howpeopleheal.net/609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts
301 Moved Permanently 0 B URL HTTP/1.1 howpeopleheal.net/609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts HTTP/1.1
Host: howpeopleheal.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 17:34:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 30 Jan 2023 18:34:49 GMT
Location: https://howpeopleheal.net/609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qn%2B8ZLKIkh%2FUFNDYHiE2CGaQ7AQNTPqx7%2BmKQ3LZkgPsxm14wJHeKJx5dwd4%2F7njSahsjphitvmd5wUNPQbrepc8xybfH2bRzGKQCPWvi8VsXfHkIcPteYstKnGmcOykI6lXQg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791bf5e89c1db506-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2204
Expires: Mon, 30 Jan 2023 18:11:33 GMT
Date: Mon, 30 Jan 2023 17:34:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2795
Expires: Mon, 30 Jan 2023 18:21:24 GMT
Date: Mon, 30 Jan 2023 17:34:49 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 16:43:12 GMT
content-type: application/json
age: 3098
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4613
Expires: Mon, 30 Jan 2023 18:51:43 GMT
Date: Mon, 30 Jan 2023 17:34:50 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: FWI12WXtB0GuvWzKz2mV2VS1NrA6nZNFZ4FQ7N9l0fiyywbrEMUAZVaavt+LeNaNtYKtmIKkvCg=
x-amz-request-id: 2QTGZGFZZCKNKZ81
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 17:21:53 GMT
age: 777
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 17:34:50 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash b0a03e28819e3ee1e55f6d45aeec40c1
acb7ea1c52216d4ab9cc4129714ec32a59fcdb66
6d4c05c60057a834b0d4b69680a1674487877b48b82dbe0cd7a1d470d6c646ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=150264
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:50 GMT
Etag: "63d7a7b2-116"
Expires: Wed, 01 Feb 2023 11:19:14 GMT
Last-Modified: Mon, 30 Jan 2023 11:19:14 GMT
Server: nginx
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash b0a03e28819e3ee1e55f6d45aeec40c1
acb7ea1c52216d4ab9cc4129714ec32a59fcdb66
6d4c05c60057a834b0d4b69680a1674487877b48b82dbe0cd7a1d470d6c646ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=150264
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:50 GMT
Etag: "63d7a7b2-116"
Expires: Wed, 01 Feb 2023 11:19:14 GMT
Last-Modified: Mon, 30 Jan 2023 11:19:14 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278
cdn.zx-adnet.com/adx/brmsl_19102402.js
200 OK 20 kB URL HTTP/2 cdn.zx-adnet.com/adx/brmsl_19102402.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (62756), with CRLF line terminators
Hash b53d9e77008052442e37608e055e5965
be34a7e2540a8f70884f5b40ed26a438ed1db87c
b15503ab906b0e9cc28760a734146b38966af180c459f721f9be73fdccf1ece6
GET /adx/brmsl_19102402.js HTTP/1.1
Host: cdn.zx-adnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=3600,public
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "9f87dc41b33ca8bb6de402d70f1dcc52209d835dea394be1972b00009ae4a10f-br"
last-modified: Tue, 17 Jan 2023 17:33:04 GMT
strict-transport-security: max-age=31556926
x-robots-tag: noindex, nofollow, noarchive
accept-ranges: bytes
date: Mon, 30 Jan 2023 17:34:50 GMT
x-served-by: cache-bma1633-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675100091.524597,VS0,VE6
vary: accept-language, x-country-code, x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 19711
X-Firefox-Spdy: h2
cst.wpu.sh/static/adManager.js
301 Moved Permanently 169 B URL HTTP/2 cst.wpu.sh/static/adManager.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 84855c13836b389d5ec7cfd4c9266173
1cf3056ff23c4176fd7ca9816a000ed461d6d323
502083c916ae481cdd413b8d93315300653df5fb3dcc5770c01991de19977eae
GET /static/adManager.js HTTP/1.1
Host: cst.wpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx/1.18.0
date: Mon, 30 Jan 2023 17:34:50 GMT
content-type: text/html
content-length: 169
location: https://cst.cstwpush.com/static/adManager.js
X-Firefox-Spdy: h2
cdn.zx-adnet.com/adx/abs.js?0.28724917559504215
200 OK 107 B URL HTTP/2 cdn.zx-adnet.com/adx/abs.js?0.28724917559504215
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 995d24c84695038f980f20f3d86c74aa
d49b95b1048f6c0cf8bcccfb2e06ab7fe7c2568f
b47684c486c10c6657559c85249605cbc686296e8efbaa336de326b1d3623849
GET /adx/abs.js?0.28724917559504215 HTTP/1.1
Host: cdn.zx-adnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600,public
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "5fef2687ef3b38d2357073d43abb64a2f46b34fce9295b7d515ee95b7d79cfdb-br"
last-modified: Tue, 17 Jan 2023 17:33:04 GMT
strict-transport-security: max-age=31556926
x-robots-tag: noindex, nofollow, noarchive
accept-ranges: bytes
date: Mon, 30 Jan 2023 17:34:50 GMT
x-served-by: cache-bma1633-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675100091.596571,VS0,VE65
vary: accept-language, x-country-code, x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 107
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash fe95b48e33213cb9c8e5b8dc839b2c39
7519be57c0180ddb6918ae613337d4c6041e2bfd
34e05996bd07ce4e5b1f363173922047d59236741071d791e7a49a4350749720
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=91919
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:50 GMT
Etag: "63d6c3c9-116"
Expires: Tue, 31 Jan 2023 19:06:49 GMT
Last-Modified: Sun, 29 Jan 2023 19:06:49 GMT
Server: nginx
Content-Length: 278
cdn.zx-adnet.com/adx/brmsl_19102402.js?0.7566408376359417
200 OK 20 kB URL HTTP/2 cdn.zx-adnet.com/adx/brmsl_19102402.js?0.7566408376359417
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (62756), with CRLF line terminators
Hash b53d9e77008052442e37608e055e5965
be34a7e2540a8f70884f5b40ed26a438ed1db87c
b15503ab906b0e9cc28760a734146b38966af180c459f721f9be73fdccf1ece6
GET /adx/brmsl_19102402.js?0.7566408376359417 HTTP/1.1
Host: cdn.zx-adnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600,public
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "9f87dc41b33ca8bb6de402d70f1dcc52209d835dea394be1972b00009ae4a10f-br"
last-modified: Tue, 17 Jan 2023 17:33:04 GMT
strict-transport-security: max-age=31556926
x-robots-tag: noindex, nofollow, noarchive
accept-ranges: bytes
date: Mon, 30 Jan 2023 17:34:50 GMT
x-served-by: cache-bma1633-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675100091.596302,VS0,VE79
vary: accept-language, x-country-code, x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 19711
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/yi8z0fmAKL8
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/yi8z0fmAKL8
IP
Hash 9b8588ba58711e7814ee48cf0d404c4e
3dce4e0d2cfc85238bcb50e73887a2078e270f77
68b1ebdd96306f36e6deafe2726d21a0011035aa7ba2b77bcb780c625ed676c6
POST /s/gts1d4/yi8z0fmAKL8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:50 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 16:41:41 GMT
age: 3189
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash fe95b48e33213cb9c8e5b8dc839b2c39
7519be57c0180ddb6918ae613337d4c6041e2bfd
34e05996bd07ce4e5b1f363173922047d59236741071d791e7a49a4350749720
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=91919
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:50 GMT
Etag: "63d6c3c9-116"
Expires: Tue, 31 Jan 2023 19:06:49 GMT
Last-Modified: Sun, 29 Jan 2023 19:06:49 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 1.0 kB IP
ASN #20940 Akamai International B.V.
