Overview

URLblood.copemiss.shop/prmjfomua/oohwnvfmt1378qfrabgpbn/ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg
IP 172.67.175.36 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-18 08:36:15 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (14)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (8) 344 2020-12-02 08:52:13 UTC 2022-12-17 17:12:08 UTC 23.33.119.27
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2022-12-17 17:16:23 UTC 35.241.9.150
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2022-12-17 18:38:02 UTC 142.250.74.168
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-17 17:13:11 UTC 34.117.237.239
ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-12-17 17:12:04 UTC 142.250.74.131
stats.g.doubleclick.net (1) 96 2012-07-01 17:13:23 UTC 2022-12-17 21:50:11 UTC 64.233.161.155
www.google.com (1) 7 2012-11-08 00:08:21 UTC 2022-12-18 00:23:39 UTC 216.58.207.228
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-12-17 17:41:08 UTC 34.120.237.76
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-12-17 17:17:28 UTC 34.160.144.191
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-12-17 23:20:57 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-12-17 17:17:27 UTC 52.39.62.124
www.google.no (1) 25607 2012-06-26 23:22:08 UTC 2022-12-17 20:21:02 UTC 142.250.74.163
blood.copemiss.shop (19) 0 2022-12-18 03:17:23 UTC 2022-12-18 04:36:02 UTC 188.114.97.1 Unknown ranking
www.google-analytics.com (2) 40 2012-05-21 09:41:50 UTC 2022-12-17 22:46:45 UTC 142.250.74.110

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-18 2 blood.copemiss.shop/prmjfomua/oohwnvfmt1378qfrabgpbn/ky4gjPJo0bRRVrmc2JeemH (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 172.67.175.36
Date UQ / IDS / BL URL IP
2022-12-18 08:36:15 +0000 0 - 0 - 1 blood.copemiss.shop/prmjfomua/oohwnvfmt1378qf (...) 172.67.175.36


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-30 21:46:17 +0000 0 - 0 - 2 internetprofitscoach.com/newnetflix/en/login.php 172.67.176.186
2023-03-30 21:29:15 +0000 0 - 5 - 1 www.ddtools.top/handdiy_3.exe 188.114.97.1
2023-03-30 21:26:40 +0000 0 - 0 - 1 janitormoper.com/797c255adc63fe2c75ebb32121fcd76b 172.67.154.222
2023-03-30 21:25:03 +0000 0 - 2 - 0 download.filepuma.com/files/webcam/manycam/Ma (...) 104.26.0.63
2023-03-30 21:22:06 +0000 0 - 0 - 20 7om8qr3axsiake4eowtmr1i.lspower.xyz/usps/veri (...) 188.114.97.1


Last 5 reports on domain: copemiss.shop
Date UQ / IDS / BL URL IP
2022-12-25 14:46:35 +0000 0 - 1 - 0 buyer.copemiss.shop/hvfdgakjn/ttehjpr1380plku (...) 188.114.97.1
2022-12-21 03:51:15 +0000 0 - 1 - 0 blood.copemiss.shop/Bufqwfjih/gJ0E16T7ugBDnGY (...) 188.114.97.1
2022-12-18 15:15:29 +0000 0 - 0 - 1 blood.copemiss.shop/hvdmhkchg/ttcgv1378saxje/ (...) 188.114.96.1
2022-12-18 08:36:15 +0000 0 - 0 - 1 blood.copemiss.shop/prmjfomua/oohwnvfmt1378qf (...) 172.67.175.36
2022-12-18 06:55:21 +0000 0 - 0 - 1 blood.copemiss.shop/ssgrlgf/QwMd_955vL8PbkcOs (...) 188.114.97.1


