algooru.com/
301 Moved Permanently 305 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 186df976ca45e7ab5eb56d5321272358
8e2c5483b78f83af57ca3e653e8813ebec4533ae
57dbc2f323137090c3d5a4f9da441f3491cf43a6145eb7c256dfb2a9ac49fbcb
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 25 Nov 2022 10:07:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Location: https://algooru.com/
Content-Length: 305
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9014
Expires: Fri, 25 Nov 2022 12:37:22 GMT
Date: Fri, 25 Nov 2022 10:07:08 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4066
Cache-Control: max-age=91909
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:08 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:38:57 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19676
Expires: Fri, 25 Nov 2022 15:35:04 GMT
Date: Fri, 25 Nov 2022 10:07:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 09:19:04 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2884
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /m81I/z6vPSB/al8/RjuRWnqlpDL56otUvTVXdyiKPj5ikDyApf3zcASP3xj1xUsx1eger+2OQ8=
x-amz-request-id: S48EYA0HN79DF90X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 09:40:45 GMT
age: 1583
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:07:08 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 09:08:53 GMT
cache-control: public,max-age=3600
age: 3496
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611ba1156a826c427bc195cec1657adc
56276ae5d865c964eff135c0faa9947edc3ee778
34cee630e34562a88b6bcc7d7e341f09715b90de9affd66d582d792674d30c1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34CEE630E34562A88B6BCC7D7E341F09715B90DE9AFFD66D582D792674D30C1C"
Last-Modified: Thu, 24 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 25 Nov 2022 16:07:09 GMT
Date: Fri, 25 Nov 2022 10:07:09 GMT
Connection: keep-alive
algooru.com/
200 OK 2.4 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1672)
Hash 57b1f48443021a7861296ba5d5ed90a5
47c503ada55119c4bb8cdb16fc197cd1905933ec
fdff39a1389f918c141a1e3fc90edb6a5d7d7ed168a0343fbc6d201bfb53f264
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:48 GMT
ETag: "1917-5ed7d75f0b454-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2366
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
ocsp.digicert.com/
200 OK 471 B IP
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3103
Cache-Control: max-age=85883
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:09 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 09:58:32 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:07:09 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 216138
expires: Wed, 15 Nov 2023 10:07:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eUg76rk1fFalckbYwlZ9%2BXvpcsgX6ZDsxxxaHqrKhEzzVj2QPWD9gy5QkpyMPMoMBcGvJ0MKY0HMkcqLoA3UC32YDsMatUqPiynadefB0m3J2a4%2BaiduALE2rMtktSDmzQN0zATw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f99363cb26b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
algooru.com/runtime.2d53c05c2cb53493.js
200 OK 1.5 kB URL HTTP/1.1 algooru.com/runtime.2d53c05c2cb53493.js
IP
File type ASCII text, with very long lines (2852), with no line terminators
Hash 2e401ab092287ca1d5a29e721ecbf221
59f8883cbf0f54327fae53c6a2474717343e3afd
cf7d1fdc98067d6b1d6f606c90b5c13da5f8aadf6a41cb7ce0e4000673015714
Analyzer Verdict Alert fortinet Malware
GET /runtime.2d53c05c2cb53493.js HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:30 GMT
ETag: "b24-5ed7d74d17986-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1541
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.googletagmanager.com/gtm.js?id=GTM-MLV38RF
200 OK 89 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MLV38RF
IP
File type ASCII text, with very long lines (19029)
Hash f54b6756e0b6ddebb0bb9aff933e03db
f2f696c59f05f79c4fe1591d07f6946b9d1076b7
029d3f6d50e22cc5fe432f0e7c0b19d22887c65813d6c4edaaf80cbcc7bde4a3
GET /gtm.js?id=GTM-MLV38RF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 10:07:09 GMT
expires: Fri, 25 Nov 2022 10:07:09 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88552
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: K1UwrzEMgBHAEgyMWYvQow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sj5wu78I40eJBEsVoSv7C3KLkmY=
algooru.com/polyfills.b99f590e5c2a266e.js
200 OK 12 kB URL HTTP/1.1 algooru.com/polyfills.b99f590e5c2a266e.js
IP
File type ASCII text, with very long lines (33857), with no line terminators
Hash c133291684f242c9e7ca33df62bc67ed
a00777ae04ca8667db36ded18aeafb5393011d69
29f02b294d7399f1a8f1ed86564c7f61b023f6a9719e4033add0c0786b03ffec
Analyzer Verdict Alert fortinet Malware
GET /polyfills.b99f590e5c2a266e.js HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:49 GMT
ETag: "8441-5ed7d75fa68b0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11984
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
algooru.com/styles.40ef5a3221d10377.css
200 OK 16 kB URL HTTP/1.1 algooru.com/styles.40ef5a3221d10377.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a74f99a1df82f9440fc71ec0418a266b
2c60afeb198e765cf0345468445fc7a827a79a72
b6a9f58e55a4af00fde0311ac0f2f1069523e8a6b20892cacfd5f90b0d5e48ce
GET /styles.40ef5a3221d10377.css HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:40 GMT
ETag: "14f6f-5ed7d75723d86-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16386
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
sc-static.net/scevent.min.js
200 OK 12 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (27639), with no line terminators
Hash 6d231d01533de87f1978527ff1582e85
2681a231f71539018d1e7ef81b21035159e70067
dd8eda4130a189c4da20100752803ccb737e26f5c93f97f8db822f29f545be19
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 11968
server: CloudFront
date: Fri, 25 Nov 2022 10:07:09 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Sat, 26 Nov 2022 09:36:07 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6EXoA-qMyGonGYHBl5b0dCH0nU5ecA9EcBC9zRBF53PRel_crZzLqg==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 89638810696cc099063df1a4850c09fa
4e78fc7d2214c652351580129da479cf1c5b4dd3
8c5f93f39b83a49aa9b4c6bd068ae93b1f1e9ac6787099552c7a4d782e8cc430
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2718
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:09 GMT
Last-Modified: Fri, 25 Nov 2022 09:21:51 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 89638810696cc099063df1a4850c09fa
4e78fc7d2214c652351580129da479cf1c5b4dd3