Hash 0038ac1a47e55f4c8a107f65f0bc930b
c5bb06a166eb16e48652d18b496fbc1fef587c90
8ce3af1bad30208d0cf0bb4e6c39179c4ebfd70fb5d61ac6d03211053224627b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16478
Expires: Mon, 30 Jan 2023 22:09:28 GMT
Date: Mon, 30 Jan 2023 17:34:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash ac76de4cf388d2354bafbf6742323867
addb6da20838ab09fff190b1141cb0704b851cc3
c091eff2434fab97a511e903b0909e1381426c59bf335dc316951ed4ffd39835
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6339
Cache-Control: max-age=132821
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:50 GMT
Etag: "63d74acd-118"
Expires: Wed, 01 Feb 2023 06:28:31 GMT
Last-Modified: Mon, 30 Jan 2023 04:42:53 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 645374bb2c193515396331d2ec3dfbaa
07a4e99726c9f7c6b11e5aa8f903ad169656efc6
e5e6039378304f0ed4f564cb97169fea22a98f77e70c95f24999a0aec006c789
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5E6039378304F0ED4F564CB97169FEA22A98F77E70C95F24999A0AEC006C789"
Last-Modified: Sat, 28 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7965
Expires: Mon, 30 Jan 2023 19:47:36 GMT
Date: Mon, 30 Jan 2023 17:34:51 GMT
Connection: keep-alive
geolocation.onetrust.com/cookieconsentpub/v1/geo/location/ZxGetConsent
200 OK 67 kB URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location/ZxGetConsent
IP
Hash a0bdf6ab82f03b8efe949c055cae1715
a5d0cf4de3caa2c8dd506df9d993c436802471f4
39d179579551903d794ca3d10a157b5106b5b77cece5f108c0fceadf31fdc9d0
GET /cookieconsentpub/v1/geo/location/ZxGetConsent HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 17:34:51 GMT
content-type: text/javascript
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 791bf5f0b89f0b69-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9004ba4b34f1ae3498b3afeccc240e8c
ee465f20e9365246ef0e90b5349df5d0ec7afc31
e75b585711a65a09bb8188ef1a592d6c8708bfb3f1fa395befa9643974b0a680
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E75B585711A65A09BB8188EF1A592D6C8708BFB3F1FA395BEFA9643974B0A680"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10072
Expires: Mon, 30 Jan 2023 20:22:43 GMT
Date: Mon, 30 Jan 2023 17:34:51 GMT
Connection: keep-alive
lodder7.biz/?pu=gztdqzdfgu5ha3ddf4ytinrz
200 OK 19 kB URL HTTP/2 lodder7.biz/?pu=gztdqzdfgu5ha3ddf4ytinrz
IP
File type ASCII text, with no line terminators
Hash cf6f305ab2eda9e5cea5c67a28414166
db99650bc6c17a11147a5a21ab9a03c124f82e0c
192ba9b04281bfa1376dfa761fc3ddb92e1fb812eab3dbf419d7ec4e93cb3931
Analyzer Verdict Alert fortinet Malware
GET /?pu=gztdqzdfgu5ha3ddf4ytinrz HTTP/1.1
Host: lodder7.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 17:34:50 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=9fae7c73-55f2-494d-82c7-ec6251676c0f; expires=Wed, 01-Mar-2023 17:34:50 GMT; Max-Age=2592000; path=/; SameSite=None; domain=lodder7.biz; secure
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dsq44xCUkwmc73Pk8VSlcrBSKfA%2BoIaD%2FbBsqfl8Y%2F%2FR3IBWTisk3JvFzQ4wxrAIofAlGEGwQCWSjoH6Ju%2FNnsLIQcGjZv%2FofKL61Y0UIs%2BK%2FIXfGiNV3p%2Fv8ZEf2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791bf5ef0ec1b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: G7gSLOuc8C5182XJyKWGEQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MjMlskUGGX+eMtKHeTHeZYtFLDE=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1a294e449b59fc02b1608401ef519b21
cf79146314c5166b0107ca5bb55f0209855c1dbd
a58069d78d430716e7574cb8d5c34ec0f25374de8b46a52e43055aa5cb2a956f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 850043dd81b5d1069d97ea873811088a
aeb6621f6afe61d34b158ca655ed476c6682d540
c5bf52c745324b2545e666b415338c73ed10da9ff259c802ecc2cfc01bd59822
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 17:34:51 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 03 Feb 2023 16:36:16 GMT
ETag: "aeb6621f6afe61d34b158ca655ed476c6682d540"
Last-Modified: Mon, 30 Jan 2023 16:36:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 677
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791bf5f28931b4ed-OSL
counter.yadro.ru/hit?r;s1280*1024*24;uhttps%3A//howpeopleheal.net/609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts;0.4568141452370166
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit?r;s1280*1024*24;uhttps%3A//howpeopleheal.net/609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts;0.4568141452370166
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit?r;s1280*1024*24;uhttps%3A//howpeopleheal.net/609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts;0.4568141452370166 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 30 Jan 2023 17:34:51 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Sat, 29 Jan 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
storage.googleapis.com/s2t-images/mr.js?0.054961677480219406
200 OK 4.4 kB URL HTTP/2 storage.googleapis.com/s2t-images/mr.js?0.054961677480219406
IP
File type ASCII text, with very long lines (23729), with no line terminators
Hash 115f5664d494ea5e45aad8061e45949d
660440b1341ac6e480605287845a1361e094feb3
232aaf8b341c5f586744bfe91192bd2961699ca0fe31c48e08b535c394391d32
GET /s2t-images/mr.js?0.054961677480219406 HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvM0-rG4A2eOVPcoLXJbN8OzRcOfXP-8P1_3RTKRjU2NPDA6n8_O38e9Ov1_LmqI8DBaS5VSu4SdGtuGSsMbZFHJqatG4zG
date: Mon, 30 Jan 2023 17:34:51 GMT
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 17:34:51 GMT
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Tue, 24 May 2022 13:22:38 GMT
etag: "115f5664d494ea5e45aad8061e45949d"
x-goog-generation: 1653398558715037
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 4449
content-type: application/javascript
content-encoding: gzip
x-goog-hash: crc32c=1nfj4g==, md5=EV9WZNSU6l5FqtgGHkWUnQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 4449
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 785c90528f12560bb6b84d3a7f47c4f9
16827089e249cf133c266145b6454a84f2d944dc
c75010735bee2c9755aa96ea32f3201b692e56fc7fd3da517299d8ec2875d2d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.wpadmngr.com/npc/sdk/wp-banners.js
200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 17:34:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Mon, 30 Jan 2023 17:39:51 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 835902550bc5895276a69790390691b9
35ffcb1e2405aad7437593609d6ea2f603eeecce
c634a845e73cf24092bbede0232dd628ac6e1ff765c40e003d12ec7472fb8d80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C634A845E73CF24092BBEDE0232DD628AC6E1FF765C40E003D12EC7472FB8D80"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8762
Expires: Mon, 30 Jan 2023 20:00:53 GMT
Date: Mon, 30 Jan 2023 17:34:51 GMT
Connection: keep-alive
cst.cstwpush.com/static/adManager.js
200 OK 81 kB URL HTTP/2 cst.cstwpush.com/static/adManager.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash 46ee4d1df11ef6e045b3b6020d94a125
97f47b365e6566b2e903876e0aa97dc953220790
4e6ad8239886a45f3cde544047e0024536771e40efd16ba202468d7810662e15
GET /static/adManager.js HTTP/1.1
Host: cst.cstwpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://howpeopleheal.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 17:34:51 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 05 Dec 2022 13:37:26 GMT
etag: W/"638df416-4dd"
content-encoding: gzip
expires: Mon, 30 Jan 2023 17:39:51 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20230130
200 OK 882 B URL HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20230130
IP
File type JSON data\012- , ASCII text, with very long lines (1590), with no line terminators
Hash 0a572a2c6fe9f9e0510c446e30e60c8e
6ecb9c4241e153a5f2efc027b7d88809a5e4759e
691fd5eaabd2c4f45ea1931a1a66334adba1916a4af6724d11f595c0821c2873
GET /gh/prebid/currency-file@1/latest.json?date=20230130 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://howpeopleheal.net
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.1602
x-jsd-version-type: version
etag: W/"636-BxlK/YFDuO/myAW6wGceYSwMODM"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 17:34:51 GMT
age: 5647
x-served-by: cache-fra-eddf8230021-FRA, cache-bma1663-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 882
X-Firefox-Spdy: h2
site2text-2021.web.app/gw_251221.js?0.5281602776031858
200 OK 0 B URL HTTP/2 site2text-2021.web.app/gw_251221.js?0.5281602776031858
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gw_251221.js?0.5281602776031858 HTTP/1.1
Host: site2text-2021.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
content-type: text/html
function-execution-id: d0qovu5aoncq
server: Google Frontend
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-cloud-trace-context: df6e5c83517a3f663918618cb74ba899
x-country-code: NO
x-orig-accept-language: en-US,en;q=0.5
accept-ranges: bytes
date: Mon, 30 Jan 2023 17:34:51 GMT
x-served-by: cache-bma1674-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675100092.558641,VS0,VE349
vary: cookie,need-authorization, x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 0
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 08aba3833b7e833311e93419de06016f
634ff92572fafbef13cd995168b982910235fc30
ea1342c5fe6099b0cf4e700f9e961264b86559fc1e7c6c572b043216c2c5f4bb
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 17:34:51 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "18517AD7C5A5D5800B3B51AADA833E5CAC0E7DD6"
Expires: Tue, 31 Jan 2023 04:00:00 GMT
Last-Modified: Mon, 30 Jan 2023 16:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2689
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791bf5f6a93cb4e8-OSL