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-06 15:54:43 +0000 0 - 0 - 1 www.peasantlicense.shop/umkqhuajc/ehlf7737jli (...) 172.67.157.186
2023-03-06 15:54:33 +0000 0 - 0 - 1 www.testifyenlarge.shop/Lvbcnss/ohgvjff7778nr (...) 188.114.97.1
2023-01-21 09:03:19 +0000 0 - 0 - 1 www.miletrivial.shop/hfhqsmxgxof/tdxkr4010stx (...) 104.21.34.81
2022-12-18 15:15:54 +0000 0 - 0 - 1 role.inchcool.shop/njkah/duxnhmvh1363swskdmo/ (...) 104.21.71.125
2022-12-18 15:15:29 +0000 0 - 0 - 1 blood.copemiss.shop/hvdmhkchg/ttcgv1378saxje/ (...) 188.114.96.1

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (53)


Request Response
                                        
                                            GET /prmjfomua/oohwnvfmt1378qfrabgpbn/ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 18 Dec 2022 08:36:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m0mdogJ%2FsEX1aaRsPg08p0jTzTmHAp%2FF78SExPiozGQvdVv6xX0QPTCRbJ4f3yF5Np%2Fdqh0Z9jtGCwiE5rAZhLRtz%2BK3lVTvV22s8Wn30AUQfVMuOfrUFGiOQSXbFhEGhJQjDjF2"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b691961f401c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   557
Md5:    6ee50d880fc693d12823127f2c60b92e
Sha1:   439f7b013cf9a3b8093cd6525ff8f9c4fa8c8ce7
Sha256: 94d14be4fed4f4b48ccb15b3ef3c09c01222f0bca918d39f9ab384334429e387

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A2317476862ACD0A92FE523454C3991752B07BA14E7667F421DD9624E0233758"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5205
Expires: Sun, 18 Dec 2022 10:02:49 GMT
Date: Sun, 18 Dec 2022 08:36:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "471F4E7AE29BCF6BA1F749C0F5D4AB446CEBFAC5AA80C3E19C6EDF21BE456EB5"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3571
Expires: Sun, 18 Dec 2022 09:35:35 GMT
Date: Sun, 18 Dec 2022 08:36:04 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 18 Dec 2022 07:45:26 GMT
age: 3038
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "647F8D9D3D1170E60A60E15FDFD9B59445FEB56A6CE9D9BB2FA4720F0BFC3A14"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4693
Expires: Sun, 18 Dec 2022 09:54:17 GMT
Date: Sun, 18 Dec 2022 08:36:04 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: wirKbjw7NvV8qAlZuC6qv1j7OVneQZsiHcliPxqThefRny4w1HDrFt/XnhJEd5mvN/gjZSw/9Qw=
x-amz-request-id: WK0R8KQAXJWTA24H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 18 Dec 2022 07:52:07 GMT
age: 2637
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /jquery-1.11.0.min.js HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/prmjfomua/oohwnvfmt1378qfrabgpbn/ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Dec 2022 08:36:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:20 GMT
ETag: W/"6388f8d4-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ftNMh03p6bC4AhZjTx31ftH25rsDpBzPlcjbDAT2T%2BBtvsOVwRNGP4XYsb6mSEoF4woZ3EVSRdNEYKPdToAhxMwE%2B%2Bm37CCF%2BZv6dqWL7f1bY0pPs7y2s4xKJL3fL268fP7caBwo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919899491c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (32341)
Size:   33436
Md5:    95fe3f4dd117c33f6015e1c3d6df1d0d
Sha1:   d5b8856932d1ea63f51824de0bb50670d2e960bc
Sha256: e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 18 Dec 2022 08:36:04 GMT
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Dec 2022 08:36:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /offer.php?id=289&sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/prmjfomua/oohwnvfmt1378qfrabgpbn/ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg
Upgrade-Insecure-Requests: 1

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 18 Dec 2022 08:36:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8NR2GwFptqOZd2o3DSvsfAtwuufHP3kY4Pi3fxgbNIrX2UkjdtX2c6nGlYSwi7OATVReT5AWxlUqMC%2BVRoqQvD1UNEmHIkq89Bug9uqkqdv7Gaum6rIvKix6AD5NyV7cfmK88W1f"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b6919929cc1c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (324)
Size:   355
Md5:    e5fb2de16feb3e246db1214bce77b63e
Sha1:   41b1a15f71ac30cbb0f55ed94c9f41f84784ae6a
Sha256: 477bf5cf5295c90fbc3a3a83699913fa96004c18b952238af3c841ce02960f0b
                                        
