r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 00e304a3fc0c2f01af0e94fcefe0ca40
833969e75e5e13e823c8d97ee59a9821eb157ee3
c2b7f7ae4861f2dd16867de54c7e47d95582de77887f523841d9683a369d20a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2B7F7AE4861F2DD16867DE54C7E47D95582DE77887F523841D9683A369D20A7"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8539
Expires: Mon, 20 Mar 2023 14:51:22 GMT
Date: Mon, 20 Mar 2023 12:29:03 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ec332b81a27117ce9c16b67a5a8e4fac
b6d2afa2c859d000ad830d3d8d73f57bac6ffce2
1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9235
Expires: Mon, 20 Mar 2023 15:02:58 GMT
Date: Mon, 20 Mar 2023 12:29:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 20 Mar 2023 12:27:16 GMT
content-type: application/json
age: 107
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5285a032a285729d3e4a546310ed052d
d370c14bbc2d168cc3703bcb6b94ea0ece26e69d
a811aac1eb89de0666a7de8d3eda1dc3affa7ce5353219211a1beee1211536b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A811AAC1EB89DE0666A7DE8D3EDA1DC3AFFA7CE5353219211A1BEEE1211536B5"
Last-Modified: Mon, 20 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3022
Expires: Mon, 20 Mar 2023 13:19:25 GMT
Date: Mon, 20 Mar 2023 12:29:03 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3qzqsLArM/5NFnbUCDJk1LsUCjK38QO7/GpMCu4U0eHmjvREYrCqL6GG2HTmqzmTFT4ube3UjNvXM00dJiyPYA==
x-amz-request-id: 5ZZMMQJ8RXHNTWZ1
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 20 Mar 2023 11:58:41 GMT
age: 1822
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 12:29:03 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 20 Mar 2023 12:14:32 GMT
age: 872
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 4c195a3fc0c2abb831630cef1dcfa770
eda338de3063640556177b9db364c33193d7f6dc
c22eb0537cd79666b82fe61dd77fe9b0b3c059a4c65d405412acfc2c6800b444
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5923
Expires: Mon, 20 Mar 2023 14:07:47 GMT
Date: Mon, 20 Mar 2023 12:29:04 GMT
Connection: keep-alive
push.services.mozilla.com/
52.43.157.124101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.43.157.124:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jbnQzBIJ8opC2yvFzvOK1Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iOpI9IdEuPe5oclM8+CfWznfThE=
retti.com/http:/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7:1oXAGX:D313df0sf1GWvCzHp-vr25dDUag/0
45.56.79.23200 OK 23 kB URL HTTP/1.1 retti.com/http:/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7:1oXAGX:D313df0sf1GWvCzHp-vr25dDUag/0
IP 45.56.79.23:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (57274)
Hash 96ffe9e7103f489eb71e56cccc012e86
beb9684233109640cc35e7417b786849f7bff48e
f20e5b2d57c4f0e2e3340ba169b49ff3a08f13d9b1b4c65cdff4b0184bc273ae
Analyzer Verdict Alert fortinet Malware
GET /http:/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7:1oXAGX:D313df0sf1GWvCzHp-vr25dDUag/0 HTTP/1.1
Host: retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 20 Mar 2023 12:29:04 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close
retti.com/http%3A/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7%3A1oXAGX%3AD313df0sf1GWvCzHp-vr25dDUag/0?gp=1&js=1&uuid=1679315344.0072115161&other_args=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
45.56.79.23302 Found 0 B URL HTTP/1.1 retti.com/http%3A/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7%3A1oXAGX%3AD313df0sf1GWvCzHp-vr25dDUag/0?gp=1&js=1&uuid=1679315344.0072115161&other_args=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
IP 45.56.79.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /http%3A/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7%3A1oXAGX%3AD313df0sf1GWvCzHp-vr25dDUag/0?gp=1&js=1&uuid=1679315344.0072115161&other_args=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 HTTP/1.1
Host: retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://retti.com/http:/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7:1oXAGX:D313df0sf1GWvCzHp-vr25dDUag/0
