cti.myvnc.com/rd/c15564siQLp146335QEdB9127SJS1009oCSa1023
200 OK 235 B URL HTTP/1.1 cti.myvnc.com/rd/c15564siQLp146335QEdB9127SJS1009oCSa1023
IP
ASN #51559 Netinternet Bilisim Teknolojileri AS
File type HTML document, ASCII text
Hash 98c9bcb423acc9b6168657c6ebc350ac
734f738abfc9792d059ec004adbec0daef1356e4
e46f3127e1d2d73084efc503b86c3c5ab7091677b493e10d59f0cf4375b9a1e7
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /rd/c15564siQLp146335QEdB9127SJS1009oCSa1023 HTTP/1.1
Host: cti.myvnc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Tue, 08 Nov 2022 00:39:26 GMT
Content-Length: 235
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c7a8ba48383a0e56baca8c8c41b81a04
b04c1f1e730a71f17ff639c9db697c532d4e5421
7860552382285e6eddddc5226c6f6400caa3f6fc3cb4b8a2d550c6fc653f78bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7860552382285E6EDDDDC5226C6F6400CAA3F6FC3CB4B8A2D550C6FC653F78BB"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12957
Expires: Tue, 08 Nov 2022 04:15:23 GMT
Date: Tue, 08 Nov 2022 00:39:26 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9fd081ea88e8b8563986b3e558496d21
60700393dce5eb42c0db0d5feef340f4832e3c65
d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4724
Cache-Control: max-age=126636
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:26 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 11:50:02 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d8c32b2fb818533a5b3fe5c69157bde9
93594fd3fc50d9d444c28660eabba1edbe4f0588
df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7786
Expires: Tue, 08 Nov 2022 02:49:12 GMT
Date: Tue, 08 Nov 2022 00:39:26 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: J7nFzXAxDeSdX45JTRNhyyKn+D2f3Pbc+O8ok4TB4h7g6kbqRj0+7Cf06KCyyG5esx0jaw6f43o=
x-amz-request-id: FQMK9HQF2JX5YMC6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 08 Nov 2022 00:11:05 GMT
age: 1701
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 08 Nov 2022 00:39:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cti.myvnc.com/track/c15564siQLp146335QEdB9127SJS1009oCSa1023
302 Found 120 B URL HTTP/1.1 cti.myvnc.com/track/c15564siQLp146335QEdB9127SJS1009oCSa1023
IP
ASN #51559 Netinternet Bilisim Teknolojileri AS
File type HTML document, ASCII text
Hash 7e5a62fe2831e0fa409e812a9862bcc6
93087725ed678e6bc0d5726cdf0a64977b3a81a1
de14267cb75180d80811255a93de961c82ee192d914013228478e31701f5b148
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /track/c15564siQLp146335QEdB9127SJS1009oCSa1023 HTTP/1.1
Host: cti.myvnc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cti.myvnc.com/rd/c15564siQLp146335QEdB9127SJS1009oCSa1023
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: https://www.empiresames.com/7XMT7QP/TGZ1N6D/?sub1=9&sub2=1023-15564&sub3=146335-9127-1009
Date: Tue, 08 Nov 2022 00:39:27 GMT
Content-Length: 120
ocsp.sectigo.com/
200 OK 472 B IP
Hash 52a19687e5289df4378109d0854848c3
31a92b114cd89eccc46a064afbe607e89214f080
131a7bd36f7ae74328490db4c0b59242aae0ba21b6310607060a656f704ae373
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 08 Nov 2022 00:39:27 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 14:01:17 GMT
Expires: Sun, 13 Nov 2022 14:01:16 GMT
Etag: "31a92b114cd89eccc46a064afbe607e89214f080"
Cache-Control: max-age=479508,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 766a406b7b1dfac8-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash e6f4643306be10417c47176a6e67306f
940a13818904add9e1cacd12610f37ba1efd7bc5
67e51095b5da59b3eeda8a28c81789e69064a0a19a93347c2fcb05fd4b21e6d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5388
Cache-Control: max-age=122227
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:27 GMT
Etag: "6368caa6-1d7"
Expires: Wed, 09 Nov 2022 10:36:34 GMT
Last-Modified: Mon, 07 Nov 2022 09:06:46 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