                                            GET /clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=03ZtRmARW9hJMbEq0fh%2BA64xuBJ%2BL8BLbALgBVsz64Vb2XHeGNPVPFLvpvEV4GRaRqHvKgXLiVQuCCWdFpxgW%2FvflTuw3O%2FxWQ3KHSsTgvxWHq01h3BcX4jZlqT1i5DwyrXuRwax"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b6919a8b2b1c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (15370), with CRLF line terminators
Size:   5197
Md5:    33ac1879b5c397652ee391cae74009dd
Sha1:   9063cd6cf4e26cc929295f5060cbcf9e968d33cc
Sha256: 48693e4f8d6784912df4824688b0ffd97ed9c7f715f1d3b5f045e19ecb95bfaf
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 18 Dec 2022 08:08:00 GMT
age: 1685
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /clicks/SonusCompletetinnitus_files/css.css HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-38b"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5274
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rpT6e0Y%2FbPPQYgeIMcfD%2BPBoLEEEkbj5Apcsixh6hdHcF4UgD3jb9Ujs%2BJQaMZ6QQisD6HYhYCK6Zkf16XguEzZSa4N501mGz6qElNlYVBHOswSZ6UsvU1SxIzkC2EBzSDSXobxK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919c2c9e1c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   254
Md5:    eed301ee3d1a49ec24b370be2af26b19
Sha1:   fdf2b75ebefa138ae3f1432f21d398cf16a80bcf
Sha256: ecb8b31df57b425a60eb3f7e1b4445f2ee8318956028b1f5c41c5955f0bef638
                                        
                                            GET /clicks/SonusCompletetinnitus_files/global.css HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-519f"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5274
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sP1xJKh0jQmufdw3wBMBdOnhxIJNKNVbmRJ8CV5Ld1vk%2BKJztN5hTh7oVwjQO9l9khQgsSgsB8nnJJx43mZS%2Fy%2BmRDIOqkbVzpW34WlWIcLx2I%2BOyqLsWsHwWXltgzP3ABn1uXz4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919c2a480b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (9194)
Size:   2073
Md5:    7253308f9817d03f4279ba81d462ab20
Sha1:   7b4a488c3b26579751ddd72ee4eeddd6785391d6
Sha256: 3b3a9c7d49a3d715b6febf95adb409982293e5f3bb602ccef9f84a75d0a68a9d
                                        
                                            GET /clicks/SonusCompletetinnitus_files/frontend_002.css HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-1973f"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5274
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J6Lr05qbhVPNOMWFTTltHdkyf5yurdS3hZL76tEWTMHFyxhS9dfX2Gy56HxWVzWFlK3HlWMc9zbYQs4ciDEQaBpNrtqVRqqXXKfPKD3aAuoU90rT%2F6VSYTygujGO3uPVXl%2Fu80tG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919c2c350b39-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65497)
Size:   14223
Md5:    7906ef86d55e7df783d8eec8a21a14fd
Sha1:   37b90b7dcf42702d1dc8f2929dbab282f633fb8e
Sha256: 0937deb44b9a144b05a71b7c1d7110e07bab4dc5db08dbc677db97a6f0f1fe43
                                        
                                            GET /clicks/SonusCompletetinnitus_files/frontend.css HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-307cc"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5274
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t%2BoAd7csTnuWgNfA3SX%2FTMUN5ezODY0uerYldOsbq8boJ5B9KTraQ%2BNRZwRagmkKnKyeyntlc7yEtcAlnmi7KGsRWdCG8UNwM1BkLZC9eJ4Szye0drU7XwBqDfzAZqDBrc3ZNIQf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919c28131bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65493)
Size:   21439
Md5:    ac968c2953375f9544c2e75d78073b80
Sha1:   23bbcefc9f81bc5978770f3d6da64b89b99aacf8
Sha256: d2952a13da8eeaafdbf2918b348b035ec6c0e6a0183cff707ac89c9c7f0ed01b
                                        