ocsp.pki.goog/s/gts1d4int/CgqZOssWAEQ
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/CgqZOssWAEQ
IP
Hash 7ae05ecbfd275f8bf207c49637315f49
6ec731c22fd017c194871d7a7af00e85d05dd574
0ceddf9b984744e05396792839202d188c6cb36714208d3257a0a57869890f8f
POST /s/gts1d4int/CgqZOssWAEQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
buttons-config.sharethis.com/js/5c086b7ea71f090011aea084.js
200 OK 434 B URL HTTP/2 buttons-config.sharethis.com/js/5c086b7ea71f090011aea084.js
IP
File type ASCII text, with very long lines (434), with no line terminators
Hash 8f8c95d8315dedb8a7c82f24235b706f
4069f385e6d83b661c695bc50adac701d30838d4
d2fa83bbc70c843df2edd43096821128aa1f4bd404237f614c49cd48e7d5cfa3
GET /js/5c086b7ea71f090011aea084.js HTTP/1.1
Host: buttons-config.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 434
last-modified: Thu, 06 Dec 2018 00:24:07 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 30 Jan 2023 17:34:51 GMT
cache-control: max-age=60,public
etag: "8f8c95d8315dedb8a7c82f24235b706f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1zAg23WHb_Ui0O2OX6c634udV47imqQWwXAULJF3inrJl770s2u0ZQ==
age: 15
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (39375)
Hash f63ef11c44a8ea237ae4f82f4f76ba73
5e6f2421e95d6b11a7b49894651f0ee23f5e74e3
cba7f50fad4e30766307cf0280b18a296a29a7f69925133025441a81b94cdb8d
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27573
date: Mon, 30 Jan 2023 17:34:52 GMT
expires: Mon, 30 Jan 2023 17:34:52 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1467 / 632 of 1000 / last-modified: 1675093509"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1290cd72f0f9c2d98efaa03e79c91a46
6ee165ad79e743a035804cac70180b80207ae008
b987fa92032091ba94acb2f98e0f0213315e027fdf243cb92600a02dd85680a6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B987FA92032091BA94ACB2F98E0F0213315E027FDF243CB92600A02DD85680A6"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2195
Expires: Mon, 30 Jan 2023 18:11:27 GMT
Date: Mon, 30 Jan 2023 17:34:52 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eb9104b9a960ae69cdf9bef37eb8e339
fb6d6fc979850e08071a02685f44ba6907c2e45c
9a4c221d20d2963dff19eebd824d58377381ee6f30b15bff48de7b7b31af04f3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 17:34:52 GMT
Last-Modified: Mon, 30 Jan 2023 16:09:27 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i6LSgJESO7n_MKdekRDIiFNkxNzUW3LtZqPytLmXEs3x398xPQ6Zrw==
Age: 5125
l.sharethis.com/pview?event=pview&hostname=howpeopleheal.net&location=%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&product=unknown&url=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&source=sharethis.js&fcmp=false&fcmpv2=true&has_segmentio=false&title=Nancy%20Shevell%20Wiki%20(Paul%20McCartneys%20Frau)%20Bio%2C%20Alter%2C%20Gr%C3%B6%C3%9Fe%2C%20Gewicht%2C%20Familie%20%26%20Fakten&cms=unknown&publisher=5c086b7ea71f090011aea084&sop=true&consent_duration=2&gdpr_consent=CPmb_3TPmb_3TAHABBENBACgAAAAAH_AAAAAAAAOJAJMNS-AizEscCSaNKoUQIQriQ6AEAFFCMLRNYQErgp2VwEfoIGACA1ARgRAgxBRiyCAAAAAJKIgJADwQCIAiAQAAgBUgIQAEaAILACQMAgAFANCwAigCECQgyOCo5TAgIkWignkrAEou9jDCEMooAaBAAAA.YAAAD_gAAAAA&gdpr_domain=howpeopleheal.net&gdpr_method=api&version=st_sop.js&lang=en&description=Nancy%20Shevell%20Wiki%20(Paul%20McCartneys%20Frau)%20Biografie%2C%20Alter%2C%20Gr%C3%B6%C3%9Fe%2C%20Gewicht%2C%20Familie%2C%20Kinder%2C%20Verm%C3%B6gen%2C%20Ethnizit%C3%A4t%2C%20Geburtstag%2C%20K%C3%B6rperstatistik%2C%20Fakten%2C%20Eltern%2C%20Profil%20und%20pers%C3%B6nliche%20Lebensangelegenheiten%3A%20Nancy%20Shevell%20(geb.%2020.%20November%201959)%20ist%20eine%20amerikanische%20Gesch%C3%A4ftsfrau.%20Sie%20war%20ehemaliges%20Vorstandsmitglied%20der%20%E2%80%9ENew%20York%20Metropolitan%20Transportation%20Authority%E2%80%9C.%20Sie%20arbei
204 No Content 0 B URL HTTP/1.1 l.sharethis.com/pview?event=pview&hostname=howpeopleheal.net&location=%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&product=unknown&url=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&source=sharethis.js&fcmp=false&fcmpv2=true&has_segmentio=false&title=Nancy%20Shevell%20Wiki%20(Paul%20McCartneys%20Frau)%20Bio%2C%20Alter%2C%20Gr%C3%B6%C3%9Fe%2C%20Gewicht%2C%20Familie%20%26%20Fakten&cms=unknown&publisher=5c086b7ea71f090011aea084&sop=true&consent_duration=2&gdpr_consent=CPmb_3TPmb_3TAHABBENBACgAAAAAH_AAAAAAAAOJAJMNS-AizEscCSaNKoUQIQriQ6AEAFFCMLRNYQErgp2VwEfoIGACA1ARgRAgxBRiyCAAAAAJKIgJADwQCIAiAQAAgBUgIQAEaAILACQMAgAFANCwAigCECQgyOCo5TAgIkWignkrAEou9jDCEMooAaBAAAA.YAAAD_gAAAAA&gdpr_domain=howpeopleheal.net&gdpr_method=api&version=st_sop.js&lang=en&description=Nancy%20Shevell%20Wiki%20(Paul%20McCartneys%20Frau)%20Biografie%2C%20Alter%2C%20Gr%C3%B6%C3%9Fe%2C%20Gewicht%2C%20Familie%2C%20Kinder%2C%20Verm%C3%B6gen%2C%20Ethnizit%C3%A4t%2C%20Geburtstag%2C%20K%C3%B6rperstatistik%2C%20Fakten%2C%20Eltern%2C%20Profil%20und%20pers%C3%B6nliche%20Lebensangelegenheiten%3A%20Nancy%20Shevell%20(geb.%2020.%20November%201959)%20ist%20eine%20amerikanische%20Gesch%C3%A4ftsfrau.%20Sie%20war%20ehemaliges%20Vorstandsmitglied%20der%20%E2%80%9ENew%20York%20Metropolitan%20Transportation%20Authority%E2%80%9C.%20Sie%20arbei
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pview?event=pview&hostname=howpeopleheal.net&location=%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&product=unknown&url=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&source=sharethis.js&fcmp=false&fcmpv2=true&has_segmentio=false&title=Nancy%20Shevell%20Wiki%20(Paul%20McCartneys%20Frau)%20Bio%2C%20Alter%2C%20Gr%C3%B6%C3%9Fe%2C%20Gewicht%2C%20Familie%20%26%20Fakten&cms=unknown&publisher=5c086b7ea71f090011aea084&sop=true&consent_duration=2&gdpr_consent=CPmb_3TPmb_3TAHABBENBACgAAAAAH_AAAAAAAAOJAJMNS-AizEscCSaNKoUQIQriQ6AEAFFCMLRNYQErgp2VwEfoIGACA1ARgRAgxBRiyCAAAAAJKIgJADwQCIAiAQAAgBUgIQAEaAILACQMAgAFANCwAigCECQgyOCo5TAgIkWignkrAEou9jDCEMooAaBAAAA.YAAAD_gAAAAA&gdpr_domain=howpeopleheal.net&gdpr_method=api&version=st_sop.js&lang=en&description=Nancy%20Shevell%20Wiki%20(Paul%20McCartneys%20Frau)%20Biografie%2C%20Alter%2C%20Gr%C3%B6%C3%9Fe%2C%20Gewicht%2C%20Familie%2C%20Kinder%2C%20Verm%C3%B6gen%2C%20Ethnizit%C3%A4t%2C%20Geburtstag%2C%20K%C3%B6rperstatistik%2C%20Fakten%2C%20Eltern%2C%20Profil%20und%20pers%C3%B6nliche%20Lebensangelegenheiten%3A%20Nancy%20Shevell%20(geb.%2020.%20November%201959)%20ist%20eine%20amerikanische%20Gesch%C3%A4ftsfrau.%20Sie%20war%20ehemaliges%20Vorstandsmitglied%20der%20%E2%80%9ENew%20York%20Metropolitan%20Transportation%20Authority%E2%80%9C.%20Sie%20arbei HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://howpeopleheal.net
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: https://howpeopleheal.net
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 30 Jan 2023 17:34:52 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
video.onnetwork.tv/embed.php?ext=optad
200 OK 703 B URL HTTP/2 video.onnetwork.tv/embed.php?ext=optad
IP
Hash 6cba2e5fc8f7b4ed2e69544265647a20
b191711e92de8989319e3888bd63b2bba3eb24aa
27248e52dd4448aa5c71e40041aa8b5e65254d01c7210dcf31619e01d1ec98ee
GET /embed.php?ext=optad HTTP/1.1
Host: video.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="ALL CAO DSP COR IVD IVA PSD PSA TEL TAI CUS ADM CUR CON SAM OUR IND"
last-modified: Mon, 30 Jan 2023 17:34:51 GMT
expires: Mon, 30 Jan 2023 17:34:51 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=1, pre-check=1
pragma: no-cache
feature-policy: fullscreen *; autoplay;
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-length: 703
content-type: text/javascript;charset=utf-8
date: Mon, 30 Jan 2023 17:34:52 GMT
server: XO.webservant
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/facebook.svg
200 OK 301 B URL HTTP/2 platform-cdn.sharethis.com/img/facebook.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash c6e9be45643e197ce1db1d7e24a99adc
d7338e398bb0f7a9082d24f121140d2cf9e88859
768d97ec0916217ae82c70aeda3a61b9b0dab344edc4a3240a4f7cd94af00307
GET /img/facebook.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 301
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 09 Jan 2023 03:18:13 GMT
cache-control: public, max-age=2592000
etag: "c6e9be45643e197ce1db1d7e24a99adc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BxzyCeeDBHnv2h1Eoe2P1haln5QmA6FAWAjq_mlUZsIudz8R5rDnMA==
age: 1865803
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/pinterest.svg
200 OK 771 B URL HTTP/2 platform-cdn.sharethis.com/img/pinterest.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (615)
Hash 2b10a062e719c64b686e2e8fcdc216dc
38bd37fa3975f4d5b849763359481d8b31bb80ba
efc737b4f58cfe73a9bd0e57d7570365701381da31e628b269e7217a0ce3359d
GET /img/pinterest.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 771
date: Tue, 10 Jan 2023 04:59:39 GMT
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
etag: "2b10a062e719c64b686e2e8fcdc216dc"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jialBGf_J5O9YmK62ZodUP526ViWDFjcVzkDO3mvAcuf8jtsJkx-uA==
age: 1773313
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/email.svg
200 OK 343 B URL HTTP/2 platform-cdn.sharethis.com/img/email.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5977437466e857c7ddcadda6f6d88c2a
19c6378daa1f946ca225fb8d9e039e1f7762fb0d
5f5012132c752db2433e17712d91ef8689f1bc95167b2720e23224c2ae62e009
GET /img/email.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 343
date: Fri, 13 Jan 2023 01:20:42 GMT
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
etag: "5977437466e857c7ddcadda6f6d88c2a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T4CLahihPM1HCpbSEMsmw3hIa_hv7n3vPdP_xvqBMZo3mgvvGvXfhw==