www.empiresames.com/7XMT7QP/TGZ1N6D/?sub1=9&sub2=1023-15564&sub3=146335-9127-1009
302 Found 138 B URL HTTP/1.1 www.empiresames.com/7XMT7QP/TGZ1N6D/?sub1=9&sub2=1023-15564&sub3=146335-9127-1009
IP
ASN #61317 Ipxo Uk Limited
File type HTML document, ASCII text
Hash cb9f5d2d2c21d214cd7837e6103b7f4e
6f15a7d1e9589db0ce3646ff9cb36f65b55ec9fd
9783622704f72ac51cdc3b6242f58e9921645fd60444b4af3fc8ba2590622018
GET /7XMT7QP/TGZ1N6D/?sub1=9&sub2=1023-15564&sub3=146335-9127-1009 HTTP/1.1
Host: www.empiresames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://cti.myvnc.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 08 Nov 2022 00:39:27 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 138
Location: https://bloodsugarblaster.com/index-vsl-bsb-bg?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Set-Cookie: uniqueClick_TGZ1N6D=e57b78f4-f2f7-4bcb-a845-55a92967ab2c:1667867967; Path=/; Expires=Thu, 08 Dec 2022 00:39:27 GMT; SameSite=None
transaction_id=52c20bde14004ba7a749a7766ed548d4; Path=/; Expires=Mon, 06 Feb 2023 00:39:27 GMT; SameSite=None
Vary: Origin
X-Eflow-Request-Id: eb900a9e-439d-489d-b2c4-35d836d5a561
ocsp.digicert.com/
200 OK 278 B IP
Hash 9d894bf8f973bef0c845f74fa33a6115
4e50469156ac464eedf0c28778bb92faea928c5a
28b6a73e1bc63fa254d6f635a3bb8931c230868a77d7ffe4e140ece2f101186b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=168671
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:27 GMT
Etag: "6369951e-116"
Expires: Wed, 09 Nov 2022 23:30:38 GMT
Last-Modified: Mon, 07 Nov 2022 23:30:38 GMT
Server: nginx
Content-Length: 278
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: U7N4hwtdxIXtYHYzQXF7Gw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hJV7zMPws0Kl0ngnMAg+IoeyLiM=
bloodsugarblaster.com/hosted/images/ae/d580000b95456088aaa2faa1620ab8/price-with-credit-cards-69.png
200 OK 6.6 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/ae/d580000b95456088aaa2faa1620ab8/price-with-credit-cards-69.png
IP
File type PNG image data, 374 x 152, 8-bit colormap, non-interlaced\012- data
Hash d1f3617c8899abc425cd43253059e806
92e8eb085a65f404ce794136f5ac510e60aff21e
63b23215b21ece01a7cf195dcccd99aeb7766b01f95cb4b7d9d98a8304389aca
GET /hosted/images/ae/d580000b95456088aaa2faa1620ab8/price-with-credit-cards-69.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 6594
cf-ray: 766a4072dd64b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d1f3617c8899abc425cd43253059e806"
last-modified: Mon, 28 Mar 2022 06:38:58 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/60/927e8a0d0445f38bea8e3b6f0c78d1/s33-mny-bck.png
200 OK 18 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/60/927e8a0d0445f38bea8e3b6f0c78d1/s33-mny-bck.png
IP
File type PNG image data, 232 x 232, 8-bit colormap, non-interlaced\012- data
Hash aa5ab5fccc5bd8e0d6d7d21eb9ea675b
7c37cd346802cdcafadc9e0e8d4c061476c4af87
c56677aefe7436651fbff12f9ae0e5dae0a5b9aee608789eabded235f550e9ea
GET /hosted/images/60/927e8a0d0445f38bea8e3b6f0c78d1/s33-mny-bck.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 18549
cf-ray: 766a4072dd76b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "aa5ab5fccc5bd8e0d6d7d21eb9ea675b"
last-modified: Tue, 01 Sep 2020 10:09:51 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/57/77eccc4fc74649b7107fc6eddc37fe/gmp.png
200 OK 85 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/57/77eccc4fc74649b7107fc6eddc37fe/gmp.png
IP
File type PNG image data, 486 x 134, 8-bit/color RGBA, non-interlaced\012- data
Hash 9b02d68c29ea33f3e1a84f4ee342f78d
1911c483111fc7a8c70356e0df4fdff6af22ef1c
c6fcc9edb4e6d6b05f8bb745d457b6c0cb89431f1b594a7738447dd91d1b2fb6
GET /hosted/images/57/77eccc4fc74649b7107fc6eddc37fe/gmp.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 84662