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Mon, 20 Mar 2023 12:29:05 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.retti.com/?tm=1&subid4=1679315345.0161880000&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Get%20An%20Online%20Degree&KW4=Social%20Media%20Automation%20Marketing%20Software&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Online%20Career%20Counseling%20Programs&KW7=Dedicated%20Gaming%20Servers&KW8=Elite%20Dating%20Service&KW9=Make%20Money%20From%20Home&searchbox=0&backfill=0
referrer-policy: no-referrer
x-mtm-path: 4
x-mtm-prov: 300:0.00;308:15.85
x-mtm-rd: 0.47
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=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:1peEdN:13G3UhFkUCOuBzEmXv03q_Q5L2Q; expires=Mon, 20-Mar-2023 13:29:05 GMT; Max-Age=3600; Path=/
connection: close
www1.retti.com/?tm=1&subid4=1679315345.0161880000&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Get%20An%20Online%20Degree&KW4=Social%20Media%20Automation%20Marketing%20Software&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Online%20Career%20Counseling%20Programs&KW7=Dedicated%20Gaming%20Servers&KW8=Elite%20Dating%20Service&KW9=Make%20Money%20From%20Home&searchbox=0&backfill=0
13.248.148.254200 OK 6.2 kB URL HTTP/1.1 www1.retti.com/?tm=1&subid4=1679315345.0161880000&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Get%20An%20Online%20Degree&KW4=Social%20Media%20Automation%20Marketing%20Software&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Online%20Career%20Counseling%20Programs&KW7=Dedicated%20Gaming%20Servers&KW8=Elite%20Dating%20Service&KW9=Make%20Money%20From%20Home&searchbox=0&backfill=0
IP 13.248.148.254:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1612)
Hash fd4be885838b6a4d76634e2e086f4e46
203fab4eb7c62f7f1b253f638b13991aae9b9530
f5e2d1a7a0603dd8011831d7eb75888b9c6d5a1e7a50e31a50033b4d4d610b80
GET /?tm=1&subid4=1679315345.0161880000&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Get%20An%20Online%20Degree&KW4=Social%20Media%20Automation%20Marketing%20Software&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Online%20Career%20Counseling%20Programs&KW7=Dedicated%20Gaming%20Servers&KW8=Elite%20Dating%20Service&KW9=Make%20Money%20From%20Home&searchbox=0&backfill=0 HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 12:29:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket103
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_otAxQqoK2xIafvfNcOrxVVa/qjA6C6FfzQ29LjpzN+QzBcqiETN2nlLQL2X+PIFiiZexPRqtegHopteSHo5qzA==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: retti.com
X-Subdomain: www1
Content-Encoding: gzip
www.google.com/adsense/domains/caf.js?abp=1
216.58.207.228200 OK 54 kB URL HTTP/1.1 www.google.com/adsense/domains/caf.js?abp=1
IP 216.58.207.228:0
File type ASCII text, with very long lines (2193)
Hash 3c9809a173d46e6ad58913b372f14a2a
cf5fa26dac4a20ef118d416b799b1744a5a86337
57a14b156e10ff0e298f12b335c2c5d20336889793e8eb55db5a539fd9604386
GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Mon, 20 Mar 2023 12:29:05 GMT
Expires: Mon, 20 Mar 2023 12:29:05 GMT
Cache-Control: private, max-age=3600
ETag: "13606143512197494851"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0
c.parkingcrew.net/scripts/sale_form.js
185.53.178.30200 OK 761 B URL HTTP/1.1 c.parkingcrew.net/scripts/sale_form.js
IP 185.53.178.30:0
Hash 64f809e06446647e192fce8d1ec34e09
5b7ced07da42e205067afa88615317a277a4a82c
f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3
GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 12:29:05 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes
www1.retti.com/track.php?domain=retti.com&toggle=browserjs&uid=MTY3OTMxNTM0NS4zNTg3OmEyYzA5MDdjZmY2YzRmZmYzMTFiOTA2MDdjMjYyZDczNGRjMDYwNDc4ZjJhZmM3NjVmMDE0ZmVlZmZhNDM3ZWE6NjQxODUxOTE1Nzk1OQ%3D%3D
13.248.148.254200 OK 20 B URL HTTP/1.1 www1.retti.com/track.php?domain=retti.com&toggle=browserjs&uid=MTY3OTMxNTM0NS4zNTg3OmEyYzA5MDdjZmY2YzRmZmYzMTFiOTA2MDdjMjYyZDczNGRjMDYwNDc4ZjJhZmM3NjVmMDE0ZmVlZmZhNDM3ZWE6NjQxODUxOTE1Nzk1OQ%3D%3D