age: 1527251
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/sharethis.svg
200 OK 514 B URL HTTP/2 platform-cdn.sharethis.com/img/sharethis.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (358)
Hash deecdaa377907db5cc1722fc831670a1
4e39e0fd5742cc1460e24620df4a360abb71290e
9a83c65bdd0ff9488af9d25720686457ea7295c9c44f9f1d285a0c9ec89bab99
GET /img/sharethis.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 514
date: Thu, 12 Jan 2023 01:12:37 GMT
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
etag: "deecdaa377907db5cc1722fc831670a1"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UT5d-NiM90WZZ9Pijq-nHJl7BNweKR8nYHW1APOegqzV4DeyIpt4hg==
age: 1614136
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
count-server.sharethis.com/v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts
200 OK 205 B URL HTTP/2 count-server.sharethis.com/v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts
IP
File type ASCII text, with no line terminators
Hash 08667b7da61d9c2240e64e83d0219e7a
dd55d79d65f81b564451c4c8e6df575e01bdbd03
c0d816b5fe84607518299548bf2541e3f0d7ede88ebe7b41a58e2babf8f8132c
GET /v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts HTTP/1.1
Host: count-server.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 205
date: Mon, 30 Jan 2023 17:34:52 GMT
cache-control: no-cache, no-store, must-revalidate
etag: 08667b7da61d9c2240e64e83d0219e7a
apigw-requestid: fkTldgLAIAMESlg=
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lp7p-lHCGiSNdcZfvvOTbWd_9vpcsZDHL4ZyX8AEpB73EXLJtDU-jQ==
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cdn.onnetwork.tv/js/player90/embedOptAd.min.js?s=1675025833
200 OK 12 kB URL HTTP/2 cdn.onnetwork.tv/js/player90/embedOptAd.min.js?s=1675025833
IP
Hash 8139ea0aae906f3eb2189a1704ebcbd0
dad64b10d144b7d2b9ceef638283390b3da47839
f801f91fc2f7409a4daa40307cbe9ebc61ed09a577735b918660569c9c2952f2
GET /js/player90/embedOptAd.min.js?s=1675025833 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://howpeopleheal.net
Connection: keep-alive
Referer: https://video.onnetwork.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:52 GMT
content-type: application/javascript
last-modified: Sun, 29 Jan 2023 20:57:13 GMT
vary: Accept-Encoding
etag: W/"63d6dda9-76cc"
expires: Fri, 18 Aug 2023 17:34:52 GMT
pragma: public
cache-control: max-age=17280000, public
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5786
Expires: Mon, 30 Jan 2023 19:11:18 GMT
Date: Mon, 30 Jan 2023 17:34:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5786
Expires: Mon, 30 Jan 2023 19:11:18 GMT
Date: Mon, 30 Jan 2023 17:34:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5786
Expires: Mon, 30 Jan 2023 19:11:18 GMT
Date: Mon, 30 Jan 2023 17:34:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5786
Expires: Mon, 30 Jan 2023 19:11:18 GMT
Date: Mon, 30 Jan 2023 17:34:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:53:08 GMT
age: 70904
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe31ee140c2fd62e616c8a1edc9e78bb
7aa5fbdc8156514770ae620e81f1afef1c77890f
799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UNub7Gd4S0ogn5EJhtJVu8q1qML5_4eL2lIPQXiAuXy_q-XiR4s-5w==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:55:21 GMT
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
age: 70771
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 23:25:02 GMT
age: 65390
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e04b9eaf7449828136ad59e4c9d69f1
b820be4ed885dcf288eb6460c57e1fa7b1c7c476
df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Wx-qjsrMLYpLmE-8QmpR46BeRySbUGL2Rrr6LqhEQ8jaEEj_6Aj0qg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:52:09 GMT
age: 70963
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4jPbm4WufkUKm7ljLvpHrJUFhr-JQ_nl3iYfI5S8nTqEszFdUtz9EQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:56:46 GMT
age: 70686
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51aa950d5eed7b90cab6632107092edc
e4388ced02e5576867e77547496dec1ac2338ef7
588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: soTFEnYjNcti77h3FpnztwzR7ypv68NbyoI6DxS0NhU412ykFsWAgA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:00:38 GMT
age: 70454
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.onnetwork.tv/cnt/a_cntg.png?ts=1675100105567&d=11947&wsc=00&typ=embed&mobile=0&c=40
200 OK 126 B URL HTTP/2 cdn.onnetwork.tv/cnt/a_cntg.png?ts=1675100105567&d=11947&wsc=00&typ=embed&mobile=0&c=40
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e714c69ca26dcdabcf9016341f66b5b9
1c78ace0e38129460966521ecb9f3ce70563a5e8
a607b3c3e0d09d7f339e0035f16f99bf93637dee0eb27b2b9c447701fefa2ace
GET /cnt/a_cntg.png?ts=1675100105567&d=11947&wsc=00&typ=embed&mobile=0&c=40 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:52 GMT
content-type: image/png
content-length: 126
cache-control: no-cache
last-modified: Monday, 30-Jan-2023 17:34:52 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
video.onnetwork.tv/frame88.php?id=ffONNPe9bc978acdc9b6837bd99a5ccfb11b5d16751001055571&iid=1675100105557&e=1&ap=4&map=1&umum=1&naa=1&pinva=1&pinv=1&dpre=1&onnsfonn=1&vids=919027&dpb=1&onnwid=11947&wtop=https%253A%252F%252Fhowpeopleheal.net%252F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&apop=0&vpop=0&apopa=0&vpopa=0&cId=ndONNPe9bc978acdc9b6837bd99a5ccfb11b5d1675100105555&rrpt=%7B%22CxSegments%22%3Anull%7D
200 OK 6.2 kB URL HTTP/2 video.onnetwork.tv/frame88.php?id=ffONNPe9bc978acdc9b6837bd99a5ccfb11b5d16751001055571&iid=1675100105557&e=1&ap=4&map=1&umum=1&naa=1&pinva=1&pinv=1&dpre=1&onnsfonn=1&vids=919027&dpb=1&onnwid=11947&wtop=https%253A%252F%252Fhowpeopleheal.net%252F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&apop=0&vpop=0&apopa=0&vpopa=0&cId=ndONNPe9bc978acdc9b6837bd99a5ccfb11b5d1675100105555&rrpt=%7B%22CxSegments%22%3Anull%7D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10408)
Hash 00bc8e14dc322709a1f8e3d66d31b08c
c7177bf8600ca291079292def626aa7f7f545bcf
b6740e98c1592352a34c502265b7e3586245cc4ffa9046b50b8eae34cdf1a834
GET /frame88.php?id=ffONNPe9bc978acdc9b6837bd99a5ccfb11b5d16751001055571&iid=1675100105557&e=1&ap=4&map=1&umum=1&naa=1&pinva=1&pinv=1&dpre=1&onnsfonn=1&vids=919027&dpb=1&onnwid=11947&wtop=https%253A%252F%252Fhowpeopleheal.net%252F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&apop=0&vpop=0&apopa=0&vpopa=0&cId=ndONNPe9bc978acdc9b6837bd99a5ccfb11b5d1675100105555&rrpt=%7B%22CxSegments%22%3Anull%7D HTTP/1.1
Host: video.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://howpeopleheal.net
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="ALL CAO DSP COR IVD IVA PSD PSA TEL TAI CUS ADM CUR CON SAM OUR IND"
last-modified: Mon, 30 Jan 2023 17:34:52 GMT
expires: Mon, 30 Jan 2023 17:34:53 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=1, pre-check=1
pragma: no-cache
feature-policy: fullscreen *; autoplay;
access-control-allow-origin: https://howpeopleheal.net
access-control-allow-credentials: true
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-length: 6247
content-type: text/html; charset=utf-8
date: Mon, 30 Jan 2023 17:34:52 GMT
server: XO.webservant
X-Firefox-Spdy: h2
cdn.onnetwork.tv/cnt/a_cntg.png?ts=1675100105704&d=11947&wsc=00&typ=embed&mobile=0&c=44
200 OK 126 B URL HTTP/2 cdn.onnetwork.tv/cnt/a_cntg.png?ts=1675100105704&d=11947&wsc=00&typ=embed&mobile=0&c=44
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e714c69ca26dcdabcf9016341f66b5b9
1c78ace0e38129460966521ecb9f3ce70563a5e8
a607b3c3e0d09d7f339e0035f16f99bf93637dee0eb27b2b9c447701fefa2ace
GET /cnt/a_cntg.png?ts=1675100105704&d=11947&wsc=00&typ=embed&mobile=0&c=44 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:52 GMT
content-type: image/png
content-length: 126
cache-control: no-cache
last-modified: Monday, 30-Jan-2023 17:34:52 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.onnetwork.tv/css/player88.css?s=1673963916
200 OK 11 kB URL HTTP/2 cdn.onnetwork.tv/css/player88.css?s=1673963916
IP
Hash 67515855435cf2f12c6af2c8fb9aba5f
a8dff6d5210d01f72d54af8fbc37a452d4da008d
c9a8c117be1a9b1a5b38b7359e6177e97e70639634f07e5687c8130e817caa5f
GET /css/player88.css?s=1673963916 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:52 GMT
content-type: text/css
last-modified: Tue, 17 Jan 2023 13:58:36 GMT
vary: Accept-Encoding
etag: W/"63c6a98c-b2dd"
expires: Fri, 18 Aug 2023 17:34:52 GMT
pragma: public
cache-control: max-age=17280000, public
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
imasdk.googleapis.com/js/sdkloader/gpt_proxy.js
200 OK 30 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/gpt_proxy.js
IP
File type ASCII text, with very long lines (3448)
Hash c07b9ad75840734471c894f19ec1a5d4
e7961cbda33facd68e559950952d6672163cece6
ccb3ed445806bad2a91194b8e19ab83ff19e616dec62685741e214125987f690
GET /js/sdkloader/gpt_proxy.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 29703
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 17:25:56 GMT
expires: Mon, 30 Jan 2023 17:40:56 GMT
cache-control: public, max-age=900
age: 536
last-modified: Thu, 26 Jan 2023 19:32:55 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 126 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2846)
Size 126 kB (126544 bytes)
Hash 08170b094847c66f3b89d5a577c739ea
ea3f55dae751aaa5fb5b0fd0d74354c26d76dccd
598ef4c4803f256ff79120afe545bc162d0d84bc1224acff09a1dcd2f0bd9b35
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 126544
date: Mon, 30 Jan 2023 17:34:52 GMT
expires: Mon, 30 Jan 2023 17:34:52 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