cf-ray: 766a4072dd6bb4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "9b02d68c29ea33f3e1a84f4ee342f78d"
last-modified: Wed, 09 Sep 2020 09:58:27 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash a1087b0fb40e40eb154a27a41a59e3c2
7b61728edac3af17dd745536bf25a8929778215c
5bdb5cda1dacba6f3a576dd20df0de580bf23487fff4ccff5fd08b3a8ca7191d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5750
Cache-Control: max-age=113941
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:28 GMT
Etag: "6368a8df-118"
Expires: Wed, 09 Nov 2022 08:18:29 GMT
Last-Modified: Mon, 07 Nov 2022 06:42:39 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
bloodsugarblaster.com/hosted/images/1d/e6ef8a33684c6184cb39f2ece1adc7/price-with-credit-cards-177.png
200 OK 6.5 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/1d/e6ef8a33684c6184cb39f2ece1adc7/price-with-credit-cards-177.png
IP
File type PNG image data, 374 x 152, 8-bit colormap, non-interlaced\012- data
Hash ac52aebd7772bd706604bbe9a7e4456f
7fe180b1ab0ffc904fdeee5df02163f66d6b8563
45258b6cb346365f2327ee4f8c3f5270817f5209ed248b74a47c6ea277d030cb
GET /hosted/images/1d/e6ef8a33684c6184cb39f2ece1adc7/price-with-credit-cards-177.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 6534
cf-ray: 766a4072dd67b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "ac52aebd7772bd706604bbe9a7e4456f"
last-modified: Mon, 28 Mar 2022 06:39:35 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.3.1.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash d549b312f7a7d228b4ec229a6547dfdc
0766794582ad530ec0f8c2595f741086afffa312
f6488b2915e0ceee723f4320492511d46c6ba1860d5975d085e6da8913f55f44
GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-encoding: gzip
content-length: 30288
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
accept-ranges: bytes
server: nginx
etag: W/"28feccc0-1538f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1667867968.dop213.sk1.t,1667867968.cds232.sk1.hn,1667867968.cds217.sk1.c
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/83/2b6b1f47404cbaac1f4f19f02647d7/button-60-days.png
200 OK 13 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/83/2b6b1f47404cbaac1f4f19f02647d7/button-60-days.png
IP
File type PNG image data, 294 x 82, 8-bit/color RGB, non-interlaced\012- data
Hash 91fc270dfcefb30d5aa1a19979a13448
9909bcbcfe573a977461af0c602928dfd581051e
806967cd24e4b09be02a57d86fb7f7a8df73094230266a793216a09360376c6d
GET /hosted/images/83/2b6b1f47404cbaac1f4f19f02647d7/button-60-days.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 13435
cf-ray: 766a4072dd70b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "91fc270dfcefb30d5aa1a19979a13448"
last-modified: Mon, 06 Dec 2021 12:42:23 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 96791bd486db22c41012d25318835bdf
b32c813f16b84a6b2660bd527843da5e368af8eb
61a4589c35910af9f8d20ff0c7eca296a77a336ab00730573fe9ce7cf2cc72c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bloodsugarblaster.com/hosted/images/a0/aba125c19a43b6a9ba86d36f45d8da/3-bottles-177-most-popular_60-capsules.png
200 OK 167 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/a0/aba125c19a43b6a9ba86d36f45d8da/3-bottles-177-most-popular_60-capsules.png
IP
File type PNG image data, 612 x 1070, 8-bit colormap, non-interlaced\012- data
Size 167 kB (166653 bytes)
Hash 6af8ff7cac13feb7d71a78a54381290b
873628e402c1e5f0041dd69491270a61ed8ace5f
bf7cc6b2039c7389a18f37666fee53e986abda1524d7cf2a5920feaafeed92c2
GET /hosted/images/a0/aba125c19a43b6a9ba86d36f45d8da/3-bottles-177-most-popular_60-capsules.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 166653
cf-ray: 766a4072dd66b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "6af8ff7cac13feb7d71a78a54381290b"
last-modified: Fri, 28 Oct 2022 10:56:40 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/b3/31dca716e247f492d6bb835f7425f2/bsb-vsl-page---price-with-credit-cards-69.png