8c5f93f39b83a49aa9b4c6bd068ae93b1f1e9ac6787099552c7a4d782e8cc430
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2718
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:09 GMT
Last-Modified: Fri, 25 Nov 2022 09:21:51 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/cm/i?pid=cdcbc10a-e92e-49ec-b07a-550cda704469&u_scsid=fe7667de-f864-42b7-afd6-48688d80b5b1&u_sclid=495081da-62d1-4d9a-a5a9-6c2ea0fca5dc
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=cdcbc10a-e92e-49ec-b07a-550cda704469&u_scsid=fe7667de-f864-42b7-afd6-48688d80b5b1&u_sclid=495081da-62d1-4d9a-a5a9-6c2ea0fca5dc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=cdcbc10a-e92e-49ec-b07a-550cda704469&u_scsid=fe7667de-f864-42b7-afd6-48688d80b5b1&u_sclid=495081da-62d1-4d9a-a5a9-6c2ea0fca5dc HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:07:09 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 89638810696cc099063df1a4850c09fa
4e78fc7d2214c652351580129da479cf1c5b4dd3
8c5f93f39b83a49aa9b4c6bd068ae93b1f1e9ac6787099552c7a4d782e8cc430
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2719
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Last-Modified: Fri, 25 Nov 2022 09:21:51 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
algooru.com/main.31c26e8f52d0f5ca.js
200 OK 105 kB URL HTTP/1.1 algooru.com/main.31c26e8f52d0f5ca.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (105067 bytes)
Hash 4916b8ed22e2937e81556185ed8fa084
e5161a61cfa9f7c3426de23e4c5336a4846045d4
a984261bc524ebf43860046ff09efe60b9cd2ad3b064c6c8a07ebf77bf69aa9f
Analyzer Verdict Alert fortinet Malware
GET /main.31c26e8f52d0f5ca.js HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:47 GMT
ETag: "54a36-5ed7d75d8699d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
analytics.tiktok.com/i18n/pixel/config.js?sdkid=CC1SV4BC77U2GLNDQRM0&hostname=algooru.com
200 OK 20 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/config.js?sdkid=CC1SV4BC77U2GLNDQRM0&hostname=algooru.com
IP
ASN #20940 Akamai International B.V.
File type C source, Unicode text, UTF-8 text, with very long lines (58149)
Hash 80a230cd0c857562461121360ded2389
d3e6aacf6c7ae72e2d3c7757a6fab058a0f41ad5
0637b2166b73d0e172d921242910d8102ebf2ed02e323a0e6b47807aa09c5aef
GET /i18n/pixel/config.js?sdkid=CC1SV4BC77U2GLNDQRM0&hostname=algooru.com HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202211251007091981DB10F4D83888D09C
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601c5f6a04a777121cde7d9af65489455eb6a04c21ea236d980e0f533b2c1d21a16d3ecbac6d699194a2ccec8ee79d556fe025e5b2902b445d10169d4ff44b651b
content-encoding: gzip
expires: Fri, 25 Nov 2022 10:07:10 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 10:07:10 GMT
content-length: 19742
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
set-cookie: _ttp=2I2DYExQviFpBqWUk71cbXKGMS7; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=2, origin; dur=107
x-origin-response-time: 108,23.36.79.13
x-akamai-request-id: 74a8fa56
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/identify.js
200 OK 42 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/identify.js
IP
ASN #20940 Akamai International B.V.
Hash bbfec25ca99df2ed7559ac943117a61e
57bfc1aa5b79bde4bc4ed33cb89d7688399e90ca
9f5e464713f153ca4c5357de2fc7e060e644c991da1a2bc7ff6e06f14157409e
GET /i18n/pixel/identify.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221125100709D632792170168A89B4CB
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601db5ac1833c61fc7a5ce608d9719a17acc6dd0764d36aabb69e1f14da9faf4a31927a25b095354fff5916925ec3721ae94de74fd8df7b35f8717fc499d63182b0f974a6f9e574e8f2c4c8287b33ffd58
content-encoding: gzip
x-origin-response-time: 10,184.25.157.152
x-akamai-request-id: 3d41e1ce.74a8fa30
expires: Fri, 25 Nov 2022 10:07:10 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 10:07:10 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a184-25-157-152.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=110, origin; dur=10, inner; dur=2
x-parent-response-time: 119,23.36.79.13
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 763
Origin: https://algooru.com
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _ttp=2I2DYExQviFpBqWUk71cbXKGMS7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20221125100710FB8F6BC3B1CFA274EB37
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601c5f6a04a777121cde7d9af65489455e4e22f13de4ba8f1957b523df326b6df977d2f1bbcc9e4f31001c0c6b7edeaceca7debaee272dd27d1ea216ca0c68a3f0
expires: Fri, 25 Nov 2022 10:07:10 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 10:07:10 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=14, cdn-cache; desc=MISS, edge; dur=23, origin; dur=109
x-origin-response-time: 129,23.36.79.13
x-akamai-request-id: 74a8fcb2
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 311e9c251eb6faaaf76dc1e87d67d08c
12dc457fdb0d8e5d9c351ae406d311f4a9d80f00
47a39e35b8e6c1c668445e9a36a564de8865ea62c753a577476157c7f40e8756
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3663
Cache-Control: max-age=135403
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Etag: "637ff36a-2d7"
Expires: Sat, 26 Nov 2022 23:43:53 GMT
Last-Modified: Thu, 24 Nov 2022 22:42:50 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 727
algooru.com/124.7b6582db49b2d689.js
200 OK 148 kB URL HTTP/1.1 algooru.com/124.7b6582db49b2d689.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (148123 bytes)
Hash 1116fe23536b607eeeb9daeed65d114e
e0d35c8fc452779dba1ca7c6c61be32b89572672
251854a5168cb3008b25df51ee9c73e5fc973b85f0c0bc25b3b59defa245fb9a
Analyzer Verdict Alert fortinet Malware
GET /124.7b6582db49b2d689.js HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.0.1669370829.60.0.0; _ga=GA1.1.757579776.1669370829
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:10 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:34 GMT
ETag: "a6529-5ed7d7510d42d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 08:41:08 GMT
expires: Fri, 25 Nov 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 5162
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.mxpnl.com/libs/mixpanel-js-wrapper.js
200 OK 6.6 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-js-wrapper.js
IP
File type ASCII text, with very long lines (501)
Hash 2fcd4b5a41af18b592774f266a0dc591
01300cc2fe7f5b953dbcbdc90bebc5e48232955c
f7f3e6ee42d0056db510a3c59bb5f0de8015e0f7699ef5a238f775c415e8991a
GET /libs/mixpanel-js-wrapper.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycds6N6wV9hzZDjbG2H8LqlQPS6zdloBmf4z-VUJUJ-WIQu8W5aqbLuA9F8OwxxV95Ex03blrCs60KbGq0l9Vt1cLPQ