optad360.mgr.consensu.org/icons/branding-video-negative.svg
200 OK 3.0 kB URL HTTP/2 optad360.mgr.consensu.org/icons/branding-video-negative.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 42f4e87949b968db9ea0c97bbd20f60c
22a68d21033eb9f867e70ad662d69cc8fee13b43
529cdd5078e50f5004df9060fa5698927d0c841dd1fae04faec0e3c2f8fbdde9
GET /icons/branding-video-negative.svg HTTP/1.1
Host: optad360.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Wed, 22 Jun 2022 12:05:00 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 30 Jan 2023 16:06:08 GMT
cache-control: public, max-age=360000000
etag: W/"4ccbac335fa4fcdf4c526588ec6a6bc0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Hn7zRwfVmfYD1EuTk9c7EW5KfVsTLGSDZVMn8UulQSATpEeXdJuYJA==
age: 5332
X-Firefox-Spdy: h2
notification.tubecup.net/tags?tag_id=1603&timezone_olson=UTC&version_name=a
200 OK 743 B URL HTTP/2 notification.tubecup.net/tags?tag_id=1603&timezone_olson=UTC&version_name=a
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with very long lines (743), with no line terminators
Hash a2b51f9742603a7acee0841b17404db1
473ad0f54a8a37865d71d43b14caf2258510dc91
74117b31f6969a8be8a427253b7ccc52d3eb14d3b852579a7c808f09a6b3fc80
GET /tags?tag_id=1603&timezone_olson=UTC&version_name=a HTTP/1.1
Host: notification.tubecup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://howpeopleheal.net
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 30 Jan 2023 17:34:52 GMT
content-type: application/json
content-length: 743
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=1603
200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=1603
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=1603 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22287
Origin: https://howpeopleheal.net
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 30 Jan 2023 17:34:53 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://howpeopleheal.net
Set-Cookie: id=12836620432347175051; Expires=Tue, 30 Jan 2024 17:34:53 GMT; Secure; SameSite=None
Vary: Origin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a178f51cb1e0dd2f9835bb8f5ae3fe40
6f80ae828160c63b7ec4a86cf0f7c7cf02ebfa59
749b4c97c4b9433072536063c057dcb907838ef3834060d859c61545a49a1f94
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "749B4C97C4B9433072536063C057DCB907838EF3834060D859C61545A49A1F94"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4759
Expires: Mon, 30 Jan 2023 18:54:12 GMT
Date: Mon, 30 Jan 2023 17:34:53 GMT
Connection: keep-alive
cdn.onnetwork.tv/js/player88/playerl.min.js?s=1674812418
200 OK 297 kB URL HTTP/2 cdn.onnetwork.tv/js/player88/playerl.min.js?s=1674812418
IP
File type C++ source, ASCII text, with very long lines (11796)
Size 297 kB (296700 bytes)
Hash 7aa9ab5590fcb47136ee40b06fe2c6fe
26cacff516b1403a7c81ce9d0733d891d182a2b5
d025861d87cb025789a35a964a39e0da78142808adab18b4c904fb0d579666d6
GET /js/player88/playerl.min.js?s=1674812418 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:52 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 09:40:18 GMT
vary: Accept-Encoding
etag: W/"63d39c02-3e199"
expires: Fri, 18 Aug 2023 17:34:52 GMT
pragma: public
cache-control: max-age=17280000, public
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.onnetwork.tv/css/websites/optad/general.css
200 OK 229 kB URL HTTP/2 cdn.onnetwork.tv/css/websites/optad/general.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (48006)
Size 229 kB (229351 bytes)
Hash 44496ff04b744a38b93439fe737a72f6
f136df02619d84fcc73013034c7c7b904a5460a7
4523f6b8314e05db9c56ee3577ecfe04ed891f6f694b5be3f7b291d4dcf98857
GET /css/websites/optad/general.css HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:53 GMT
content-type: text/css
last-modified: Sun, 27 Mar 2022 07:49:33 GMT
vary: Accept-Encoding
etag: W/"6240170d-268"
expires: Fri, 18 Aug 2023 17:34:53 GMT
pragma: public
cache-control: max-age=17280000, public
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.onnetwork.tv/cnt/a_cnti.png?ts=1675100106080&event=plimpression&d=11947&vs=0&aps=4&playerVisible=0&plist=0&widget=0&initap=4&currap=4&ab=0&cbs=1&co=0&vc=0&pod=0&ppos=0&muted=1&mobile=0&lls=0&acount=0
200 OK 126 B URL HTTP/2 cdn.onnetwork.tv/cnt/a_cnti.png?ts=1675100106080&event=plimpression&d=11947&vs=0&aps=4&playerVisible=0&plist=0&widget=0&initap=4&currap=4&ab=0&cbs=1&co=0&vc=0&pod=0&ppos=0&muted=1&mobile=0&lls=0&acount=0
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e714c69ca26dcdabcf9016341f66b5b9
1c78ace0e38129460966521ecb9f3ce70563a5e8
a607b3c3e0d09d7f339e0035f16f99bf93637dee0eb27b2b9c447701fefa2ace
GET /cnt/a_cnti.png?ts=1675100106080&event=plimpression&d=11947&vs=0&aps=4&playerVisible=0&plist=0&widget=0&initap=4&currap=4&ab=0&cbs=1&co=0&vc=0&pod=0&ppos=0&muted=1&mobile=0&lls=0&acount=0 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:53 GMT
content-type: image/png
content-length: 126
cache-control: no-cache
last-modified: Monday, 30-Jan-2023 17:34:53 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d65dfba0c302d5f0591945532278ab33
9f8663b04b167e341a017558deffa3b0fc3bddcb
533c0e128ff35d248626ac729c32726ec02236c5c6a6e6da4232de03b16c8b9c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "533C0E128FF35D248626AC729C32726EC02236C5C6A6E6DA4232DE03B16C8B9C"
Last-Modified: Sun, 29 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19773
Expires: Mon, 30 Jan 2023 23:04:26 GMT
Date: Mon, 30 Jan 2023 17:34:53 GMT
Connection: keep-alive
cdn.onnetwork.tv/cnt/a_cntm.png?ts=1675100106093&i=919027&d=11947&wsc=ab&plist=0&widget=0&initap=4&currap=4&ab=0&cbs=1&co=0&vc=0&pod=0&ppos=0&muted=1&mobile=0&lls=0&typ=embed&ap=4&vs=40
200 OK 126 B URL HTTP/2 cdn.onnetwork.tv/cnt/a_cntm.png?ts=1675100106093&i=919027&d=11947&wsc=ab&plist=0&widget=0&initap=4&currap=4&ab=0&cbs=1&co=0&vc=0&pod=0&ppos=0&muted=1&mobile=0&lls=0&typ=embed&ap=4&vs=40
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e714c69ca26dcdabcf9016341f66b5b9
1c78ace0e38129460966521ecb9f3ce70563a5e8
a607b3c3e0d09d7f339e0035f16f99bf93637dee0eb27b2b9c447701fefa2ace
GET /cnt/a_cntm.png?ts=1675100106093&i=919027&d=11947&wsc=ab&plist=0&widget=0&initap=4&currap=4&ab=0&cbs=1&co=0&vc=0&pod=0&ppos=0&muted=1&mobile=0&lls=0&typ=embed&ap=4&vs=40 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:53 GMT
content-type: image/png
content-length: 126
cache-control: no-cache
last-modified: Monday, 30-Jan-2023 17:34:53 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
200 OK 13 kB URL HTTP/2 pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
IP
File type ASCII text, with very long lines (1493)
Hash 0dece4b354fc41d0430994be26247a47
1063c9471665bb53cc9a4e89c4cf0f1e9f695f8d
71a1c1d814cc6c713b3513212be779f944e9b4002e1fb89ac36e438a1a04e4a0
GET /omsdk/releases/live/omweb-v1.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/omsdk-team-release-policy
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="omsdk-team-release-policy"
report-to: {"group":"omsdk-team-release-policy","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/omsdk-team-release-policy"}]}
content-length: 13109
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 17:14:00 GMT
expires: Mon, 30 Jan 2023 18:14:00 GMT
cache-control: public, max-age=3600
age: 1253
last-modified: Mon, 31 Oct 2022 17:24:37 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.onnetwork.tv/js/player90/embed.min.js?s=1675025833
200 OK 24 kB URL HTTP/2 cdn.onnetwork.tv/js/player90/embed.min.js?s=1675025833
IP
Hash 2e88573277147bedbd9393edb0ffa9a0
51267c7da9b5570ddf046e50723040bb0699a51f
454060e1cef218857683dde3dc74a704cc46ae60915b116f2bb9529cb021cd3f
GET /js/player90/embed.min.js?s=1675025833 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://howpeopleheal.net
Connection: keep-alive
Referer: https://video.onnetwork.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:52 GMT
content-type: application/javascript
last-modified: Sun, 29 Jan 2023 20:57:13 GMT
vary: Accept-Encoding
etag: W/"63d6dda9-11b05"
expires: Fri, 18 Aug 2023 17:34:52 GMT
pragma: public
cache-control: max-age=17280000, public
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.onnetwork.tv/cnt/a_cntd.png?ts=1675100106094&mobile=0&plc=1&time=15&website=11947
200 OK 126 B URL HTTP/2 cdn.onnetwork.tv/cnt/a_cntd.png?ts=1675100106094&mobile=0&plc=1&time=15&website=11947
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e714c69ca26dcdabcf9016341f66b5b9
1c78ace0e38129460966521ecb9f3ce70563a5e8
a607b3c3e0d09d7f339e0035f16f99bf93637dee0eb27b2b9c447701fefa2ace
GET /cnt/a_cntd.png?ts=1675100106094&mobile=0&plc=1&time=15&website=11947 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:53 GMT
content-type: image/png
content-length: 126
cache-control: no-cache
last-modified: Monday, 30-Jan-2023 17:34:53 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.onnetwork.tv/img/black2.mp4
206 Partial Content 2.2 kB URL HTTP/2 cdn.onnetwork.tv/img/black2.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 5cb95b4168423a49376882e1b2ba6171
8f6cc8c3da7687921eb12ef0d20769b988626f88
6212a4c6fd9be62d0795e3957471693cb344af6f21c2bbe0e957f3ed82520f1b
GET /img/black2.mp4 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:53 GMT
content-type: video/mp4
content-length: 2238
last-modified: Tue, 15 Nov 2022 12:58:10 GMT
etag: "63738ce2-8be"
expires: Fri, 18 Aug 2023 17:34:53 GMT
pragma: public
cache-control: max-age=17280000, public
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
content-range: bytes 0-2237/2238
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d12e9ff2f182d3ce52d59d589ab5a61d
1d39c5eed0a766cbee2fe1f0729eab7472f56d7f