200 OK 6.5 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/b3/31dca716e247f492d6bb835f7425f2/bsb-vsl-page---price-with-credit-cards-69.png
IP
File type PNG image data, 374 x 152, 8-bit colormap, non-interlaced\012- data
Hash fbea7e076a1b4b045801665881d428a4
62afc2b7efcab32f5683c74b003c567c1cbaa8d1
1c0f920511dfb78fec3ee4da57274fc0ffc9ab604158ef70522929958c2c674f
GET /hosted/images/b3/31dca716e247f492d6bb835f7425f2/bsb-vsl-page---price-with-credit-cards-69.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 6483
cf-ray: 766a4072dd73b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "fbea7e076a1b4b045801665881d428a4"
last-modified: Thu, 20 Oct 2022 04:53:58 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
assets.clickfunnels.com/images/closemodal.png
200 OK 672 B URL HTTP/2 assets.clickfunnels.com/images/closemodal.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 19754ed4d508cf576c80cf36e0db8c50
f459beac714e5be68aa75349fa806a5642af456a
5216f197f782f4bb872e02a677986af90a488015910f8d3864b796ad68dbd389
GET /images/closemodal.png HTTP/1.1
Host: assets.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/webp
content-length: 672
cf-ray: 766a40731ba30b69-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 1035776
cache-control: public, max-age=2678400
content-disposition: inline; filename="closemodal.webp"
etag: "63571ab3-314"
expires: Fri, 09 Dec 2022 00:39:28 GMT
last-modified: Mon, 24 Oct 2022 23:07:31 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=788
set-cookie: __cf_bm=_YFBSKDB4x9e22KQsrW8zy7scY69I_U6SdOIfUWnao0-1667867968-0-AVf5M2M6dR8mawuIDYLfryArsJNfhVkHSIAzliAjUYbik8NPJiyL0IgeOD4gninH4du5xT/XuHsRM12eBbxm7kQ/OcQbVQzWkqI69/lCLMaT; path=/; expires=Tue, 08-Nov-22 01:09:28 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/1e/9092a1dd2d4edb90f043022a340fe2/granny-close.jpg
200 OK 37 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/1e/9092a1dd2d4edb90f043022a340fe2/granny-close.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=520, bps=0, PhotometricIntepretation=RGB, manufacturer=Canon, orientation=upper-left, width=640], progressive, precision 8, 386x363, components 3\012- data
Hash 18f80cb0afe05a76dd05b76480608364
394143b90d076b8b0a7db71115f55d91b1dd9d9e
a7fb2d6960affbfa2575fb6b5e65994ef3f346b01d7136d70df6137e9d84c076
GET /hosted/images/1e/9092a1dd2d4edb90f043022a340fe2/granny-close.jpg HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/jpeg
content-length: 37355
cf-ray: 766a4072ed7bb4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "18f80cb0afe05a76dd05b76480608364"
last-modified: Fri, 11 Oct 2019 07:44:03 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/a4/94d053584a4bf1ae225edb41ed6444/price-with-credit-cards-294.png
200 OK 6.7 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/a4/94d053584a4bf1ae225edb41ed6444/price-with-credit-cards-294.png
IP
File type PNG image data, 374 x 152, 8-bit colormap, non-interlaced\012- data
Hash b32acb1f5c465cd81542d9150ffaae49
1166b008b9b7e53f529b60d50750fc397fbb51e8
4f5619cbf511b3125daeb5efb907c685fa336cc90453cb6892fc685937f476ab
GET /hosted/images/a4/94d053584a4bf1ae225edb41ed6444/price-with-credit-cards-294.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 6708
cf-ray: 766a4072dd6ab4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "b32acb1f5c465cd81542d9150ffaae49"
last-modified: Mon, 28 Mar 2022 06:40:18 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/df/076189c9c5409eb80f345eac30dd2b/old-man-golfing2.jpg
200 OK 49 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/df/076189c9c5409eb80f345eac30dd2b/old-man-golfing2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, height=720, bps=0, PhotometricIntepretation=RGB, description=^BMODEL RELEASED. Golf player.^b Man holding a golf club and pulling his golf bag on a trolley., orientation=upper-left, width=480], progressive, precision 8, 480x595, components 3\012- data