x-goog-generation: 1640032597520874
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 6622
x-goog-hash: crc32c=4kYBnQ==, md5=L81LWkGvGLWSd08mag3FkQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 6622
access-control-allow-origin: *
server: UploadServer
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
date: Fri, 25 Nov 2022 09:31:51 GMT
expires: Fri, 25 Nov 2022 10:31:51 GMT
cache-control: public, max-age=3600
age: 2119
last-modified: Mon, 20 Dec 2021 20:36:37 GMT
etag: "2fcd4b5a41af18b592774f266a0dc591"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
algooru.com/favicon.ico
200 OK 14 kB IP
File type PNG image data, 214 x 164, 8-bit/color RGBA, non-interlaced\012- data
Hash feebd17b0c9a15d3fa1614947d9aa553
1739ae533efeabe06cc5a840fe88035f59176c2e
d996a82233f0eb6e4eb1289a2fcab12d9b9ab324decad620af90fb35d9867a85
GET /favicon.ico HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.0.1669370829.60.0.0; _ga=GA1.1.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:10 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:28 GMT
ETag: "37b3-5ed7d74b1fb13"
Accept-Ranges: bytes
Content-Length: 14259
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
ocsp.digicert.com/
200 OK 471 B IP
Hash 4014b3f4adf5c5373118894c244afb12
1198e79d0e1e14408e3c0084a3f479122020a723
affc5983ee364e0310c082b225a90cff4ba2d01b68d2cdaf6b5ecbe780cad66d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4000
Cache-Control: max-age=158762
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Etag: "63804d58-1d7"
Expires: Sun, 27 Nov 2022 06:13:12 GMT
Last-Modified: Fri, 25 Nov 2022 05:06:32 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-39WHTLX7FH>m=2oeb90&_p=793676285&_gaz=1&cid=757579776.1669370829&ul=en-us&sr=1280x1024&_s=1&sid=1669370829&sct=1&seg=0&dl=https%3A%2F%2Falgooru.com%2F&dt=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-39WHTLX7FH>m=2oeb90&_p=793676285&_gaz=1&cid=757579776.1669370829&ul=en-us&sr=1280x1024&_s=1&sid=1669370829&sct=1&seg=0&dl=https%3A%2F%2Falgooru.com%2F&dt=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-39WHTLX7FH>m=2oeb90&_p=793676285&_gaz=1&cid=757579776.1669370829&ul=en-us&sr=1280x1024&_s=1&sid=1669370829&sct=1&seg=0&dl=https%3A%2F%2Falgooru.com%2F&dt=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://algooru.com
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://algooru.com
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/10967635816/?random=1669370829255&cv=11&fst=1669370829255&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&auid=108515475.1669370829&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 952 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10967635816/?random=1669370829255&cv=11&fst=1669370829255&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&auid=108515475.1669370829&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2283), with no line terminators
Hash 3ecf897bb827f561d8b5676d9aa0d848
7e9a0fd19dac14159129ca84acc91a1ada37e8ad
a4a434930453db95867ac9889388dadc715eb294eb4a869d04ce59795298ba24
GET /pagead/viewthroughconversion/10967635816/?random=1669370829255&cv=11&fst=1669370829255&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&auid=108515475.1669370829&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 952
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 10:22:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/373515932/?random=1669370829189&cv=11&fst=1669370829189&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&auid=108515475.1669370829&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 948 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/373515932/?random=1669370829189&cv=11&fst=1669370829189&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&auid=108515475.1669370829&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2279), with no line terminators
Hash 77f0c84daeb97eced9b5ed5570de9032
9e89944ad8625b6449e6059b2c4220aed164948e
de12f95113bdbb9b0eb27be2364338728a8142a6ffd7bc402f4f0d193b4ea178
GET /pagead/viewthroughconversion/373515932/?random=1669370829189&cv=11&fst=1669370829189&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&auid=108515475.1669370829&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 948
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 10:22:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 311e9c251eb6faaaf76dc1e87d67d08c
12dc457fdb0d8e5d9c351ae406d311f4a9d80f00
47a39e35b8e6c1c668445e9a36a564de8865ea62c753a577476157c7f40e8756
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3663
Cache-Control: max-age=135403
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Etag: "637ff36a-2d7"
Expires: Sat, 26 Nov 2022 23:43:53 GMT
Last-Modified: Thu, 24 Nov 2022 22:42:50 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 727
stats.g.doubleclick.net/g/collect?v=2&tid=G-39WHTLX7FH&cid=757579776.1669370829>m=2oeb90&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-39WHTLX7FH&cid=757579776.1669370829>m=2oeb90&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-39WHTLX7FH&cid=757579776.1669370829>m=2oeb90&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://algooru.com
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://algooru.com
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-39WHTLX7FH&cid=757579776.1669370829>m=2oeb90&aip=1&z=29164844
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-39WHTLX7FH&cid=757579776.1669370829>m=2oeb90&aip=1&z=29164844
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-39WHTLX7FH&cid=757579776.1669370829>m=2oeb90&aip=1&z=29164844 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: u2cQ8eLXYOvC5aVzx55Ji8flSsORSyI/8pQrNtuyb+Xr/CPAci2TJ8FgSGY/k0EqrohdrEZwFz4us5z8/TN7Fg==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1679558926
date: Fri, 25 Nov 2022 10:07:10 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4014b3f4adf5c5373118894c244afb12
1198e79d0e1e14408e3c0084a3f479122020a723
affc5983ee364e0310c082b225a90cff4ba2d01b68d2cdaf6b5ecbe780cad66d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4000
Cache-Control: max-age=158762
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Etag: "63804d58-1d7"
Expires: Sun, 27 Nov 2022 06:13:12 GMT
Last-Modified: Fri, 25 Nov 2022 05:06:32 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-222090364-1&cid=757579776.1669370829&jid=1795917495&gjid=1497435244&_gid=1350352279.1669370830&_u=YADAAEAAAAAAACAAI~&z=284140363