                                            GET /clicks/SonusCompletetinnitus_files/style.css HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-18baa"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5274
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=84H7agEriVjU8r5GqzzggNK5VV%2B5ecWfpk3n9dmRtgGHNR7eLSn3YJmmnBSWcwjzyj4xmL97I4lTqMwMAsKL4i0qgm%2FTEA4lBik2dGVxwK2%2FpJSFCuo%2FqhlqgE8uyAZSMonIrTso"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919c2d2db4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (855)
Size:   14695
Md5:    dcd06935a495012b76e5d75d7d159c2e
Sha1:   d2dd2d7dc6557fe8e593dbeba95163341c7dc74f
Sha256: f2bf9db1ef940bd0bef4541a3d7d6a8dbc634000f4caef4603a03bddfb9dad24
                                        
                                            GET /clicks/SonusCompletetinnitus_files/post-519.css HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-23bf"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5274
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5mSBK%2Fowgj03BxRbn3Qd%2FMNBqlVM47MaSMzfchxwU6ffTsapY12BqViPv0PLuNUnMM0OP0pmrvD4cuI77QtlAeVUq3lw1CQb9GCtD7xAj%2BeyuToLgSoyppNr7ETviilFTaAx6nvG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919c3dc70af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (4592)
Size:   1329
Md5:    8635c40916d198f3dde81fede870d2e0
Sha1:   f60af836ee03ad82344c7f1eb1ed8ce3b3f24508
Sha256: e0481cce9872e490caf2573a61d7e9c1466a620c90416833d0e8ad905d0999ee
                                        
                                            GET /clicks/SonusCompletetinnitus_files/jquery.js HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-1538f"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5273
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UQgHy9vnp36KmgipnixAl2H3emSVgbSm5COIBkIuZ4UkwQoLDnTh99jaALCSMH5kBuuy%2BtnB4S2Vi%2Fn%2F%2FHSOphf1urOiW2uav7GPI6X7jOufx%2FfocsT8CfMNZgmaqPLnGitu%2BGAU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919c3cbd1c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30289
Md5:    ca9d617a98c509cd24e10eae39ea15d3
Sha1:   1a9197526a13967413a4bba8e5a2446eea4fd4ea
Sha256: a95d26bd14a6aade75c9a263f28d7fc0effce309a114781e6abc89b7c0c0fdae
                                        
                                            GET /clicks/SonusCompletetinnitus_files/prostate-1.jpg HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Content-Length: 57930
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: "6388f8ca-e24a"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5273
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MEISRwDbx67AanAsIY1H5NTbCnL%2BKsV7btuf%2BK8qvht0%2FcHR5N8TQZSudbqHceVFCo2vLh0rK8hvt5EdElrevp2qAEFZauf92MAOa8fYqSH9L%2BsBZJPGZc9RXdoPKCNljOfeGarQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919c4d59b4f9-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x525, components 3\012- data
Size:   57930
Md5:    4312030b1540bf4adb326bc468d82782
Sha1:   096530e02a0d0eadabeca8cadb8a055e6bc8442a
Sha256: a1b1b90b1726ff072f4b1e157269ca74cb7e89c412e60525ac364bc7c0e9278b
                                        
                                            GET /gtag/js?id=UA-22484186-3 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://blood.copemiss.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Dec 2022 08:36:05 GMT
expires: Sun, 18 Dec 2022 08:36:05 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43582
Md5:    cbe47fcbff8addca7eaa69ee088a6345
Sha1:   db6ebd4c13490b81270a7e36454e102bae5647f8
Sha256: 57a6eb7869895bbcab2e531404af53934a989d554d7a5a38c001fd3d75e2377c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6194
Cache-Control: 'max-age=158059'
Date: Sun, 18 Dec 2022 08:36:05 GMT
Last-Modified: Sun, 18 Dec 2022 06:52:51 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /clicks/SonusCompletetinnitus_files/blank.html HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg
Upgrade-Insecure-Requests: 1