Hash 704b8407994a6dbbdeea6af57970d2a5
05f8a63c641d6dc5e53c081daaf98cafc6bf7397
cea85492f8a891590be3f46a64bcc8445c00cef563f681d65e483b083c3db0d5
GET /hosted/images/df/076189c9c5409eb80f345eac30dd2b/old-man-golfing2.jpg HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/jpeg
content-length: 49347
cf-ray: 766a4072ed7ab4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "704b8407994a6dbbdeea6af57970d2a5"
last-modified: Sun, 13 Sep 2020 07:32:52 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/a7/af2c8ecfba40c2a1e7eb258d159d1c/bsb-vsl-page---price-with-credit-cards-177.png
200 OK 6.5 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/a7/af2c8ecfba40c2a1e7eb258d159d1c/bsb-vsl-page---price-with-credit-cards-177.png
IP
File type PNG image data, 374 x 152, 8-bit colormap, non-interlaced\012- data
Hash 0dcc052de1cc7afc77fdf876642584c9
e96681fb07fb76114bca8d410a97db82e9d05616
223b9348b29a5f8008e14747b4524fea1df056b842f8908b13dd6f0a0e200408
GET /hosted/images/a7/af2c8ecfba40c2a1e7eb258d159d1c/bsb-vsl-page---price-with-credit-cards-177.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 6457
cf-ray: 766a4072dd75b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "0dcc052de1cc7afc77fdf876642584c9"
last-modified: Thu, 20 Oct 2022 04:54:20 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 96791bd486db22c41012d25318835bdf
b32c813f16b84a6b2660bd527843da5e368af8eb
61a4589c35910af9f8d20ff0c7eca296a77a336ab00730573fe9ce7cf2cc72c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bloodsugarblaster.com/hosted/images/ec/d2b84b478f4329bab0c829e1ee6024/old-man-with-baby2.jpg
200 OK 71 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/ec/d2b84b478f4329bab0c829e1ee6024/old-man-with-baby2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=854, bps=206, PhotometricIntepretation=RGB, description=Senior couple with baby grandchild, Asian grandparents family, life insurance concept., manufacturer=NIKON CORPORATION, model=NIKON D800, orientation=upper-left, width=1280], progressive, precision 8, 703x705, components 3\012- data
Hash 4e730764c0afcf2cd2fb33166fd7f1ff
ee8f6f76aa6601a1baad66a184a46730a699b97d
acf7737820a010ed6c967ed294dd2eff1b16d4a1786ac016fee6745d51cc63ce
GET /hosted/images/ec/d2b84b478f4329bab0c829e1ee6024/old-man-with-baby2.jpg HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/jpeg
content-length: 70827
cf-ray: 766a4072fd87b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "4e730764c0afcf2cd2fb33166fd7f1ff"
last-modified: Sun, 13 Sep 2020 07:42:24 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/23/23aff0ac2043cab8ce295c940b02c1/free_shipping2.png
200 OK 23 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/23/23aff0ac2043cab8ce295c940b02c1/free_shipping2.png
IP
File type PNG image data, 500 x 150, 8-bit/color RGB, non-interlaced\012- data
Hash aa02116c829a7a3e709c71c536315ec4
579ebf2760d4f4c6ec9add3bd7afe0d21d78ca6d
1d98d2e73c07d06c89a1143b4617a4bf20255c5867d9046709468adafa102dca
GET /hosted/images/23/23aff0ac2043cab8ce295c940b02c1/free_shipping2.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 23032
cf-ray: 766a4072dd65b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "aa02116c829a7a3e709c71c536315ec4"
last-modified: Thu, 10 Oct 2019 12:00:30 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/73/f8353f5e90457ab8498f75d7c9d036/6-bottles-294-best-value_60-capsules.png
200 OK 177 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/73/f8353f5e90457ab8498f75d7c9d036/6-bottles-294-best-value_60-capsules.png
IP
File type PNG image data, 612 x 1070, 8-bit colormap, non-interlaced\012- data
Size 177 kB (176740 bytes)
Hash a18594b120621f027a36136f4f1b9d1c