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-222090364-1&cid=757579776.1669370829&jid=1795917495&gjid=1497435244&_gid=1350352279.1669370830&_u=YADAAEAAAAAAACAAI~&z=284140363
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-222090364-1&cid=757579776.1669370829&jid=1795917495&gjid=1497435244&_gid=1350352279.1669370830&_u=YADAAEAAAAAAACAAI~&z=284140363 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://algooru.com
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://algooru.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
algooru.com/108.d19cd1e0f60b0440.js
200 OK 593 kB URL HTTP/1.1 algooru.com/108.d19cd1e0f60b0440.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 593 kB (593329 bytes)
Hash 2bb1b745dc44bd09e7f286b747e9367e
3ba1262e2a1e1471cbc085e5375e9b874d00222d
ab1961e6737fdb125ffe9ba4c07c7d25e89482b6837aac93ad2ba9dd4c851510
Analyzer Verdict Alert fortinet Malware
GET /108.d19cd1e0f60b0440.js HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.0.1669370829.60.0.0; _ga=GA1.1.757579776.1669370829
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:10 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:35 GMT
ETag: "d6c9b-5ed7d75247b65-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-222090364-1&cid=757579776.1669370829&jid=1795917495&_u=YADAAEAAAAAAACAAI~&z=4022823
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-222090364-1&cid=757579776.1669370829&jid=1795917495&_u=YADAAEAAAAAAACAAI~&z=4022823
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-222090364-1&cid=757579776.1669370829&jid=1795917495&_u=YADAAEAAAAAAACAAI~&z=4022823 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17090
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 10:07:10 GMT
Connection: keep-alive
www.google.no/pagead/1p-user-list/373515932/?random=1669370829189&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1458529431&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/373515932/?random=1669370829189&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1458529431&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/373515932/?random=1669370829189&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1458529431&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/10967635816/?random=1669370829255&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3458331321&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10967635816/?random=1669370829255&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3458331321&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10967635816/?random=1669370829255&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3458331321&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17090
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 10:07:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17090
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 10:07:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17090
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 10:07:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5863138af1ddbba34a7856242a7b3a06
2eba66ff6539388c48562503e8d11ff0e060350a
d1543e1b803a07095148b743925eebbbf21f566a2df9b785a1a9d48c5604496c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8917
x-amzn-requestid: 10f3b269-9437-476d-ae4f-a0ac3fb78491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wEIwoAMF8uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-4cfeecf4553b26381ed11875;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6ibPrCdDNQqWzxiVYDsl87yUfTP8sUmu22GbhBdDHJruil0qxbw7Fw==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:00 GMT
etag: "2eba66ff6539388c48562503e8d11ff0e060350a"
content-type: image/jpeg
age: 45130
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f6292a2988fb4505d0098553b8e99ddc
9b8aafcda0e22edcc16d3048f4b88659d3b42419
16b7b473229c5e519ab81b385c50277424f3f3b2a5d7647035e84ba58e44f3be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6385
x-amzn-requestid: 4c2a84f7-f038-4f5a-86c2-5c8ce1a48c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cI5NVFMAoAMFn7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63803bee-45c6411c2430e2375f530dd8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 03:52:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fj82i9qJmEiUy2DOkkowq8WRyzupMwNyQqu110sJ3o72HEW4yb7bjQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:22:46 GMT
age: 9864
etag: "9b8aafcda0e22edcc16d3048f4b88659d3b42419"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d43ec6824d4fdc4d31b8c245bf8c5849
81f85633fca39972d8e0bf9a4ec7cd999e54564f
b0e521b23879af86102f46a9ec412faf6345df31a97a7b58880f63f81fdcd0c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7900
x-amzn-requestid: a9d184b1-3b4a-4ca6-9ad2-ce3aac10f422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB91H2IIAMFjGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38b-5732361f36c023c22c922ee9;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: nVe_gcpscsmf4QGPseIR2poHwzxp_mfWODrAz8Oy0ePkMgnIREhCag==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:07 GMT
etag: "81f85633fca39972d8e0bf9a4ec7cd999e54564f"
content-type: image/jpeg
age: 45123
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4006a9037ab5f28dca62b0aa7a704c41
74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 28782
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8784bb7a8b88736a6016f712e3183bf3
b0ddc1555d2506177adcdcea77864d75f1245d07
8e331713b0ad0b5670dd33dfdadde665e076a40ddb80905d4df89876d49803d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11743
x-amzn-requestid: 9ab0aba7-5cd1-4f6c-8984-dc221e1cbf8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cICD-F7joAMFqmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe3b2-152ba5f1495a44447356cdab;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oWSNdsrz59sJC2znLnFqa_Zm3T14_d6j-rjzDQe4yV22Dy2Qc4Swaw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:54:45 GMT
age: 43945
etag: "b0ddc1555d2506177adcdcea77864d75f1245d07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f4b5f150-a5dc-40bf-93b9-394c294a51cb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEmkRFSnIAMF5vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e8481-74454bee1a1ec6d506f3d75b;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 20:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZVv8iTGCYV-IiBJ6KwNSG1ZWSEwClaQopUejSqZq0S1wd782lRoyKA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:59:49 GMT
age: 40041