e675272e9b74782eb09ee52be90da7a92ba0cbe71fccba9bd8c4416e4817b13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 30 Jan 2023 15:45:20 GMT
expires: Mon, 30 Jan 2023 17:45:20 GMT
cache-control: public, max-age=7200
age: 6573
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s0.2mdn.net/instream/video/client.js
200 OK 17 kB URL HTTP/2 s0.2mdn.net/instream/video/client.js
IP
File type ASCII text, with very long lines (2156)
Hash 49295de6ccd23cf80b6418a2d209868f
42a955b4560bb22cb9b5b39577f7a691ea345018
d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
GET /instream/video/client.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Mon, 30 Jan 2023 17:34:53 GMT
expires: Mon, 30 Jan 2023 17:34:53 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
01ac38b0b9.4a623a5a49.com/in/track?data=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
200 OK 0 B URL HTTP/2 01ac38b0b9.4a623a5a49.com/in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzI5Njc3Nzk3NTUzNTg5OTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjIxLjEiLCJ0YWdfaWQiOjE2MDMsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MS41LCJpc192MiI6MSwiaXNfdjJfZW1wdHkiOm51bGwsInVzZXJfa2V5d29yZHMiOiJOYW5jeSUyQ1NoZXZlbGwlMkNXaWtpJTJDKFBhdWwlMkNNY0NhcnRuZXlzJTJDRnJhdSklMkNCaW8lMkNBbHRlciUyQ0dyJUMzJUI2JUMzJTlGZSUyQ0dld2ljaHQlMkNGYW1pbGllJTJDRmFrdGVuJTJDTmFuY3klMkNTaGV2ZWxsJTJDV2lraSUyQyhQYXVsJTJDTWNDYXJ0bmV5cyUyQ0ZyYXUpJTJDQmlvZ3JhZmllJTJDQWx0ZXIlMkNHciVDMyVCNiVDMyU5RmUlMkNHZXdpY2h0JTJDRmFtaWxpZSUyQ0tpbmRlciUyQ1Zlcm0lQzMlQjZnZW4lMkNFdGhuaXppdCVDMyVBNHQlMkNHZWJ1cnRzdGFnJTJDSyVDMyVCNnJwZXJzdGF0aXN0aWslMkNGYWt0ZW4lMkNFbHRlcm4lMkNQcm9maWwlMkN1bmQlMkNwZXJzJUMzJUI2bmxpY2hlJTJDTGViZW5zYW5nZWxlZ2VuaGVpdGVuJTJDTmFuY3klMkNTaGV2ZWxsJTJDKGdlYiUyQzIwJTJDTm92ZW1iZXIlMkMxOTU5KSUyQ2lzdCUyQ2VpbmUlMkNhbWVyaWthbmlzY2hlJTJDR2VzY2glQzMlQTRmdHNmcmF1JTJDU2llJTJDd2FyJTJDZWhlbWFsaWdlcyUyQ1ZvcnN0YW5kc21pdGdsaWVkJTJDZGVyJTJDJUUyJTgwJTlFTmV3JTJDWW9yayUyQ01ldHJvcG9saXRhbiUyQ1RyYW5zcG9ydGF0aW9uJTJDQXV0aG9yaXR5JUUyJTgwJTlDJTJDU2llJTJDYXJiZWkifQ==
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzI5Njc3Nzk3NTUzNTg5OTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjIxLjEiLCJ0YWdfaWQiOjE2MDMsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MS41LCJpc192MiI6MSwiaXNfdjJfZW1wdHkiOm51bGwsInVzZXJfa2V5d29yZHMiOiJOYW5jeSUyQ1NoZXZlbGwlMkNXaWtpJTJDKFBhdWwlMkNNY0NhcnRuZXlzJTJDRnJhdSklMkNCaW8lMkNBbHRlciUyQ0dyJUMzJUI2JUMzJTlGZSUyQ0dld2ljaHQlMkNGYW1pbGllJTJDRmFrdGVuJTJDTmFuY3klMkNTaGV2ZWxsJTJDV2lraSUyQyhQYXVsJTJDTWNDYXJ0bmV5cyUyQ0ZyYXUpJTJDQmlvZ3JhZmllJTJDQWx0ZXIlMkNHciVDMyVCNiVDMyU5RmUlMkNHZXdpY2h0JTJDRmFtaWxpZSUyQ0tpbmRlciUyQ1Zlcm0lQzMlQjZnZW4lMkNFdGhuaXppdCVDMyVBNHQlMkNHZWJ1cnRzdGFnJTJDSyVDMyVCNnJwZXJzdGF0aXN0aWslMkNGYWt0ZW4lMkNFbHRlcm4lMkNQcm9maWwlMkN1bmQlMkNwZXJzJUMzJUI2bmxpY2hlJTJDTGViZW5zYW5nZWxlZ2VuaGVpdGVuJTJDTmFuY3klMkNTaGV2ZWxsJTJDKGdlYiUyQzIwJTJDTm92ZW1iZXIlMkMxOTU5KSUyQ2lzdCUyQ2VpbmUlMkNhbWVyaWthbmlzY2hlJTJDR2VzY2glQzMlQTRmdHNmcmF1JTJDU2llJTJDd2FyJTJDZWhlbWFsaWdlcyUyQ1ZvcnN0YW5kc21pdGdsaWVkJTJDZGVyJTJDJUUyJTgwJTlFTmV3JTJDWW9yayUyQ01ldHJvcG9saXRhbiUyQ1RyYW5zcG9ydGF0aW9uJTJDQXV0aG9yaXR5JUUyJTgwJTlDJTJDU2llJTJDYXJiZWkifQ== HTTP/1.1
Host: 01ac38b0b9.4a623a5a49.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://howpeopleheal.net
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 17:34:53 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnt.onnetwork.tv/poster/9/1/919027_5m.jpg
200 OK 10 kB URL HTTP/2 cdnt.onnetwork.tv/poster/9/1/919027_5m.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 480x272, components 3\012- data
Hash db28080ad44c46eb449fc250e33a2dc8
40e7b61c98a0085c49ebf8b465dcb846e1830601
37cb31effe0fa7997e40575b2d239b9fd99fa789fa7f4a9e16cd8c55cb86163c
GET /poster/9/1/919027_5m.jpg HTTP/1.1
Host: cdnt.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:53 GMT
content-type: image/jpeg
content-length: 10456
last-modified: Thu, 17 Nov 2022 10:35:17 GMT
etag: "63760e65-28d8"
expires: Fri, 18 Aug 2023 17:34:53 GMT
cache-control: max-age=17280000
strict-transport-security: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d12e9ff2f182d3ce52d59d589ab5a61d
1d39c5eed0a766cbee2fe1f0729eab7472f56d7f
e675272e9b74782eb09ee52be90da7a92ba0cbe71fccba9bd8c4416e4817b13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 17:34:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-135185905-1&cid=1533101689.1675100107&jid=1434096050&gjid=860198690&_gid=1426140683.1675100107&_u=IGhAAEAAAAAAACAAsD~&z=620889233
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-135185905-1&cid=1533101689.1675100107&jid=1434096050&gjid=860198690&_gid=1426140683.1675100107&_u=IGhAAEAAAAAAACAAsD~&z=620889233
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-135185905-1&cid=1533101689.1675100107&jid=1434096050&gjid=860198690&_gid=1426140683.1675100107&_u=IGhAAEAAAAAAACAAsD~&z=620889233 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://howpeopleheal.net
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://howpeopleheal.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 30 Jan 2023 17:34:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.onnetwork.tv/cnt/a_cntg.png?ts=1675100107041&d=11947&wsc=ab&typ=embed&mobile=0&c=23
200 OK 126 B URL HTTP/2 cdn.onnetwork.tv/cnt/a_cntg.png?ts=1675100107041&d=11947&wsc=ab&typ=embed&mobile=0&c=23
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e714c69ca26dcdabcf9016341f66b5b9
1c78ace0e38129460966521ecb9f3ce70563a5e8
a607b3c3e0d09d7f339e0035f16f99bf93637dee0eb27b2b9c447701fefa2ace
GET /cnt/a_cntg.png?ts=1675100107041&d=11947&wsc=ab&typ=embed&mobile=0&c=23 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:54 GMT
content-type: image/png
content-length: 126
cache-control: no-cache
last-modified: Monday, 30-Jan-2023 17:34:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55c9b088d75cb04b48573ad6cb2276bc
911c507ffff9886dea025a0740de65446daa33e8
425934fe416e9633427643db9cd69863aa41b1b02d59d868f8ddb09eacb517f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "425934FE416E9633427643DB9CD69863AA41B1B02D59D868F8DDB09EACB517F9"
Last-Modified: Sun, 29 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3999
Expires: Mon, 30 Jan 2023 18:41:35 GMT
Date: Mon, 30 Jan 2023 17:34:56 GMT
Connection: keep-alive
424b0c7454.4e9bff2a3f.com/health/
200 OK 0 B URL HTTP/2 424b0c7454.4e9bff2a3f.com/health/
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /health/ HTTP/1.1
Host: 424b0c7454.4e9bff2a3f.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Mon, 30 Jan 2023 17:34:56 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
424b0c7454.4e9bff2a3f.com/get/?go=1&data=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
302 Found 0 B URL HTTP/2 424b0c7454.4e9bff2a3f.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTY5NSwic3BhY2VpZCI6MTY5NSwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6Ik5hbmN5JTJDU2hldmVsbCUyQ1dpa2klMkMoUGF1bCUyQ01jQ2FydG5leXMlMkNGcmF1KSUyQ0JpbyUyQ0FsdGVyJTJDR3IlQzMlQjYlQzMlOUZlJTJDR2V3aWNodCUyQ0ZhbWlsaWUlMkNGYWt0ZW4lMkNOYW5jeSUyQ1NoZXZlbGwlMkNXaWtpJTJDKFBhdWwlMkNNY0NhcnRuZXlzJTJDRnJhdSklMkNCaW9ncmFmaWUlMkNBbHRlciUyQ0dyJUMzJUI2JUMzJTlGZSUyQ0dld2ljaHQlMkNGYW1pbGllJTJDS2luZGVyJTJDVmVybSVDMyVCNmdlbiUyQ0V0aG5peml0JUMzJUE0dCUyQ0dlYnVydHN0YWclMkNLJUMzJUI2cnBlcnN0YXRpc3RpayUyQ0Zha3RlbiUyQ0VsdGVybiUyQ1Byb2ZpbCUyQ3VuZCUyQ3BlcnMlQzMlQjZubGljaGUlMkNMZWJlbnNhbmdlbGVnZW5oZWl0ZW4lMkNOYW5jeSUyQ1NoZXZlbGwlMkMoZ2ViJTJDMjAlMkNOb3ZlbWJlciUyQzE5NTkpJTJDaXN0JTJDZWluZSUyQ2FtZXJpa2FuaXNjaGUlMkNHZXNjaCVDMyVBNGZ0c2ZyYXUlMkNTaWUlMkN3YXIlMkNlaGVtYWxpZ2VzJTJDVm9yc3RhbmRzbWl0Z2xpZWQlMkNkZXIlMkMlRTIlODAlOUVOZXclMkNZb3JrJTJDTWV0cm9wb2xpdGFuJTJDVHJhbnNwb3J0YXRpb24lMkNBdXRob3JpdHklRTIlODAlOUMlMkNTaWUlMkNhcmJlaSwiLCJsYWJlbHMiOiI0LDUsNiw3LDgsOSw0Niw0Nyw1NCw1NSw2MSwxMDkiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiI0NzE2OTM5NzIiLCJyZWZyZXNoIjoxLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoxMDI3OSwibXVsdGlwbGUiOmZhbHNlLCJpc19pZnJhbWUiOmZhbHNlLCJyZWZkb21haW4iOiIiLCJwbCI6MCwic3RyYXRhZ2VtIjoibmxhYmVsLWIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM5NzIsImJ0eXBlIjowLCJ2MiI6MSwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MSwiaCI6MX19XSwic2l0ZSI6eyJpZCI6IjEwMjc5IiwiY2F0IjpbIklBQjI0Il0sInBhZ2UiOiJodHRwczovL2hvd3Blb3BsZWhlYWwubmV0LzYwOS1uYW5jeS1zaGV2ZWxsLXdpa2ktcGF1bC1tY2NhcnRuZXlzLXdpZmUtYmlvLWFnZS1oZWlnaHQtd2VpZ2h0LWZhbWlseS0tZmFjdHMifSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiOWU0OTQ3ZjM1NzUxNDY1NDExZmQxYTRmNWMzNThjNzgiLCJmcCI6bnVsbH0sImV4dCI6eyJkdCI6MTY3NTEwMDEwOTc5M319
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /get/?go=1&data=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 HTTP/1.1