3472691707c16e3adafbb6110535c734e3232a51
bdeff8caa711bdd4f2281e0bdc3193a49d609918f0a3568c53daaf9702e78713
GET /hosted/images/73/f8353f5e90457ab8498f75d7c9d036/6-bottles-294-best-value_60-capsules.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 176740
cf-ray: 766a4072dd6fb4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "a18594b120621f027a36136f4f1b9d1c"
last-modified: Fri, 28 Oct 2022 10:57:07 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/88/31147308d14fcbaf1bdc51ed110dcf/old-woman-smiling.jpg
200 OK 111 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/88/31147308d14fcbaf1bdc51ed110dcf/old-woman-smiling.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=17, height=4205, bps=218, compression=none, PhotometricIntepretation=RGB, description=Portrait of happy elderly hispanic lady smiling at camera. Copy space, manufacturer=NIKON CORPORATION, model=NIKON D800E, orientation=upper-left, width=6300], progressive, precision 8, 927x854, components 3\012- data
Size 111 kB (111130 bytes)
Hash f87b5cd72e1dc64ce6c8eb09477911e6
52f25420c24c9315a47c0cd5b21bda9c8f98dbac
38d6443c868e8e44e0fca03032c73efd6276674ca295b384d441180c9c2a9106
GET /hosted/images/88/31147308d14fcbaf1bdc51ed110dcf/old-woman-smiling.jpg HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/jpeg
content-length: 111130
cf-ray: 766a4072fd8bb4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "f87b5cd72e1dc64ce6c8eb09477911e6"
last-modified: Sun, 13 Sep 2020 07:46:27 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/f5/d23fbc3050430488a8cab08101a14b/bsb-vsl-page---price-with-credit-cards-294.png
200 OK 6.5 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/f5/d23fbc3050430488a8cab08101a14b/bsb-vsl-page---price-with-credit-cards-294.png
IP
File type PNG image data, 374 x 152, 8-bit colormap, non-interlaced\012- data
Hash 70033c7db7b025c16b7c3d4bedd4f653
31fb8088613d03168ff7b2547eacf223ed843c3c
be3a4b6bb47975cc838878a9cdc693df550e95aa09baae19b5c3dbe75f6d3d36
GET /hosted/images/f5/d23fbc3050430488a8cab08101a14b/bsb-vsl-page---price-with-credit-cards-294.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 6539
cf-ray: 766a4072dd72b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "70033c7db7b025c16b7c3d4bedd4f653"
last-modified: Thu, 20 Oct 2022 04:54:38 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/ef/cf80aeb7ed4f949a0145429d6c5d41/6-bottles-294-best-value_60-capsules.png
200 OK 180 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/ef/cf80aeb7ed4f949a0145429d6c5d41/6-bottles-294-best-value_60-capsules.png
IP
File type PNG image data, 612 x 1070, 8-bit colormap, non-interlaced\012- data
Size 180 kB (180157 bytes)
Hash 7e4d58cc023d5c0c0d62481079e8392f
b4079d60fed7fc848266cb71f7c369102d4f8bd6
6d781a632cd20f2e62bf31d72750ba7b1b37199f90f828932ad0d29351679834
GET /hosted/images/ef/cf80aeb7ed4f949a0145429d6c5d41/6-bottles-294-best-value_60-capsules.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 180157
cf-ray: 766a4072dd68b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "7e4d58cc023d5c0c0d62481079e8392f"
last-modified: Tue, 03 May 2022 08:22:16 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
bloodsugarblaster.com/hosted/images/df/4976d0537c421ab2548398253c4097/1-bottle-69_60-capsules.png
200 OK 134 kB URL HTTP/2 bloodsugarblaster.com/hosted/images/df/4976d0537c421ab2548398253c4097/1-bottle-69_60-capsules.png
IP
File type PNG image data, 612 x 1070, 8-bit colormap, non-interlaced\012- data
Size 134 kB (134071 bytes)
Hash 3da30234b3c08444c0a4e9ed18f6b9df
6e4dd5aaf203d642b6783f65084ee51e2808be3e
7a92a67392f7a8d847a0ee7234775c35953f9d25adf6da8ed97e58b33e8b0c82
GET /hosted/images/df/4976d0537c421ab2548398253c4097/1-bottle-69_60-capsules.png HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: image/png
content-length: 134071