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/373515932/?random=1669370829189&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1458529431&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/373515932/?random=1669370829189&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1458529431&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/373515932/?random=1669370829189&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1458529431&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.43/clarity.js
200 OK 55 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 441723b72633b1ac9757ad7c63168005
806166ca9ebb5839dd90a5e5c9335e3e0b18c169
cc8a16ce849d72f106bd67187e4b60c20da3093375202bf0b53f23e8f40a8b11
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 55116
content-type: application/javascript;charset=utf-8
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8fceb15c2864c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0zpOAYwAAAADkJbONorbGRZJhsv2cZQcWT1NMMjMxMDUwMjA1MDI3ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Fri, 25 Nov 2022 10:07:10 GMT
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10967635816/?random=1669370829255&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3458331321&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10967635816/?random=1669370829255&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3458331321&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10967635816/?random=1669370829255&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Falgooru.com%2F&tiba=%D8%A7%D9%84%D9%82%D9%88%D8%B1%D9%88%20-%20%D8%A7%D8%AD%D8%AC%D8%B2%20%D9%85%D8%B9%20%D8%A3%D9%81%D8%B6%D9%84%20%D9%85%D8%AF%D8%B1%D8%B3%D9%8A%D9%86%20%D8%AE%D8%B5%D9%88%D8%B5%D9%8A%D9%8A%D9%86%20%D8%A8%D8%A7%D9%84%D9%85%D9%85%D9%84%D9%83%D8%A9&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3458331321&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-222090364-1&cid=757579776.1669370829&jid=1795917495&_u=YADAAEAAAAAAACAAI~&z=4022823
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-222090364-1&cid=757579776.1669370829&jid=1795917495&_u=YADAAEAAAAAAACAAI~&z=4022823
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-222090364-1&cid=757579776.1669370829&jid=1795917495&_u=YADAAEAAAAAAACAAI~&z=4022823 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
algooru.com/assets/Vector%20(3).png
200 OK 520 B URL HTTP/1.1 algooru.com/assets/Vector%20(3).png
IP
File type PNG image data, 16 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 62810f42013301ff38e4b12cc15040b5
e33d7b8bb15855dc014f4d411d4117755c67fc1e
37728a29e945c48aaca40591233e77bef177d5506656b43dc21f88a28ff1f16e
GET /assets/Vector%20(3).png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:00 GMT
ETag: "208-5ed7d76a2124d"
Accept-Ranges: bytes
Content-Length: 520
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/image%2012.png
200 OK 3.0 kB URL HTTP/1.1 algooru.com/assets/image%2012.png
IP
File type PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced\012- data
Hash adfba5c36235f7bc5dc321846c16904a
c1873289e498fe7fa12cc08ac04d71bb141e3f3b
75cdf62959141949caf192f2e575e74f6f85a405818b9b24556223013c636834
GET /assets/image%2012.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:41 GMT
ETag: "b99-5ed7d790b8f77"
Accept-Ranges: bytes
Content-Length: 2969
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/gold-logo%201.png
200 OK 4.6 kB URL HTTP/1.1 algooru.com/assets/gold-logo%201.png
IP
File type PNG image data, 78 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 9331ba1e9d5e06812f48400db577a276
e11497c830fd689de231719efc316850168607bc
13663b64d174020aad5b17b88feb18b15d481600207fec6c3ce1fc0689bfe794
GET /assets/gold-logo%201.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:06 GMT
ETag: "11ea-5ed7d76f9792a"
Accept-Ranges: bytes
Content-Length: 4586
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/1529796-1731261039%201.png
200 OK 2.0 kB URL HTTP/1.1 algooru.com/assets/1529796-1731261039%201.png
IP
File type PNG image data, 59 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash c37d3d4c1e28cbbc9f6c33fa2a05c61c
9ca1803c79cc6fd14e2697e525003411edab5db8
dcd01030b5581442fae666a975b7e8780b3442f7c94d36423f543bf770bd0798
GET /assets/1529796-1731261039%201.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:59 GMT
ETag: "7ea-5ed7d768eb935"
Accept-Ranges: bytes
Content-Length: 2026
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=CC1SV4BC77U2GLNDQRM0
200 OK 52 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=CC1SV4BC77U2GLNDQRM0
IP
ASN #20940 Akamai International B.V.
Hash fbe4bfdf939758f0d8ca1778f467ceca
c2326ab2e3654dd7485a3e6ede47c2d6ce634ae0
b4033743365dbfaf21e2ed8ecaf751e6d5a3ee3d04fa527980170443d2995a84
GET /i18n/pixel/sdk.js?sdkid=CC1SV4BC77U2GLNDQRM0 HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _ttp=2I2DYExQviFpBqWUk71cbXKGMS7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221125100711F8B1CC88D356CD8A4D0E
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601c5f6a04a777121cde7d9af65489455e1ee7f013dbc087de75de887280d1698129b3d1ee42ebc0e46004759eff30eb08440c57f128102a3910fd47f3f6a8117d
content-encoding: gzip
expires: Fri, 25 Nov 2022 10:07:11 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 10:07:11 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=2, cdn-cache; desc=MISS, edge; dur=1, origin; dur=100
x-origin-response-time: 100,23.36.79.13
x-akamai-request-id: 74a906c6
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cairo/v22/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1biKi2CikE0n8H9.woff
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/cairo/v22/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1biKi2CikE0n8H9.woff
IP
File type Web Open Font Format, TrueType, length 15564, version 1.1\012- data
Hash ca2c1e151e5dc4ec78b7283e8a056d03
4c45e4febf58a440dd09dc12dff9d22f223b770e
9374f08d9f8af8ce243f6427cf5d3bac1f22c82ff4c31656f8c309d9546455e6
GET /s/cairo/v22/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1biKi2CikE0n8H9.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://algooru.com
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 21:30:44 GMT
expires: Sun, 19 Nov 2023 21:30:44 GMT
cache-control: public, max-age=31536000
age: 477387
last-modified: Tue, 08 Nov 2022 19:56:05 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cairo/v22/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1PiKi2CikE0nw.woff
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/cairo/v22/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1PiKi2CikE0nw.woff