IP 13.248.148.254:0
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=retti.com&toggle=browserjs&uid=MTY3OTMxNTM0NS4zNTg3OmEyYzA5MDdjZmY2YzRmZmYzMTFiOTA2MDdjMjYyZDczNGRjMDYwNDc4ZjJhZmM3NjVmMDE0ZmVlZmZhNDM3ZWE6NjQxODUxOTE1Nzk1OQ%3D%3D HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/?tm=1&subid4=1679315345.0161880000&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Get%20An%20Online%20Degree&KW4=Social%20Media%20Automation%20Marketing%20Software&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Online%20Career%20Counseling%20Programs&KW7=Dedicated%20Gaming%20Servers&KW8=Elite%20Dating%20Service&KW9=Make%20Money%20From%20Home&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 12:29:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3295
Expires: Mon, 20 Mar 2023 13:24:00 GMT
Date: Mon, 20 Mar 2023 12:29:05 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3295
Expires: Mon, 20 Mar 2023 13:24:00 GMT
Date: Mon, 20 Mar 2023 12:29:05 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3295
Expires: Mon, 20 Mar 2023 13:24:00 GMT
Date: Mon, 20 Mar 2023 12:29:05 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3295
Expires: Mon, 20 Mar 2023 13:24:00 GMT
Date: Mon, 20 Mar 2023 12:29:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1533684819dcbf9e77684c19eb86465
489f8f036efd23ce36085af127af7d6c794fe00b
9154a471013bd0972fad93ea4eeaf4b23f66dd1534e0d9cc302263aca0f94bd1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12424
x-amzn-requestid: 64a89fbe-4ac0-4059-a481-37c30ae36928
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eOuEG2oAMF1Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414dd91-0492160f3e8196a23fc53eda;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:21 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: gzTYtxwUI2nKJ--UVjLZS9_wctY0mnZMGtIw8-T_FvkQFoaBe_K5pA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 02:06:31 GMT
age: 37354
etag: "489f8f036efd23ce36085af127af7d6c794fe00b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0c284f4-6dbe-4d54-839d-1747301852b2.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0c284f4-6dbe-4d54-839d-1747301852b2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea47feee1895f6c6cb45f906381625e2
46da69d0b7dcfa6a0a0a021a963bccdb1070e297
29c5e7ec1337abf050e6d2cd566e0dedbd817ac56a57d4caaa6f92e9c922ded4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0c284f4-6dbe-4d54-839d-1747301852b2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5939
x-amzn-requestid: 2631497a-f7d5-4bab-b8f9-afd4251db4ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xdWH0ooAMF2cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641562bb-4e3dff50168417af6eff3817;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:05:31 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: fT_6nC6BmcJLn8tuHzDuD2zxN0tsTVpMPS2xDtRtcsp6k-Po7rWBjQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 1d000d0dfe9d69b4983f619fdc5499d6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 06:30:54 GMT
age: 21491
etag: "46da69d0b7dcfa6a0a0a021a963bccdb1070e297"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78453ba98b72eff3879ef163b59c86ed
80519bb3726ee1f9f211344cd433cefaed3a7f2e
61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bka10YWXvoKBRkwgvJNMzm1SSv_J1USzdugO9lPduHxe2uYFYkXh4w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 04:25:44 GMT
age: 29001
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 302595cc68fe8cf12121d0f652b3194d
e5532a3fed552246e8a63ea2ba75e174273a7b9f
6ca3599a9af06f51d4dc205d4ebd8f7f8b38c54864b6b478eac8c0d1adbc97c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7695
x-amzn-requestid: 1009077b-14aa-42e5-86f1-de94b8b2aba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDETIHf8oAMFxEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641780e0-07bbb0376f1c1941731e00ba;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: v9Nl9e72FJH0vW19kOEzsw_ibM-64AdrJlcg7sFRiOWKDDZoHJYbjA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 21:49:05 GMT