Host: 424b0c7454.4e9bff2a3f.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 30 Jan 2023 17:34:56 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://rtbrennab.com/banner/in/show/?mid=8001524460150997912&pid=0&site=10279&sc=NO&usage_type=DCH&subid=471693972&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=howpeopleheal.net&hostname=auc-banner-hz-10&site_id=0&spot_id=10279&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB17&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=22.384157794183196&ml=&tag_ab=a&v2=1&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB17&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D10279%26source%3D471693972%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D10279%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DNancy%252CShevell%252CWiki%252C%28Paul%252CMcCartneys%252CFrau%29%252CBio%252CAlter%252CGr%25C3%25B6%25C3%259Fe%252CGewicht%252CFamilie%252CFakten%252CNancy%252CShevell%252CWiki%252C%28Paul%252CMcCartneys%252CFrau%29%252CBiografie%252CAlter%252CGr%25C3%25B6%25C3%259Fe%252CGewicht%252CFamilie%252CKinder%252CVerm%25C3%25B6gen%252CEthnizit%25C3%25A4t%252CGeburtstag%252CK%25C3%25B6rperstatistik%252CFakten%252CEltern%252CProfil%252Cund%252Cpers%25C3%25B6nliche%252CLebensangelegenheiten%252CNancy%252CShevell%252C%28geb%252C20%252CNovember%252C1959%29%252Cist%252Ceine%252Camerikanische%252CGesch%25C3%25A4ftsfrau%252CSie%252Cwar%252Cehemaliges%252CVorstandsmitglied%252Cder%252C%25E2%2580%259ENew%252CYork%252CMetropolitan%252CTransportation%252CAuthority%25E2%2580%259C%252CSie%252Carbei%2C%26spot_id%3D10279%26p%3Dhttps%253A%252F%252Fhowpeopleheal.net%252F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D22.384157794183196%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Nancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBio%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CFakten%2CNancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBiografie%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CKinder%2CVerm%C3%B6gen%2CEthnizit%C3%A4t%2CGeburtstag%2CK%C3%B6rperstatistik%2CFakten%2CEltern%2CProfil%2Cund%2Cpers%C3%B6nliche%2CLebensangelegenheiten%2CNancy%2CShevell%2C(geb%2C20%2CNovember%2C1959)%2Cist%2Ceine%2Camerikanische%2CGesch%C3%A4ftsfrau%2CSie%2Cwar%2Cehemaliges%2CVorstandsmitglied%2Cder%2C%E2%80%9ENew%2CYork%2CMetropolitan%2CTransportation%2CAuthority%E2%80%9C%2CSie%2Carbei,&stratagem=nlabel-b&ssp=3972
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5b56d73eb0ef41e320c7fa1e86bbbb1a
9a1a8267f6f6775fa58c90c11fc1c72d21ef8e85
09dcc625a6d2d32f0119b1db6ad331320eeb92d032012b88e289626a7b6d3c63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "09DCC625A6D2D32F0119B1DB6AD331320EEB92D032012B88E289626A7B6D3C63"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16563
Expires: Mon, 30 Jan 2023 22:11:00 GMT
Date: Mon, 30 Jan 2023 17:34:57 GMT
Connection: keep-alive
rtbrennab.com/banner/in/show/?mid=8001524460150997912&pid=0&site=10279&sc=NO&usage_type=DCH&subid=471693972&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=howpeopleheal.net&hostname=auc-banner-hz-10&site_id=0&spot_id=10279&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB17&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=22.384157794183196&ml=&tag_ab=a&v2=1&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB17&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D10279%26source%3D471693972%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D10279%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DNancy%252CShevell%252CWiki%252C%28Paul%252CMcCartneys%252CFrau%29%252CBio%252CAlter%252CGr%25C3%25B6%25C3%259Fe%252CGewicht%252CFamilie%252CFakten%252CNancy%252CShevell%252CWiki%252C%28Paul%252CMcCartneys%252CFrau%29%252CBiografie%252CAlter%252CGr%25C3%25B6%25C3%259Fe%252CGewicht%252CFamilie%252CKinder%252CVerm%25C3%25B6gen%252CEthnizit%25C3%25A4t%252CGeburtstag%252CK%25C3%25B6rperstatistik%252CFakten%252CEltern%252CProfil%252Cund%252Cpers%25C3%25B6nliche%252CLebensangelegenheiten%252CNancy%252CShevell%252C%28geb%252C20%252CNovember%252C1959%29%252Cist%252Ceine%252Camerikanische%252CGesch%25C3%25A4ftsfrau%252CSie%252Cwar%252Cehemaliges%252CVorstandsmitglied%252Cder%252C%25E2%2580%259ENew%252CYork%252CMetropolitan%252CTransportation%252CAuthority%25E2%2580%259C%252CSie%252Carbei%2C%26spot_id%3D10279%26p%3Dhttps%253A%252F%252Fhowpeopleheal.net%252F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D22.384157794183196%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Nancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBio%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CFakten%2CNancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBiografie%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CKinder%2CVerm%C3%B6gen%2CEthnizit%C3%A4t%2CGeburtstag%2CK%C3%B6rperstatistik%2CFakten%2CEltern%2CProfil%2Cund%2Cpers%C3%B6nliche%2CLebensangelegenheiten%2CNancy%2CShevell%2C(geb%2C20%2CNovember%2C1959)%2Cist%2Ceine%2Camerikanische%2CGesch%C3%A4ftsfrau%2CSie%2Cwar%2Cehemaliges%2CVorstandsmitglied%2Cder%2C%E2%80%9ENew%2CYork%2CMetropolitan%2CTransportation%2CAuthority%E2%80%9C%2CSie%2Carbei,&stratagem=nlabel-b&ssp=3972
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=8001524460150997912&pid=0&site=10279&sc=NO&usage_type=DCH&subid=471693972&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=howpeopleheal.net&hostname=auc-banner-hz-10&site_id=0&spot_id=10279&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB17&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=22.384157794183196&ml=&tag_ab=a&v2=1&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB17&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D10279%26source%3D471693972%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D10279%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DNancy%252CShevell%252CWiki%252C%28Paul%252CMcCartneys%252CFrau%29%252CBio%252CAlter%252CGr%25C3%25B6%25C3%259Fe%252CGewicht%252CFamilie%252CFakten%252CNancy%252CShevell%252CWiki%252C%28Paul%252CMcCartneys%252CFrau%29%252CBiografie%252CAlter%252CGr%25C3%25B6%25C3%259Fe%252CGewicht%252CFamilie%252CKinder%252CVerm%25C3%25B6gen%252CEthnizit%25C3%25A4t%252CGeburtstag%252CK%25C3%25B6rperstatistik%252CFakten%252CEltern%252CProfil%252Cund%252Cpers%25C3%25B6nliche%252CLebensangelegenheiten%252CNancy%252CShevell%252C%28geb%252C20%252CNovember%252C1959%29%252Cist%252Ceine%252Camerikanische%252CGesch%25C3%25A4ftsfrau%252CSie%252Cwar%252Cehemaliges%252CVorstandsmitglied%252Cder%252C%25E2%2580%259ENew%252CYork%252CMetropolitan%252CTransportation%252CAuthority%25E2%2580%259C%252CSie%252Carbei%2C%26spot_id%3D10279%26p%3Dhttps%253A%252F%252Fhowpeopleheal.net%252F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D22.384157794183196%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Nancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBio%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CFakten%2CNancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBiografie%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CKinder%2CVerm%C3%B6gen%2CEthnizit%C3%A4t%2CGeburtstag%2CK%C3%B6rperstatistik%2CFakten%2CEltern%2CProfil%2Cund%2Cpers%C3%B6nliche%2CLebensangelegenheiten%2CNancy%2CShevell%2C(geb%2C20%2CNovember%2C1959)%2Cist%2Ceine%2Camerikanische%2CGesch%C3%A4ftsfrau%2CSie%2Cwar%2Cehemaliges%2CVorstandsmitglied%2Cder%2C%E2%80%9ENew%2CYork%2CMetropolitan%2CTransportation%2CAuthority%E2%80%9C%2CSie%2Carbei,&stratagem=nlabel-b&ssp=3972
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=8001524460150997912&pid=0&site=10279&sc=NO&usage_type=DCH&subid=471693972&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=howpeopleheal.net&hostname=auc-banner-hz-10&site_id=0&spot_id=10279&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB17&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=22.384157794183196&ml=&tag_ab=a&v2=1&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB17&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D10279%26source%3D471693972%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D10279%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DNancy%252CShevell%252CWiki%252C%28Paul%252CMcCartneys%252CFrau%29%252CBio%252CAlter%252CGr%25C3%25B6%25C3%259Fe%252CGewicht%252CFamilie%252CFakten%252CNancy%252CShevell%252CWiki%252C%28Paul%252CMcCartneys%252CFrau%29%252CBiografie%252CAlter%252CGr%25C3%25B6%25C3%259Fe%252CGewicht%252CFamilie%252CKinder%252CVerm%25C3%25B6gen%252CEthnizit%25C3%25A4t%252CGeburtstag%252CK%25C3%25B6rperstatistik%252CFakten%252CEltern%252CProfil%252Cund%252Cpers%25C3%25B6nliche%252CLebensangelegenheiten%252CNancy%252CShevell%252C%28geb%252C20%252CNovember%252C1959%29%252Cist%252Ceine%252Camerikanische%252CGesch%25C3%25A4ftsfrau%252CSie%252Cwar%252Cehemaliges%252CVorstandsmitglied%252Cder%252C%25E2%2580%259ENew%252CYork%252CMetropolitan%252CTransportation%252CAuthority%25E2%2580%259C%252CSie%252Carbei%2C%26spot_id%3D10279%26p%3Dhttps%253A%252F%252Fhowpeopleheal.net%252F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D22.384157794183196%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Nancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBio%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CFakten%2CNancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBiografie%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CKinder%2CVerm%C3%B6gen%2CEthnizit%C3%A4t%2CGeburtstag%2CK%C3%B6rperstatistik%2CFakten%2CEltern%2CProfil%2Cund%2Cpers%C3%B6nliche%2CLebensangelegenheiten%2CNancy%2CShevell%2C(geb%2C20%2CNovember%2C1959)%2Cist%2Ceine%2Camerikanische%2CGesch%C3%A4ftsfrau%2CSie%2Cwar%2Cehemaliges%2CVorstandsmitglied%2Cder%2C%E2%80%9ENew%2CYork%2CMetropolitan%2CTransportation%2CAuthority%E2%80%9C%2CSie%2Carbei,&stratagem=nlabel-b&ssp=3972 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://howpeopleheal.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.18.0
date: Mon, 30 Jan 2023 17:34:57 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=10279&source=471693972&idzone=0&w=1&h=1&mo=&ve=&site_id=10279&utm1=&utm2=&utm3=&utm4=&ad_tags=Nancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBio%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CFakten%2CNancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBiografie%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CKinder%2CVerm%C3%B6gen%2CEthnizit%C3%A4t%2CGeburtstag%2CK%C3%B6rperstatistik%2CFakten%2CEltern%2CProfil%2Cund%2Cpers%C3%B6nliche%2CLebensangelegenheiten%2CNancy%2CShevell%2C(geb%2C20%2CNovember%2C1959)%2Cist%2Ceine%2Camerikanische%2CGesch%C3%A4ftsfrau%2CSie%2Cwar%2Cehemaliges%2CVorstandsmitglied%2Cder%2C%E2%80%9ENew%2CYork%2CMetropolitan%2CTransportation%2CAuthority%E2%80%9C%2CSie%2Carbei,&spot_id=10279&p=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=22.384157794183196&bf=0.0001