cf-ray: 766a4072dd63b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "3da30234b3c08444c0a4e9ed18f6b9df"
last-modified: Fri, 28 Oct 2022 10:56:09 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 96791bd486db22c41012d25318835bdf
b32c813f16b84a6b2660bd527843da5e368af8eb
61a4589c35910af9f8d20ff0c7eca296a77a336ab00730573fe9ce7cf2cc72c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 6.6 kB URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
Hash 022c3c5ea9598925a57834ef08cc5e40
a348da496354c860be84f55bc6ff7d9c67ba0699
04d48cb72a7fd90dfafa053a0711d1df96c8ea595e64853f494329daa697aa92
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 766a407368b6b506-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NCQV9V8
200 OK 86 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NCQV9V8
IP
File type ASCII text, with very long lines (13731)
Hash aa77315c85af45a9951000d03cedf68a
c1934939b4331720936a0cd587f0985258440603
cda16282abf4c882392bf11b172f6db09417f067b36b9f0d76aae0c992bd699f
GET /gtm.js?id=GTM-NCQV9V8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 08 Nov 2022 00:39:28 GMT
expires: Tue, 08 Nov 2022 00:39:28 GMT
cache-control: private, max-age=900
last-modified: Tue, 08 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85807
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bloodsugarblaster.com/assets/userevents/application.js
200 OK 2.3 kB URL HTTP/2 bloodsugarblaster.com/assets/userevents/application.js
IP
File type ASCII text, with very long lines (5244), with no line terminators
Hash 86358172de441888edcddf85f7fed2d1
bb15a270ef39c4519caa45d59bbbda76c0eef34e
32aac53bcce8a373a0e3dd170732ef32948e3ea5b339bc4c9d59301794a3fabf
GET /assets/userevents/application.js HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: application/x-javascript
cf-ray: 766a4072cd58b4ff-OSL
access-control-allow-origin: *
age: 1071
cache-control: public, max-age=1200
etag: W/"6359dae3-147c"
expires: Tue, 08 Nov 2022 00:59:28 GMT
last-modified: Thu, 27 Oct 2022 01:12:03 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 01 Nov 2022 17:10:21 GMT
expires: Wed, 01 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 545347
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
use.fontawesome.com/releases/v5.9.0/css/all.css
200 OK 13 kB URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/all.css
IP
File type ASCII text, with very long lines (55782)
Hash 94b0af67159e7907e2f4b74ac77a4a5a
aa907a29bbda7482ed6ad3a4f5d7bb7814c9a176
24c97c32d306fe0407190135d0f97850b350dc01d7361375c06dd51f27691b9a
GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: text/css
x-amz-id-2: aTwuyWgaPvMb6JWlB6xk6ko4jaJeYcep7GkUNwiiQ54PacIiib0YpvXLB8kuH9wuaqemxGQSQA4=
x-amz-request-id: PSJN9FGRVEEQCVY1
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 631850
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jYnWPmrfsURzkn20Q5HBJH5KEVEyiynoJk%2F25QWEjqvuuFd8tNzzDKc%2BEPhxPIJJ01ahR7NUDC4pdFSoBWlKMHK4BO15qOI8582vy3zU1GtYKimNxGZiY%2FiQPC6q13S8t4ytO4QW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 766a40733d27777f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Helvetica+Neue+Helvetica+Arial+sans-serif%7CLato+sans-serif%7CHelvetica+Neue+Helvetica+Arial+sans-serif%7CLato+sans-serif%7COswald%7CLato+sans-serif%7COswald%7CLato+sans-serif%7COswald%7CLato+sans-serif%7C%7C
200 OK 18 kB URL HTTP/2 fonts.googleapis.com/css?family=Helvetica+Neue+Helvetica+Arial+sans-serif%7CLato+sans-serif%7CHelvetica+Neue+Helvetica+Arial+sans-serif%7CLato+sans-serif%7COswald%7CLato+sans-serif%7COswald%7CLato+sans-serif%7COswald%7CLato+sans-serif%7C%7C
IP
Hash 80848a5814bb640d6ca238b78e51ffaa
0ee94c996d8923e4bebb2fccc362bc2fb641388c
010aa190ad353f6a1733e1eeb279dd94ab41769227b60ab13b8ca1f158714cec