age: 52800
etag: "e5532a3fed552246e8a63ea2ba75e174273a7b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e5aa79770d71507827e79149031b5cf
338ee74f53fac2b19a90981bc4b02a3c3722a1fa
81df6f2312df6e488ae91c172ecf872d694497ffe80500f71eb97e6c06ff5f5f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7249
x-amzn-requestid: dfaf4924-b8c3-4b6b-a079-7c3903fdf4fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDDVjGJyIAMFS9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64177f56-6379351b215dc2d9638de9ea;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:32:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 6SrsIy07rGzqwuej2lpFFp0PdFnuWcen4ItGcBrNd_AXSWlU1vObSg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 21:46:54 GMT
age: 52931
etag: "338ee74f53fac2b19a90981bc4b02a3c3722a1fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a940b362660fdee25faaa51e08c439b
85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c
18b99e3e890fdc959421c895ce343b8b3ed88819c83fa0009823e8ded23458f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8195
x-amzn-requestid: c6844a50-a6b2-4ef4-ad28-f1a0fbcec14f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDFESEDGoAMFQ8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6417821b-22fa560d4b7811c233fe07fa;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:43:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: WZ5MqPZ-MEjDt3N53EIx1XrerDmUkyvK-5FUXAmI29GXlGe6AaPqEg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 219e8f088c8c2a564bdacafe44be620a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 22:07:00 GMT
age: 51725
etag: "85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash e8fc65c8ed6ea66df6d6f044d7636fe2
da5b32e7c3fb8dddbd1466e4733cab6e35a66f8c
733e51b02cac5aca153e462118e12f623b0be034bb5488eb021c09a4b41744dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 12:29:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
54.230.245.8200 OK 11 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP 54.230.245.8:0
File type PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Hash 0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Mon, 20 Mar 2023 01:22:05 GMT
Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT
Accept-Ranges: bytes
ETag: "62b4441b-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Wqn-UM4_NrKLvN1YdvhaMwqKgpc1Urx10VV9jgMiNJTJRPtGoDpBVA==
Age: 40020
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8866119b294e41f9d0e4bd2ebf685e6a
208c6fdf3cb60272510131c81ed89a52c4392ee5
25d8952454a5ce1662a4b38bc478f6b8ab4945233e96a1293b9857dfe2ab184e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 12:29:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www1.retti.com/favicon.ico
13.248.148.254200 OK 0 B URL HTTP/1.1 www1.retti.com/favicon.ico
IP 13.248.148.254:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/?tm=1&subid4=1679315345.0161880000&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Get%20An%20Online%20Degree&KW4=Social%20Media%20Automation%20Marketing%20Software&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Online%20Career%20Counseling%20Programs&KW7=Dedicated%20Gaming%20Servers&KW8=Elite%20Dating%20Service&KW9=Make%20Money%20From%20Home&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 12:29:05 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
partner.googleadservices.com/gampad/cookie.js?domain=www1.retti.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie
216.58.207.226200 OK 240 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www1.retti.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie
IP 216.58.207.226:0
File type ASCII text, with very long lines (358), with no line terminators
Hash d21e23789b47874260267bc5b9f9b071
b7d8b06c8666920c97c64f41cd247386f37631a2
97cbe248495f1405bb1cb3e2f31b075d1cf8e79f8100aa22e34d5e9922c5b368