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W1is%2FHE0XwXhKPyCn90a0xzHJfN1BnkdOlYovYImLCoaU6JZ4zYxCboGtc9YVXtudeS%2B9pQ07cvzjxrugWTgT1EMExgKAdigBQIeFybg4T92Nq%2BzD%2FAxlQvijChf0nngasX4IXmh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b6919cfb020b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254), with CRLF line terminators
Size:   548
Md5:    0a16aec008013f053a922381dee71f9d
Sha1:   13a69b2e43a426ce54f9a47146955ec0bb169172
Sha256: 4686bf42f5ae452ed851ee0e084ece44ceccef9bc2fde5eee10a33a6c92461ae
                                        
                                            GET /clicks/fonts/S6uyw4BMUTPHjx4wWw.ttf HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus_files/css.css

search
                                         188.114.97.1
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oI31pZJgUcfxa%2By1C6wvBCgq4Qk4FvDbwnmBixXPBZichc5quFsLnbEVW4EkRvaehMBnArGe3DhRRUz8RQsBwdiOomSfHuAC5hiexbIUUU4oRcs3UX0SwPJyV0saaRs6qOHBYYBL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919d0e530af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   131
Md5:    f758914aa953116df6aebbd7dd3c71cf
Sha1:   9e679d79c4e87bad87ab10d8a5f5d955a50c0350
Sha256: 2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
                                        
                                            GET /clicks/SonusCompletetinnitus_files/blank_data/inject.css HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus_files/blank.html

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-f28"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5271
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DJZdfPb%2BSHjqvNpathFQULOc3LMuMSLi%2B%2BRQz32SCQ1BPnpim0BpHyJqQ0JEQJ6ku0GFmGwlq96gTteEDpSMXiP2b5t6E2vEdixDMMTe6Tzq96KIoPp%2FlPEHefhC8uJjCIJBzqvG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919dfbd30b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   928
Md5:    e1c22e631b7cce42e3ef13cd9bb02ff5
Sha1:   6c6c2b15c56e776d9eac10babf3a6c4a2bd964ae
Sha256: 93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc
                                        
                                            GET /clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkV2EH7alwg.ttf HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus_files/css.css

search
                                         188.114.97.1
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BC3d04g1owmBcLEr%2Fl80oxAMCj8vgRjoMGkHsWKFQsyiYrKsxdiCzL49doMPNBT8wohbGiFcjS4xc5NW24qBJ2e6oGT3uxU3NP%2Ff1gHTq8zEbrOnPgkq6Bf%2FLtwBkMexPryf%2Fs7K"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919cdcbc0b39-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   131
Md5:    f758914aa953116df6aebbd7dd3c71cf
Sha1:   9e679d79c4e87bad87ab10d8a5f5d955a50c0350
Sha256: 2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
                                        
                                            GET /clicks/fonts/S6u9w4BMUTPHh6UVSwiPHA.ttf HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus_files/css.css

search
                                         188.114.97.1
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mpDzMuF3iQ3N0QRYztzwIkH0WP0sikBfv0W5RgtVAyGlkIQE%2F6Mh%2FWv3cOx0KP229EHuSx3qW%2BlkNBUbNEwvhwkX35oN7bbYvBMD0CU%2Bfk6uW5yuoJYf5AVv%2ByDshFzjhlFfZNi6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919ccde5b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   131
Md5:    f758914aa953116df6aebbd7dd3c71cf
Sha1:   9e679d79c4e87bad87ab10d8a5f5d955a50c0350
Sha256: 2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
                                        