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c06e9f69c396f352e4bf1dafc466c138
4532ded11ab70bc17cd76954ae7bd84053b24752
9bca11253bc51864a397b05d3facde6d92c065f0c6645a5b8b004ae8c06a3e66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BCA11253BC51864A397B05D3FACDE6D92C065F0C6645A5B8B004AE8C06A3E66"
Last-Modified: Sun, 29 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5663
Expires: Mon, 30 Jan 2023 19:09:20 GMT
Date: Mon, 30 Jan 2023 17:34:57 GMT
Connection: keep-alive
btds.zog.link/in/912/?sid=10279&source=471693972&idzone=0&w=1&h=1&mo=&ve=&site_id=10279&utm1=&utm2=&utm3=&utm4=&ad_tags=Nancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBio%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CFakten%2CNancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBiografie%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CKinder%2CVerm%C3%B6gen%2CEthnizit%C3%A4t%2CGeburtstag%2CK%C3%B6rperstatistik%2CFakten%2CEltern%2CProfil%2Cund%2Cpers%C3%B6nliche%2CLebensangelegenheiten%2CNancy%2CShevell%2C(geb%2C20%2CNovember%2C1959)%2Cist%2Ceine%2Camerikanische%2CGesch%C3%A4ftsfrau%2CSie%2Cwar%2Cehemaliges%2CVorstandsmitglied%2Cder%2C%E2%80%9ENew%2CYork%2CMetropolitan%2CTransportation%2CAuthority%E2%80%9C%2CSie%2Carbei,&spot_id=10279&p=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=22.384157794183196&bf=0.0001
302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=10279&source=471693972&idzone=0&w=1&h=1&mo=&ve=&site_id=10279&utm1=&utm2=&utm3=&utm4=&ad_tags=Nancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBio%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CFakten%2CNancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBiografie%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CKinder%2CVerm%C3%B6gen%2CEthnizit%C3%A4t%2CGeburtstag%2CK%C3%B6rperstatistik%2CFakten%2CEltern%2CProfil%2Cund%2Cpers%C3%B6nliche%2CLebensangelegenheiten%2CNancy%2CShevell%2C(geb%2C20%2CNovember%2C1959)%2Cist%2Ceine%2Camerikanische%2CGesch%C3%A4ftsfrau%2CSie%2Cwar%2Cehemaliges%2CVorstandsmitglied%2Cder%2C%E2%80%9ENew%2CYork%2CMetropolitan%2CTransportation%2CAuthority%E2%80%9C%2CSie%2Carbei,&spot_id=10279&p=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=22.384157794183196&bf=0.0001
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=10279&source=471693972&idzone=0&w=1&h=1&mo=&ve=&site_id=10279&utm1=&utm2=&utm3=&utm4=&ad_tags=Nancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBio%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CFakten%2CNancy%2CShevell%2CWiki%2C(Paul%2CMcCartneys%2CFrau)%2CBiografie%2CAlter%2CGr%C3%B6%C3%9Fe%2CGewicht%2CFamilie%2CKinder%2CVerm%C3%B6gen%2CEthnizit%C3%A4t%2CGeburtstag%2CK%C3%B6rperstatistik%2CFakten%2CEltern%2CProfil%2Cund%2Cpers%C3%B6nliche%2CLebensangelegenheiten%2CNancy%2CShevell%2C(geb%2C20%2CNovember%2C1959)%2Cist%2Ceine%2Camerikanische%2CGesch%C3%A4ftsfrau%2CSie%2Cwar%2Cehemaliges%2CVorstandsmitglied%2Cder%2C%E2%80%9ENew%2CYork%2CMetropolitan%2CTransportation%2CAuthority%E2%80%9C%2CSie%2Carbei,&spot_id=10279&p=https%3A%2F%2Fhowpeopleheal.net%2F609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=22.384157794183196&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://howpeopleheal.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Mon, 30 Jan 2023 17:34:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://cdn.1vag.com/1x1.png
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Tue, 31 Jan 2023 17:34:56 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3f6e8ad2c96c76d4d6a5941ff698f4ce
5e2e85ebab0048fd636b9558f8e64ff68ecf1515
cb60bba5370af69741da81d572c51c9e7824cf71ade98eb65149e33240403df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB60BBA5370AF69741DA81D572C51C9E7824CF71ADE98EB65149E33240403DF2"
Last-Modified: Sun, 29 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10999
Expires: Mon, 30 Jan 2023 20:38:16 GMT
Date: Mon, 30 Jan 2023 17:34:57 GMT
Connection: keep-alive
cdn.1vag.com/1x1.png
200 OK 68 B IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /1x1.png HTTP/1.1
Host: cdn.1vag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://howpeopleheal.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 17:34:57 GMT
content-type: image/png
content-length: 68
server: nginx/1.20.1
last-modified: Wed, 15 Apr 2020 13:30:15 GMT
etag: "5e970c67-44"
cache-control: max-age=3600
x-request-id: 28eea0836f6cd5562d41ccabe8fa4a5b
expires: Mon, 30 Jan 2023 18:34:57 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
optad360.mgr.consensu.org/icons/branding-ads.svg
200 OK 0 B URL HTTP/2 optad360.mgr.consensu.org/icons/branding-ads.svg
IP
GET /icons/branding-ads.svg HTTP/1.1
Host: optad360.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Wed, 22 Jun 2022 12:02:24 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 30 Jan 2023 09:54:11 GMT
cache-control: public, max-age=360000000
etag: W/"b0a3aa2e09d4ddd83150d7bd3347c5c0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ikn4Xp3nQv8edIXIZDYvA70lWI9RTOTfBcWyqnKinIHbUX6uDKX_Kg==
age: 27643
X-Firefox-Spdy: h2
js.cabnnr.com/banner-admanager/build.m.js
200 OK 0 B URL HTTP/2 js.cabnnr.com/banner-admanager/build.m.js
IP
ASN #39572 DataWeb Global Group B.V.
GET /banner-admanager/build.m.js HTTP/1.1
Host: js.cabnnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 17:34:53 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 27 Jan 2023 07:04:13 GMT
etag: W/"63d3776d-d174"
content-encoding: gzip
expires: Mon, 30 Jan 2023 17:39:53 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.onnetwork.tv/js/player88/player_utils.min.js?s=1674812418
200 OK 0 B URL HTTP/2 cdn.onnetwork.tv/js/player88/player_utils.min.js?s=1674812418
IP
GET /js/player88/player_utils.min.js?s=1674812418 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:52 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 09:40:18 GMT
vary: Accept-Encoding
etag: W/"63d39c02-2cde"
expires: Fri, 18 Aug 2023 17:34:52 GMT
pragma: public
cache-control: max-age=17280000, public
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.onnetwork.tv/js/adblock_notify.js?s=1675100092
200 OK 0 B URL HTTP/2 cdn.onnetwork.tv/js/adblock_notify.js?s=1675100092
IP
GET /js/adblock_notify.js?s=1675100092 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:52 GMT
content-type: application/javascript
last-modified: Sat, 24 Sep 2022 20:52:18 GMT
vary: Accept-Encoding
etag: W/"632f6e02-86"
expires: Fri, 18 Aug 2023 17:34:52 GMT
pragma: public
cache-control: max-age=17280000, public
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
howpeopleheal.net/609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts
200 OK 0 B URL HTTP/2 howpeopleheal.net/609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts
IP
GET /609-nancy-shevell-wiki-paul-mccartneys-wife-bio-age-height-weight-family--facts HTTP/1.1
Host: howpeopleheal.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 30 Jan 2023 17:34:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4CWp3LPQIpCmj6R%2FoQZtHv7bWTd1oin1kEsJsOwHPxmP5%2FjzGg6b7I817VulZl8TfXQ2Qk05QPvo%2FJ6KcYULtcHpXpjJ3Q1Mb1RTh6s6ZRRU5cAMXNCSMJX0lUZSBCK%2F%2FqBTxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791bf5ec1c701c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
get.optad360.io/sf/6f16e0aa-0e07-486b-965c-5b8f808cae29/plugin.min.js
200 OK 0 B URL HTTP/2 get.optad360.io/sf/6f16e0aa-0e07-486b-965c-5b8f808cae29/plugin.min.js
IP
GET /sf/6f16e0aa-0e07-486b-965c-5b8f808cae29/plugin.min.js HTTP/1.1
Host: get.optad360.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 24 Jan 2023 10:12:57 GMT
last-modified: Tue, 27 Dec 2022 10:16:56 GMT
etag: W/"67116081299082583ff19b79d800d703"
cache-control: public, max-age=604800
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KvAXk0Aym7MZXBEDIJxB5YwVSjgJfxYURsiejlE1J1ZumxqCChD02w==
age: 544914
X-Firefox-Spdy: h2
get.optad360.io/sf/prebid7.17.0.js
200 OK 0 B URL HTTP/2 get.optad360.io/sf/prebid7.17.0.js
IP
GET /sf/prebid7.17.0.js HTTP/1.1
Host: get.optad360.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 24 Jan 2023 01:26:05 GMT
last-modified: Mon, 03 Oct 2022 06:53:57 GMT
etag: W/"840fa482840c0b1f014b3c14f6e0ab2e"
cache-control: public, max-age=360000000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yO3J3h8BNXThpSRQPj-vM0Xb9p5fyIsGiPesh-Gk_KW2u9ETFu0DJA==
age: 576527
X-Firefox-Spdy: h2
cdn.onnetwork.tv/sd/9/1/919027.mp4?sev=upUyBtnL03df6Dj1-K2DUw&e=1675110892&u=11947
206 Partial Content 0 B URL HTTP/2 cdn.onnetwork.tv/sd/9/1/919027.mp4?sev=upUyBtnL03df6Dj1-K2DUw&e=1675110892&u=11947
IP
GET /sd/9/1/919027.mp4?sev=upUyBtnL03df6Dj1-K2DUw&e=1675110892&u=11947 HTTP/1.1
Host: cdn.onnetwork.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://howpeopleheal.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: XO.webservantpro
date: Mon, 30 Jan 2023 17:34:53 GMT
content-type: video/mp4
content-length: 8016814
last-modified: Thu, 17 Nov 2022 10:36:58 GMT
etag: "63760eca-7a53ae"
strict-transport-security: max-age=31536000
access-control-allow-origin: *
content-range: bytes 0-8016813/8016814
X-Firefox-Spdy: h2
188.114.96.1
162.55.139.130
54.230.111.11
109.206.181.2
23.36.77.32
149.202.118.64
104.18.26.85
88.212.202.52
87.98.234.81
93.184.220.29