GET /gampad/cookie.js?domain=www1.retti.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www1.retti.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 20 Mar 2023 12:29:05 GMT
server: cafe
cache-control: private
content-length: 240
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2C000003%2C001587%2Cbucket103&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fwww1.retti.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2NDE4NTE5MTU3OTQwfHx8MTY3OTMxNTM0NS4zNzA0fDEyYmQzMmY5YmQ5M2JjZDA0MGI0ZTRiZGNiMjJiZGVmYjE2ZGUzMWZ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfGV5Sm9iQ0k2SW1WdUluMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qYzVNekUxTXpRMUxqQXhOakU0T0RBd01EQWlmUT09fGFhYTBkNTc4ZTI4ZjIwYjJjMjdiYmQ2OGExZjRlNzIzMjQ5ZjU1MTl8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&terms=Social%20Media%20Automation%20Marketing%20Software%2CSocial%20Media%20Automation%20Marketing%20Software%2CGet%20An%20Online%20Degree%2CSocial%20Media%20Automation%20Marketing%20Software%2CLowest%20Car%20Insurance%20Rates%2COnline%20Career%20Counseling%20Programs%2CDedicated%20Gaming%20Servers%2CElite%20Dating%20Service%2CMake%20Money%20From%20Home&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2514429714757505&oe=UTF-8&ie=UTF-8&fexp=21404&format=r9%7Cs&nocache=341679315346060&num=0&output=afd_ads&domain_name=www1.retti.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1679315346062&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=797&frm=0&cl=516558706&uio=--&cont=tc&jsid=caf&jsv=516558706&rurl=http%3A%2F%2Fwww1.retti.com%2F%3Ftm%3D1%26subid4%3D1679315345.0161880000%26KW1%3DSocial%2520Media%2520Automation%2520Marketing%2520Software%26KW2%3DSocial%2520Media%2520Automation%2520Marketing%2520Software%26KW3%3DGet%2520An%2520Online%2520Degree%26KW4%3DSocial%2520Media%2520Automation%2520Marketing%2520Software%26KW5%3DLowest%2520Car%2520Insurance%2520Rates%26KW6%3DOnline%2520Career%2520Counseling%2520Programs%26KW7%3DDedicated%2520Gaming%2520Servers%26KW8%3DElite%2520Dating%2520Service%26KW9%3DMake%2520Money%2520From%2520Home%26searchbox%3D0%26backfill%3D0&adbw=master-1%3A530
216.58.207.228200 OK 3.3 kB URL HTTP/2 www.google.com/afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2C000003%2C001587%2Cbucket103&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fwww1.retti.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2NDE4NTE5MTU3OTQwfHx8MTY3OTMxNTM0NS4zNzA0fDEyYmQzMmY5YmQ5M2JjZDA0MGI0ZTRiZGNiMjJiZGVmYjE2ZGUzMWZ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfGV5Sm9iQ0k2SW1WdUluMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qYzVNekUxTXpRMUxqQXhOakU0T0RBd01EQWlmUT09fGFhYTBkNTc4ZTI4ZjIwYjJjMjdiYmQ2OGExZjRlNzIzMjQ5ZjU1MTl8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&terms=Social%20Media%20Automation%20Marketing%20Software%2CSocial%20Media%20Automation%20Marketing%20Software%2CGet%20An%20Online%20Degree%2CSocial%20Media%20Automation%20Marketing%20Software%2CLowest%20Car%20Insurance%20Rates%2COnline%20Career%20Counseling%20Programs%2CDedicated%20Gaming%20Servers%2CElite%20Dating%20Service%2CMake%20Money%20From%20Home&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2514429714757505&oe=UTF-8&ie=UTF-8&fexp=21404&format=r9%7Cs&nocache=341679315346060&num=0&output=afd_ads&domain_name=www1.retti.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1679315346062&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=797&frm=0&cl=516558706&uio=--&cont=tc&jsid=caf&jsv=516558706&rurl=http%3A%2F%2Fwww1.retti.com%2F%3Ftm%3D1%26subid4%3D1679315345.0161880000%26KW1%3DSocial%2520Media%2520Automation%2520Marketing%2520Software%26KW2%3DSocial%2520Media%2520Automation%2520Marketing%2520Software%26KW3%3DGet%2520An%2520Online%2520Degree%26KW4%3DSocial%2520Media%2520Automation%2520Marketing%2520Software%26KW5%3DLowest%2520Car%2520Insurance%2520Rates%26KW6%3DOnline%2520Career%2520Counseling%2520Programs%26KW7%3DDedicated%2520Gaming%2520Servers%26KW8%3DElite%2520Dating%2520Service%26KW9%3DMake%2520Money%2520From%2520Home%26searchbox%3D0%26backfill%3D0&adbw=master-1%3A530