                                            GET /clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alwg.ttf HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus_files/css.css

search
                                         188.114.97.1
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DH%2Bx37q10tFocTnnPlL0wAv3SLxjL2NZWXro6qVp8M54439lH60HKlG7TGl5KxXw963aYOFMk07XvD3xupbMatiAC0abzfqynQ1oF8IMq5WsDChdv5ef7XKw0Qxjg4xan5ZnfGLO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919cc9191bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   131
Md5:    f758914aa953116df6aebbd7dd3c71cf
Sha1:   9e679d79c4e87bad87ab10d8a5f5d955a50c0350
Sha256: 2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: blood.copemiss.shop
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blood.copemiss.shop/clicks/SonusCompletetinnitus.php?sid=1001294&h=ky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE/9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg

search
                                         188.114.97.1
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:52:31 GMT
ETag: W/"6388f7ef-57e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6054
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NHoRTMtyWXKAJR5eEt5VKEDtWSzFoql3entltrxgSLXHqb3pTe4XTB6YMmnKdhGCbtWMhHVwwja6gToudiYx%2FH7%2FrVOVgXMArdiG5%2Bp%2Be8riNnDj%2Ft%2BbgZGathKQfDfNl%2Bbh4P0y"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b6919ecfbeb4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16\012- data
Size:   69
Md5:    f12fb6edbda074603f749a028770f49a
Sha1:   419983c6073469bac7fb8535a847b8f78c2040ce
Sha256: 8aec3412c7c37feacec2dc9d7b2f3560a2e0af0af573085665a57e1d09ab397d
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://blood.copemiss.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 18 Dec 2022 06:41:08 GMT
expires: Sun, 18 Dec 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 6897
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: s/LkcJ7CQ142eV9IbenM+g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.39.62.124
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: muV1S8psQMYCU67EAdCjopqRLj8=