IP
File type Web Open Font Format, TrueType, length 18336, version 1.1\012- data
Hash 9408814e1e3251281936b5976d9da3e4
00238005408bed7df8ef7b1fb817347b4e7bf4a8
ae395c8d28d27877570f1a8aeb6a7fff6272f51723608ae4ebd75b34dfd7b62f
GET /s/cairo/v22/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1PiKi2CikE0nw.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://algooru.com
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 11:31:59 GMT
expires: Thu, 23 Nov 2023 11:31:59 GMT
cache-control: public, max-age=31536000
age: 167712
last-modified: Tue, 08 Nov 2022 19:56:42 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
algooru.com/assets/Al-Arabiya_logo_(old)%201.png
200 OK 1.3 kB URL HTTP/1.1 algooru.com/assets/Al-Arabiya_logo_(old)%201.png
IP
File type PNG image data, 63 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash ba72d1e93ac6dfa6a3072cf9b4f4d536
8dc3dd31753e3b3f05d003adac1d15ba796fd8f4
9232c90719b1faec4b6534aa3a1571f288eb0254b5c87569f20ba860ec4d9084
GET /assets/Al-Arabiya_logo_(old)%201.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:02 GMT
ETag: "4ff-5ed7d76ba5d03"
Accept-Ranges: bytes
Content-Length: 1279
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
algooru.com/flags.f73aa829a0084837.png
200 OK 71 kB URL HTTP/1.1 algooru.com/flags.f73aa829a0084837.png
IP
File type PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 416250f60d785a2e02f17e054d2e4e44
21572c9751e5a3dc20395befa0fcb349c32c4811
0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55
GET /flags.f73aa829a0084837.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/styles.40ef5a3221d10377.css
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:55 GMT
ETag: "114c9-5ed7d764d1c6f"
Accept-Ranges: bytes
Content-Length: 70857
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
algooru.com/assets/image%20130.png
200 OK 2.5 kB URL HTTP/1.1 algooru.com/assets/image%20130.png
IP
File type PNG image data, 88 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dda4c401521eed650f3e798d4ca6f54
dfe85ed2b8d6eb5a7ab2bfe4282d5bb1832105b0
d55bb4d492040a0aadf43b767a7abd9df9928af31cff8e03f2aa8abb4a536730
GET /assets/image%20130.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:00 GMT
ETag: "9c5-5ed7d76a6f44b"
Accept-Ranges: bytes
Content-Length: 2501
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
algooru.com/Whyte-Regular.3739382ef0e4d2d7.woff2
200 OK 38 kB URL HTTP/1.1 algooru.com/Whyte-Regular.3739382ef0e4d2d7.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 38352, version 1.0\012- data
Hash ff152ae6a0338b0227575eedcc722e4a
0f6f02a40515dc5cded3a6d1536a2c566fed01a5
41e080b644229bde8ae13c021e0e1129b79cdd1c459fe318b51911fc8c665966
Analyzer Verdict Alert fortinet Malware
GET /Whyte-Regular.3739382ef0e4d2d7.woff2 HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://algooru.com/styles.40ef5a3221d10377.css
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:54 GMT
ETag: "95d0-5ed7d76484a11"
Accept-Ranges: bytes
Content-Length: 38352
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff2
algooru.com/assets/Group%2038.png
200 OK 3.4 kB URL HTTP/1.1 algooru.com/assets/Group%2038.png
IP
File type PNG image data, 300 x 321, 8-bit/color RGBA, non-interlaced\012- data
Hash 0234c5ab385ce7162e1a186f3987b039
040578d07dc6c8e7f53e9199ba710f1932a5ee82
ac2d806c06670a9f458f20a844bd1cd45d59fca3c5dd8599f154fde461a915be
GET /assets/Group%2038.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:56 GMT
ETag: "d63-5ed7d766305c6"
Accept-Ranges: bytes
Content-Length: 3427
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/.png
200 OK 2.4 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1672)
Hash 57b1f48443021a7861296ba5d5ed90a5
47c503ada55119c4bb8cdb16fc197cd1905933ec
fdff39a1389f918c141a1e3fc90edb6a5d7d7ed168a0343fbc6d201bfb53f264
GET /assets/.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:48 GMT
ETag: "1917-5ed7d75f0b454-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2366
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html
www.clarity.ms/tag/dg9m4ye8ga
200 OK 2.6 kB URL HTTP/2 www.clarity.ms/tag/dg9m4ye8ga
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d96ea10d0d768b021bc7d99c5b0c4f1a
b63bd55b6aed771ced8b2b4fbaffecf14c76fdaf
32b1f44198aac53220c8ac0aee124be5f52e24627e9ef3545eefd6ecf073697b
GET /tag/dg9m4ye8ga HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=cf6db4d05c224cce9ef702b9163b6265.20221125.20231125; expires=Sat, 25 Nov 2023 10:07:11 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
x-cache: CONFIG_NOCACHE
x-azure-ref: 0z5OAYwAAAABZfH63ZcQURoHkrifK+delT1NMMjMxMDUwMjA1MDI3ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Fri, 25 Nov 2022 10:07:10 GMT
X-Firefox-Spdy: h2
algooru.com/assets/Vector-section-2.png
200 OK 3.2 kB URL HTTP/1.1 algooru.com/assets/Vector-section-2.png
IP
File type PNG image data, 170 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a73ba518c971885b49247f4eb4c0b0c
e344eb35dea1712a607e82c31a1169b0c872157d
785fada3624bfc47fe923f9b9c1da032c634556b9a2c9e2b5655d4afca0eb754
GET /assets/Vector-section-2.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:41 GMT
ETag: "c61-5ed7d791a0692"
Accept-Ranges: bytes
Content-Length: 3169
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Icon%20(1).png
200 OK 5.3 kB URL HTTP/1.1 algooru.com/assets/Icon%20(1).png
IP
File type PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash 5608d59c61c527076d3bfb4c4093b3fd
57c7ad043fe036198b2553df7151e55f889f75cc
3c480c907a2e0b151acaac1367ce35c6d0e9b8c871a45bb19c4d046774b03e96
GET /assets/Icon%20(1).png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:59 GMT
ETag: "14a3-5ed7d76938b93"
Accept-Ranges: bytes
Content-Length: 5283
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Icon%20(3).png
200 OK 4.5 kB URL HTTP/1.1 algooru.com/assets/Icon%20(3).png
IP
File type PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash 66832372fea6791ec8f98b56e718aa0a
bf27f8847d4c89e3d5a11f4d8ed089c932d60f4c
7f02d33e726216efd14493b61ae4b95fe6a288e661c4abf4a781acb7b66dd6ab
GET /assets/Icon%20(3).png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:39:55 GMT
ETag: "11be-5ed7d76546f6c"
Accept-Ranges: bytes
Content-Length: 4542
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Icon.png
200 OK 4.4 kB URL HTTP/1.1 algooru.com/assets/Icon.png
IP
File type PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash f1a4ac8f7b34236cb6201d2fbd72e6ac
bbb5cb004252f4e2f28913b89ad12fa23cddb7c5
34851f1638f71e80cb88f8aac10c0ad629d0a92090f49942df9e1f89c4503b58