IP 216.58.207.228:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9577)
Hash 200faf6ec41a239957d3d6b7675611fb
ce4ea250bfc3cb6f4d817e445fec376919825903
f46ac2e574f535aed04913c691699c46e5ae8f6c92890eca111962cb5581298c
GET /afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2C000003%2C001587%2Cbucket103&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fwww1.retti.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2NDE4NTE5MTU3OTQwfHx8MTY3OTMxNTM0NS4zNzA0fDEyYmQzMmY5YmQ5M2JjZDA0MGI0ZTRiZGNiMjJiZGVmYjE2ZGUzMWZ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfGV5Sm9iQ0k2SW1WdUluMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qYzVNekUxTXpRMUxqQXhOakU0T0RBd01EQWlmUT09fGFhYTBkNTc4ZTI4ZjIwYjJjMjdiYmQ2OGExZjRlNzIzMjQ5ZjU1MTl8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&terms=Social%20Media%20Automation%20Marketing%20Software%2CSocial%20Media%20Automation%20Marketing%20Software%2CGet%20An%20Online%20Degree%2CSocial%20Media%20Automation%20Marketing%20Software%2CLowest%20Car%20Insurance%20Rates%2COnline%20Career%20Counseling%20Programs%2CDedicated%20Gaming%20Servers%2CElite%20Dating%20Service%2CMake%20Money%20From%20Home&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2514429714757505&oe=UTF-8&ie=UTF-8&fexp=21404&format=r9%7Cs&nocache=341679315346060&num=0&output=afd_ads&domain_name=www1.retti.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1679315346062&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=797&frm=0&cl=516558706&uio=--&cont=tc&jsid=caf&jsv=516558706&rurl=http%3A%2F%2Fwww1.retti.com%2F%3Ftm%3D1%26subid4%3D1679315345.0161880000%26KW1%3DSocial%2520Media%2520Automation%2520Marketing%2520Software%26KW2%3DSocial%2520Media%2520Automation%2520Marketing%2520Software%26KW3%3DGet%2520An%2520Online%2520Degree%26KW4%3DSocial%2520Media%2520Automation%2520Marketing%2520Software%26KW5%3DLowest%2520Car%2520Insurance%2520Rates%26KW6%3DOnline%2520Career%2520Counseling%2520Programs%26KW7%3DDedicated%2520Gaming%2520Servers%26KW8%3DElite%2520Dating%2520Service%26KW9%3DMake%2520Money%2520From%2520Home%26searchbox%3D0%26backfill%3D0&adbw=master-1%3A530 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www1.retti.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Mon, 20 Mar 2023 12:29:05 GMT
expires: Mon, 20 Mar 2023 12:29:05 GMT
cache-control: private, max-age=3600
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3323
x-xss-protection: 0
set-cookie: CONSENT=PENDING+700; expires=Wed, 19-Mar-2025 12:29:05 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8866119b294e41f9d0e4bd2ebf685e6a
208c6fdf3cb60272510131c81ed89a52c4392ee5
25d8952454a5ce1662a4b38bc478f6b8ab4945233e96a1293b9857dfe2ab184e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 12:29:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash d2b91b87a3060a36d0002f6338924521
b216a0ae0e118f942207ae6c51a5309393fe79f4
835446923abce8bde27c74317de5388462f43f7cbf93293a15891a2a2554e406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 12:29:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www1.retti.com/ls.php?t=64185191&token=aaa0d578e28f20b2c27bbd68a1f4e723249f5519
13.248.148.254201 Created 16 B URL HTTP/1.1 www1.retti.com/ls.php?t=64185191&token=aaa0d578e28f20b2c27bbd68a1f4e723249f5519
IP 13.248.148.254:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
GET /ls.php?t=64185191&token=aaa0d578e28f20b2c27bbd68a1f4e723249f5519 HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/?tm=1&subid4=1679315345.0161880000&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Get%20An%20Online%20Degree&KW4=Social%20Media%20Automation%20Marketing%20Software&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Online%20Career%20Counseling%20Programs&KW7=Dedicated%20Gaming%20Servers&KW8=Elite%20Dating%20Service&KW9=Make%20Money%20From%20Home&searchbox=0&backfill=0
HTTP/1.1 201 Created
Date: Mon, 20 Mar 2023 12:29:05 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 64185191705dda178e3f33db