                                        
                                            POST /j/collect?v=1&_v=j98&a=1686630301&t=pageview&_s=1&dl=http%3A%2F%2Fblood.copemiss.shop%2Fclicks%2FSonusCompletetinnitus.php%3Fsid%3D1001294%26h%3Dky4gjPJo0bRRVrmc2JeemHrQDkw0w93q18SDVQCSyzE%2F9JysFU7JGhv36LBZCCkaFnEq87GP3CxkZvl3xppDuXvfVOT0AUtJOyXOsy5bR3mv-cr0GaXa3nCtk__CmpGZpqV7mDpIksMECa_T-Rwzq9tS8wdw1GIKvPlTkvrEdjhAfwKozcyHqm166H1rhPCqRg&ul=en-us&de=UTF-8&dt=Health&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=235623111&gjid=2035582520&cid=1189505711.1671352562&tid=UA-22484186-3&_gid=534249827.1671352562&_r=1&gtm=2oubu0&z=1807098357 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://blood.copemiss.shop
Connection: keep-alive
Referer: http://blood.copemiss.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://blood.copemiss.shop
date: Sun, 18 Dec 2022 08:36:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    cc7a1e792bca8ccb1946b7a07f6dbc03
Sha1:   11a2757082428311f587b7664fa9840376137f80
Sha256: de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=1189505711.1671352562&jid=235623111&gjid=2035582520&_gid=534249827.1671352562&_u=YEBAAUAAAAAAACAAI~&z=121873125 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://blood.copemiss.shop
Connection: keep-alive
Referer: http://blood.copemiss.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         64.233.161.155
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://blood.copemiss.shop
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 18 Dec 2022 08:36:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1189505711.1671352562&jid=235623111&_u=YEBAAUAAAAAAACAAI~&z=1620116086 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://blood.copemiss.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.228
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Dec 2022 08:36:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1189505711.1671352562&jid=235623111&_u=YEBAAUAAAAAAACAAI~&z=1620116086 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://blood.copemiss.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Dec 2022 08:36:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Dec 2022 08:36:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8310
Expires: Sun, 18 Dec 2022 10:54:36 GMT
Date: Sun, 18 Dec 2022 08:36:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8310
Expires: Sun, 18 Dec 2022 10:54:36 GMT
Date: Sun, 18 Dec 2022 08:36:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8310
Expires: Sun, 18 Dec 2022 10:54:36 GMT
Date: Sun, 18 Dec 2022 08:36:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8310
Expires: Sun, 18 Dec 2022 10:54:36 GMT
Date: Sun, 18 Dec 2022 08:36:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8310
Expires: Sun, 18 Dec 2022 10:54:36 GMT
Date: Sun, 18 Dec 2022 08:36:06 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KyEMrUTeuVTPJ3EIkrH1DLYqa4bHK7fe6dApTAFP4XY0G4airnflGA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 39540
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5185
Md5:    bfd0e913579b4ff2f511223d70cb01fb
Sha1:   497e0ffef816e100e6ddc221ec17d5f389c1142a
Sha256: bee68ae1a938a5111a32dab4ec4f6964994e6c39143eac9ab94d6c5e29999372
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12125
x-amzn-requestid: e44faa15-1dfd-4bc0-bdfb-307c3de2755d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2QPFZAIAMFf5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3734-33d636210a1e24742ee71187;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:40:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DmeWRYIlUMCR8Nds0-n0a9ju0ySR7ZuTAS82Lu8sZxPXQpBJkqzvww==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:52:21 GMT
age: 38625
etag: "5db9e59699048998f0685e940640eae19ef11c8e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12125
Md5:    ed374d0c34e8b2e15f08a6479a4f45e7
Sha1:   5db9e59699048998f0685e940640eae19ef11c8e
Sha256: 9933854830be796a87cfe44b6b8336294e2d3dbbe3205f267720aca6968c3a21
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10670
x-amzn-requestid: d72e1904-caf4-4c72-a811-d1bde023f4b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT11JGCsIAMFRDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3687-7789040d71253d00378f9162;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8qqSQbj22k16ApKTT8y5BQItInb8EjZuACdWcsW_FnMysvnDADbLxQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:11 GMT
age: 39535
etag: "a24f8e949a2f2a973fe2dd5af994cd970d37f13a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10670
Md5:    12c4c2232b6d09e9085f0214b3260c1e
Sha1:   a24f8e949a2f2a973fe2dd5af994cd970d37f13a
Sha256: 000475ed7d0aab9a7dab3e25f0a29f82552739fea99f98cbf5131282d0db7d63
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8696
x-amzn-requestid: c897aeed-a082-46a1-965f-39e8c763cb05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10ZH3jIAMF0gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-548ac80840737a20743980f5;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JecluZu8ExMmP-UHM8QbK-bjm_yqULU1tl2QQDfKMea8NHM6y2JI7g==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 39540
etag: "ce644cd4349d88aa7c24b2503b0b18b444061639"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8696
Md5:    ada04738696f861648635c9ba98841e4
Sha1:   ce644cd4349d88aa7c24b2503b0b18b444061639
Sha256: e5cee777efbf1d8a0f95f6cce71199e5f016a91f90cf0afe38bc86654b9d730d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf66930-95e3-4a55-8010-b1b6ca56bb72.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11961
x-amzn-requestid: 58d907ec-0831-48ff-bd18-92b1f364190f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2PeF__oAMF2lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e372f-1c97663c43ee7c5552e3a6f9;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:39:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uzlYcLMD0Q7UOHq2PSorqX5sCd-EuxB1LIKHLQeD5CusFroqIUVNRA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:10 GMT
age: 38516
etag: "067e0a350aaf1a509e8263f38191394e2fa1ee8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11961
Md5:    72e6e854c47d50c6eb07f491ac9ecc3b
Sha1:   067e0a350aaf1a509e8263f38191394e2fa1ee8f
Sha256: cc6c3dff5dd6da8b61a4891a4c8ebb441fb37bd45af06520bc32d025d276a0f1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c80a9fa-2fa0-4eaa-8573-26bcb62a1728.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12988
x-amzn-requestid: 98254e1f-8c22-46db-9eb3-6dd85a657173
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2Z2FG3IAMFlmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3772-2aa92ecb7ea390b82c1c2665;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:41:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ctRdi7t-KHO1QuclQGGeDghvY-dPCBmNTG03wzwi8Tf7kCcBNgnIjA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:07 GMT
age: 38519
etag: "591202053dde2e39766bb8d58898dd58bac94b64"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12988
Md5:    455fac45ae0c53d1597a541eaf497576
Sha1:   591202053dde2e39766bb8d58898dd58bac94b64
Sha256: 567510fec1be57dc02c7daf4aa2b6ecdfd79c218e02dbab9319ad8cee75034db