%2FQ0LNVNtxWAMrtM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776b17572f02dcbb-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/BenedCl.gif
200 OK 0 B URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/BenedCl.gif
IP
GET /2022/06/29/ML/skin/BenedCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 14075940
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:58 GMT
last-modified: Wed, 29 Jun 2022 01:51:20 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334584
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IbHwNdcZhd0F5v94U0HM%2FKLSFZ2o4WVMYEE%2B%2BgNUH48cHwlhD4NVgv2XnAplsTAnc%2FVYav5tyZ%2Bm%2BaQhAxxbma%2FquiP5fqTVIOThRTgxt5uGa7w91Y4Cgk04GF1hE9%2BF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757592323ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/ValeCl.gif
200 OK 0 B URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/ValeCl.gif
IP
GET /2022/06/29/ML/skin/ValeCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 12985381
cache-control: public, max-age=604800
expires: Thu, 15 Dec 2022 06:58:10 GMT
last-modified: Wed, 29 Jun 2022 01:50:30 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 78434
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lnYfXD16RHq%2F2hPWcd83oUoMM4LhdRr2Y5hueexMncVmHWggm7BrHGz%2FJYk15oa%2Bt%2B9dJYIquETl9A3FY1x8riZNBEze4IgXiwF9u2GTQlsCHVi2zV6pa64%2BQe7SHojC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b1757592e23ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/embed/pTiTQwuFizo?controls=0&loop=1&autoplay=1&fs=1&iv_load_policy=3&showinfo=0&rel=0&cc_load_policy=0&start=0&end=0&origin=https://youtubeembedcode.com
200 OK 0 B URL HTTP/2 www.youtube.com/embed/pTiTQwuFizo?controls=0&loop=1&autoplay=1&fs=1&iv_load_policy=3&showinfo=0&rel=0&cc_load_policy=0&start=0&end=0&origin=https://youtubeembedcode.com
IP
GET /embed/pTiTQwuFizo?controls=0&loop=1&autoplay=1&fs=1&iv_load_policy=3&showinfo=0&rel=0&cc_load_policy=0&start=0&end=0&origin=https://youtubeembedcode.com HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 Dec 2022 04:45:24 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=DhRAd4snJhU; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=X8B4bLwrms0; Domain=.youtube.com; Expires=Wed, 07-Jun-2023 04:45:24 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+094; expires=Sun, 08-Dec-2024 04:45:24 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
file.gifan.id/2022/06/29/ML/skin/BrodyCl.gif
200 OK 0 B URL HTTP/2 file.gifan.id/2022/06/29/ML/skin/BrodyCl.gif
IP
GET /2022/06/29/ML/skin/BrodyCl.gif HTTP/1.1
Host: file.gifan.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clicknows.mlbbclaim22free.work.gd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 04:45:25 GMT
content-type: image/gif
content-length: 12725089
cache-control: public, max-age=604800
expires: Mon, 12 Dec 2022 07:48:57 GMT
last-modified: Wed, 29 Jun 2022 01:50:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 334588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aSgO65a7eItwqy5fJuP7VjiugfyRtfNLMD6LF5au93EIRpfaKOI%2FmWiU%2BlMByQqWgWLtMLxe0Ve%2BUj2kq52oRYasIOUBj%2F58kk6fXJXKqBiXYyImLZCeVMipxLOIYVLq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776b175748f823ec-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
20.9.70.76
162.19.61.80
23.36.76.226
104.18.22.52
93.184.220.29