GET /assets/Icon.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:05 GMT
ETag: "114e-5ed7d76f4972c"
Accept-Ranges: bytes
Content-Length: 4430
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Icon%20(2).png
200 OK 4.3 kB URL HTTP/1.1 algooru.com/assets/Icon%20(2).png
IP
File type PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash 849fcf6e98342cc3ea37d6d397e7cf92
2e375623293f464046ea6670f938110bf628e5c5
87c64be6151ac2a49f01a6aa559e478f3f44b1eeb29d4da43b7399ff64dffc99
GET /assets/Icon%20(2).png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:39 GMT
ETag: "10e6-5ed7d78f826bf"
Accept-Ranges: bytes
Content-Length: 4326
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Vector%20section-3.png
200 OK 2.8 kB URL HTTP/1.1 algooru.com/assets/Vector%20section-3.png
IP
File type PNG image data, 622 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash 9f43ae478538e376282278f7efc082a4
8d7ee3770233eff038318cf4d0ec179e319a4ce4
a104231fc02d59c8b60560eee56ac18fd4509acfb4ca178d4d9b5ebe9465950f
GET /assets/Vector%20section-3.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:11 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:44 GMT
ETag: "b05-5ed7d793c05a4"
Accept-Ranges: bytes
Content-Length: 2821
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Free%20Icons-48%201.png
200 OK 4.1 kB URL HTTP/1.1 algooru.com/assets/Free%20Icons-48%201.png
IP
File type PNG image data, 95 x 95, 8-bit/color RGBA, non-interlaced\012- data
Hash ecbd38e64b7a43b9924d84415394c9fe
f8e8f5d0122b34a97ccfb7b182462f345b2551c4
6c63facfc512546bf503158e129b63a48cf5492c0eaee8bbdf13ec40d34461b2
GET /assets/Free%20Icons-48%201.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:12 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:05 GMT
ETag: "ff3-5ed7d76e61072"
Accept-Ranges: bytes
Content-Length: 4083
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Forward%20arrow.png
200 OK 983 B URL HTTP/1.1 algooru.com/assets/Forward%20arrow.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 68b62868b87f758b199e5d833e01e6cb
653dd6b282ff23934d284bbd6e86285ee5536f1b
39b9a8855a6819fab496c5bd9418c032f947a214f309dcf19b0abe1d8d351df4
GET /assets/Forward%20arrow.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:12 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:01 GMT
ETag: "3d7-5ed7d76b0a8a7"
Accept-Ranges: bytes
Content-Length: 983
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Quotation%20doodle.png
200 OK 1.1 kB URL HTTP/1.1 algooru.com/assets/Quotation%20doodle.png
IP
File type PNG image data, 55 x 71, 8-bit/color RGBA, non-interlaced\012- data
Hash beed8ed32cb254e89e6f85f5b7bbec9d
d80a5cf86ea1780b42a399e014f818e3b758fb46
838bcb193951238eacb6f495eb736313658f3f5f1235884ce3ad11b8a57858c2
GET /assets/Quotation%20doodle.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:12 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:44 GMT
ETag: "454-5ed7d7940e7a2"
Accept-Ranges: bytes
Content-Length: 1108
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Back%20arrow.png
200 OK 981 B URL HTTP/1.1 algooru.com/assets/Back%20arrow.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e1b3fa732ceaac0c51f873e93fdcf14
0d8fc2a3a0233411d31234b3ad8d388e00364271
258a7d2827f9c167e519b46619ccfe7d5b1773b2968e0a362b86c29db47da187
GET /assets/Back%20arrow.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:12 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:40 GMT
ETag: "3d5-5ed7d7906ad79"
Accept-Ranges: bytes
Content-Length: 981
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/Logo-ar.png
200 OK 4.1 kB URL HTTP/1.1 algooru.com/assets/Logo-ar.png
IP
File type PNG image data, 146 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 7888e40752c752ba0973ee4cf07a6fce
9921475b9b1cdbbdc389b082a4b2d4ac75223758
07594e861f8a02f8056a05c7a07710aa161d796168b965e6a80a05736346513b
GET /assets/Logo-ar.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:12 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:40 GMT
ETag: "100d-5ed7d78fcf91d"
Accept-Ranges: bytes
Content-Length: 4109
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
algooru.com/assets/english.png
200 OK 350 B URL HTTP/1.1 algooru.com/assets/english.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash d090a14ba53d52439ad53c855e731246
8330526cdcb51bfaf1b5c196c00e4efeb5785eb1
7bdc4fd1b52f88617553782da88299fc8551f6921d5a30c5a29b96cb8b4c3eae
GET /assets/english.png HTTP/1.1
Host: algooru.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Cookie: _gcl_au=1.1.108515475.1669370829; _schn=_wcjzn7; _scid=60961933-70b3-4421-b9d9-5da1531e3ce0; _ga_39WHTLX7FH=GS1.1.1669370829.1.1.1669370830.59.0.0; _ga=GA1.2.757579776.1669370829; _tt_enable_cookie=1; _ttp=18d479e1-bc59-4c76-a48a-5b2eeba3408d; _gid=GA1.2.1350352279.1669370830; _gat_UA-222090364-1=1; mp_72448044de26de91fe51dbe61b7920bf_mixpanel=%7B%22distinct_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24device_id%22%3A%20%22184ae4160ba4e3-080799277cd1938-c505425-140000-184ae4160bb597%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D; _clck=82ndb3|1|f6v|0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:07:12 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Tue, 15 Nov 2022 07:40:12 GMT
ETag: "15e-5ed7d7750d068"
Accept-Ranges: bytes
Content-Length: 350
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.facebook.com/tr/?id=1009940716626246&ev=PageView&dl=https%3A%2F%2Falgooru.com%2F&rl=&if=false&ts=1669370831384&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669370831384.808378585&it=1669370830200&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1009940716626246&ev=PageView&dl=https%3A%2F%2Falgooru.com%2F&rl=&if=false&ts=1669370831384&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669370831384.808378585&it=1669370830200&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1009940716626246&ev=PageView&dl=https%3A%2F%2Falgooru.com%2F&rl=&if=false&ts=1669370831384&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669370831384.808378585&it=1669370830200&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 10:07:12 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1009940716626246&ev=ViewContent&dl=https%3A%2F%2Falgooru.com%2F&rl=&if=false&ts=1669370831386&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=30&fbp=fb.1.1669370831384.808378585&it=1669370830200&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1009940716626246&ev=ViewContent&dl=https%3A%2F%2Falgooru.com%2F&rl=&if=false&ts=1669370831386&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=30&fbp=fb.1.1669370831384.808378585&it=1669370830200&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1009940716626246&ev=ViewContent&dl=https%3A%2F%2Falgooru.com%2F&rl=&if=false&ts=1669370831386&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=30&fbp=fb.1.1669370831384.808378585&it=1669370830200&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 10:07:12 GMT