Charset: utf-8
Access-Control-Allow-Origin:
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_c7nBPMvpTfJFbms1O0kJvRoXrbet3dgsl9ZXCy0uMeklOO92iQR/fVwQoyOm6GpQieXN62j6kvlvFO7t/xhzpw==
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 934dffe86562e18d6b226867f9c530a0
3ed5d88373639e94a066afd2ba76e68ed66af07d
6b213829600abe87f729b89cfe8b22875588e07adc5c0f0d3d26aec0f7308f57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 12:29:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 934dffe86562e18d6b226867f9c530a0
3ed5d88373639e94a066afd2ba76e68ed66af07d
6b213829600abe87f729b89cfe8b22875588e07adc5c0f0d3d26aec0f7308f57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 12:29:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
142.250.74.129200 OK 270 B URL HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP 142.250.74.129:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Hash 5100391430a00e10ce60aa159f525b5c
231a4492d73b225f441b1e9028dc33c89862e498
52b1432a6e3002e41ed1d8f4c84b258fdc4c6dac863e3c0e5c06360c81be6067
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sun, 19 Mar 2023 18:05:40 GMT
expires: Mon, 20 Mar 2023 17:05:40 GMT
cache-control: public, max-age=82800
age: 66206
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
142.250.74.129200 OK 174 B URL HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP 142.250.74.129:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 4de8b85c8915995b571bde50e231be7c
29c226ca7b9cbe1d44e5480ce95bbb42727b2d99
2ec9168c4507546748c5f400f5030031f0eb06f2aed8deaa11362c395bff4f7a
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sun, 19 Mar 2023 17:43:10 GMT
expires: Mon, 20 Mar 2023 16:43:10 GMT
cache-control: public, max-age=82800
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 67556
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www1.retti.com/track.php?domain=retti.com&caf=1&toggle=answercheck&answer=yes&uid=MTY3OTMxNTM0NS4zNTg3OmEyYzA5MDdjZmY2YzRmZmYzMTFiOTA2MDdjMjYyZDczNGRjMDYwNDc4ZjJhZmM3NjVmMDE0ZmVlZmZhNDM3ZWE6NjQxODUxOTE1Nzk1OQ%3D%3D
13.248.148.254200 OK 20 B URL HTTP/1.1 www1.retti.com/track.php?domain=retti.com&caf=1&toggle=answercheck&answer=yes&uid=MTY3OTMxNTM0NS4zNTg3OmEyYzA5MDdjZmY2YzRmZmYzMTFiOTA2MDdjMjYyZDczNGRjMDYwNDc4ZjJhZmM3NjVmMDE0ZmVlZmZhNDM3ZWE6NjQxODUxOTE1Nzk1OQ%3D%3D
IP 13.248.148.254:0
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=retti.com&caf=1&toggle=answercheck&answer=yes&uid=MTY3OTMxNTM0NS4zNTg3OmEyYzA5MDdjZmY2YzRmZmYzMTFiOTA2MDdjMjYyZDczNGRjMDYwNDc4ZjJhZmM3NjVmMDE0ZmVlZmZhNDM3ZWE6NjQxODUxOTE1Nzk1OQ%3D%3D HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/?tm=1&subid4=1679315345.0161880000&KW1=Social%20Media%20Automation%20Marketing%20Software&KW2=Social%20Media%20Automation%20Marketing%20Software&KW3=Get%20An%20Online%20Degree&KW4=Social%20Media%20Automation%20Marketing%20Software&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Online%20Career%20Counseling%20Programs&KW7=Dedicated%20Gaming%20Servers&KW8=Elite%20Dating%20Service&KW9=Make%20Money%20From%20Home&searchbox=0&backfill=0
Cookie: __gsas=ID=eef1068bc10d378a:T=1679315345:S=ALNI_MZ7MuOaXsAH_4oLtSJyTguUQowwwg
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 12:29:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: answercheck
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 934dffe86562e18d6b226867f9c530a0
3ed5d88373639e94a066afd2ba76e68ed66af07d
6b213829600abe87f729b89cfe8b22875588e07adc5c0f0d3d26aec0f7308f57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 12:29:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/adsense/domains/caf.js
216.58.207.228200 OK 0 B URL HTTP/2 www.google.com/adsense/domains/caf.js
IP 216.58.207.228:0
GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 20 Mar 2023 12:29:05 GMT
expires: Mon, 20 Mar 2023 12:29:05 GMT
cache-control: private, max-age=3600
etag: "4584531649146069808"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2