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=821F764A5239401AB63E9343BA9E6959&RedC=c.clarity.ms&MXFR=3086F36C88166E140F71E10B8C1660E2
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=3086F36C88166E140F71E10B8C1660E2; domain=.clarity.ms; expires=Wed, 20-Dec-2023 10:07:12 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Fri, 25 Nov 2022 10:07:11 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=821F764A5239401AB63E9343BA9E6959&RedC=c.clarity.ms&MXFR=3086F36C88166E140F71E10B8C1660E2
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=821F764A5239401AB63E9343BA9E6959&RedC=c.clarity.ms&MXFR=3086F36C88166E140F71E10B8C1660E2
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=821F764A5239401AB63E9343BA9E6959&RedC=c.clarity.ms&MXFR=3086F36C88166E140F71E10B8C1660E2 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://algooru.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=821F764A5239401AB63E9343BA9E6959&MUID=30E9B18393C56EDA1997A3E492926FBC
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=30E9B18393C56EDA1997A3E492926FBC; domain=c.bing.com; expires=Wed, 20-Dec-2023 10:07:12 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7B7317540CFE4444A0BB9A64FBBEFC90 Ref B: OSL30EDGE0411 Ref C: 2022-11-25T10:07:12Z
date: Fri, 25 Nov 2022 10:07:12 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=821F764A5239401AB63E9343BA9E6959&MUID=30E9B18393C56EDA1997A3E492926FBC
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=821F764A5239401AB63E9343BA9E6959&MUID=30E9B18393C56EDA1997A3E492926FBC
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=821F764A5239401AB63E9343BA9E6959&MUID=30E9B18393C56EDA1997A3E492926FBC HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://algooru.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 25-Nov-2022 10:17:12 GMT; path=/; SameSite=None; Secure;
date: Fri, 25 Nov 2022 10:07:11 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 770
Origin: https://algooru.com
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://algooru.com
access-control-allow-credentials: true
date: Fri, 25 Nov 2022 10:07:11 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 461664
Origin: https://algooru.com
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://algooru.com
access-control-allow-credentials: true
date: Fri, 25 Nov 2022 10:07:12 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash af46b7f5800dc02af004a340103eff94
21de9711d0cfc7cfab8c67a5be5ae820688a0a1e
46f18efb95e916dbd3a1a0a7e05fb8513051a024f8759f0dae33ab2dd946fdc2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1804
Cache-Control: max-age=86406
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:07:16 GMT
Etag: "637f3b4f-1d7"
Expires: Sat, 26 Nov 2022 10:07:22 GMT
Last-Modified: Thu, 24 Nov 2022 09:37:19 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
api-js.mixpanel.com/track/?verbose=1&ip=1&_=1669370836033
200 OK 25 B URL HTTP/2 api-js.mixpanel.com/track/?verbose=1&ip=1&_=1669370836033
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fa4859df2aaba80141861afa205fe74e
d486b5a249527d022cc009bdc9c197efb66f23a2
e39a8118ec6cdf6ac33e6961518e9fe6ba3f6caf099aeeaec1389c2108ba90ba
POST /track/?verbose=1&ip=1&_=1669370836033 HTTP/1.1
Host: api-js.mixpanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 873
Origin: https://algooru.com
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://algooru.com
access-control-expose-headers: X-MP-CE-Backoff
access-control-max-age: 1728000
cache-control: no-cache, no-store
content-type: application/json
strict-transport-security: max-age=604800; includeSubDomains
date: Fri, 25 Nov 2022 10:07:16 GMT
content-length: 25
x-envoy-upstream-service-time: 16
server: envoy
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=CC1SV4BC77U2GLNDQRM0
200 OK 0 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=CC1SV4BC77U2GLNDQRM0
IP
ASN #20940 Akamai International B.V.
GET /i18n/pixel/sdk.js?sdkid=CC1SV4BC77U2GLNDQRM0 HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221125100709A32681F065AF7DE0A6ED
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601c5f6a04a777121cde7d9af65489455e4e22f13de4ba8f1957b523df326b6df9ba28e7de2935fffb0a6ca3897789220afd714fe60d2eaae96346ab7b7dc0421d
content-encoding: gzip
expires: Fri, 25 Nov 2022 10:07:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 10:07:09 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=0, origin; dur=100
x-origin-response-time: 100,23.36.79.13
x-akamai-request-id: 74a8f6e9
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=CC1SV4BC77U2GLNDQRM0
200 OK 0 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=CC1SV4BC77U2GLNDQRM0
IP
ASN #20940 Akamai International B.V.
GET /i18n/pixel/sdk.js?sdkid=CC1SV4BC77U2GLNDQRM0 HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221125100709EBD5A40017B01E75356F
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601c5f6a04a777121cde7d9af65489455e09c1b76d15defacc85c23d8f69d3a8027c701e788eb77c8f27ecbd57e7688c2bb881f0f764c00016aadc4bc19de3d3b9
content-encoding: gzip
expires: Fri, 25 Nov 2022 10:07:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 10:07:09 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=4, cdn-cache; desc=MISS, edge; dur=0, origin; dur=103
x-origin-response-time: 103,23.36.79.13
x-akamai-request-id: 74a8f80c
X-Firefox-Spdy: h2
www.clarity.ms/tag/dg9m4ye8ga
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/dg9m4ye8ga
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/dg9m4ye8ga HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://algooru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=89b88fd0eb1d489294c554524b5684eb.20221125.20231125; expires=Sat, 25 Nov 2023 10:07:10 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:e55edbbe-e22b-46b4-8313-9ee2a4e71d12
x-cache: CONFIG_NOCACHE
x-azure-ref: 0zpOAYwAAAAC2lh+/RdfBTZnY/5a8l82uT1NMMjMxMDUwMjA1MDI3ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Fri, 25 Nov 2022 10:07:10 GMT
X-Firefox-Spdy: h2
15.185.248.70
34.117.237.239
93.184.220.29
23.36.77.32
157.240.200.14
104.17.24.14