GET /css?family=Helvetica+Neue+Helvetica+Arial+sans-serif%7CLato+sans-serif%7CHelvetica+Neue+Helvetica+Arial+sans-serif%7CLato+sans-serif%7COswald%7CLato+sans-serif%7COswald%7CLato+sans-serif%7COswald%7CLato+sans-serif%7C%7C HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 08 Nov 2022 00:39:28 GMT
date: Tue, 08 Nov 2022 00:39:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d6dbaa7f1a697305cfaabdc859cdb9d3
680fa363852fb33b9b76b83d3ba5c0a4c51499cb
2ccc20d4d484d91da7e9fb07056d62a620af07b21f495be49f54e7e83c988dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 04 Nov 2022 23:14:29 GMT
expires: Sat, 04 Nov 2023 23:14:29 GMT
cache-control: public, max-age=31536000
age: 264299
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bloodsugarblaster.com/assets/lander.js
200 OK 701 kB URL HTTP/2 bloodsugarblaster.com/assets/lander.js
IP
File type ASCII text, with very long lines (32752)
Size 701 kB (701392 bytes)
Hash e50d8bafb697408e75e963a1c378f0de
cee9814ac303bd7b90fc4069c3efbaff8f5d19b9
b727a49836c0965e8648c51d352d4ea7eef52f556aedb7ba56afbfafe8f34fd8
GET /assets/lander.js HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: application/x-javascript
cf-ray: 766a4072fd8cb4ff-OSL
access-control-allow-origin: *
age: 116
cache-control: public, max-age=1200
etag: W/"6359db3a-2391a3"
expires: Tue, 08 Nov 2022 00:59:28 GMT
last-modified: Thu, 27 Oct 2022 01:13:30 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16853
Expires: Tue, 08 Nov 2022 05:20:22 GMT
Date: Tue, 08 Nov 2022 00:39:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16853
Expires: Tue, 08 Nov 2022 05:20:22 GMT
Date: Tue, 08 Nov 2022 00:39:29 GMT
Connection: keep-alive
use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
200 OK 4.7 kB URL HTTP/2 use.fontawesome.com/releases/v5.9.0/css/v4-shims.css
IP
File type ASCII text, with very long lines (26440)
Hash e6419eafdc9c03c6960c9925f96a779d
83721a57e88c7e20aa049b81e3bf64ee6208b6ad
5d938b8d6bff238f815dc3a7517dcd1c4a710173eba3f59ca8ca76a3f90fc387
GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: text/css
x-amz-id-2: lj0FvMnfC9mptRM/Gd0lw9lT7Zj4wo+oaxaEYLcDnZaRJXq3Oc/kbTmcEwen2MxXaG9FhyIrGnI=
x-amz-request-id: 9D38DJ2PTJVFVSCR
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1049297
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=146blFjJxAYCQEeYPADx2xpKLHAyqY6ag0MpbP1L3RK61wQXzq4WCoXPWm4DjVtzxOLz26TKgVRMeRXb3oNZ34NUDjb2lH19HKLK%2FB14BWOOQczOYdH2%2FXE3pLIlZcx9kUpc%2BLk9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 766a40738d86777f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bF_38GKXoAMFwSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q0yZmbExDP4tH0n1n2qj_NR2Mv_y_dsO0LJ1RKZoS6Me-NLbhpUWqw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 09:11:38 GMT
age: 55671
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82ab8149-62c6-4727-9019-70839d779642.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82ab8149-62c6-4727-9019-70839d779642.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5cbd50295a4fbc6734f47c8f4ef6f94c
bb9122e3f153a3100b89688c6c08ba938a7e7db3
97ae4592605581e855fda6e523760f600a34dd5f10a4195d0c8df8e220fdd77e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82ab8149-62c6-4727-9019-70839d779642.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4957
x-amzn-requestid: 26e93d70-5b68-42da-bcd5-52bbe56e03ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKlFKVoAMFqbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a43-022225f9302584a05745898c;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:03 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MIR5HtAWLmnfxAyzfiq4WdiNORSLl1xaO77lelEYldKf2dZIi6UfcA==
via: 1.1 feda34dcbf6a00e232656b7983c2c7f0.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 22:12:38 GMT
age: 8811
etag: "bb9122e3f153a3100b89688c6c08ba938a7e7db3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5ca2e26-8d97-41c7-ab13-0a83acea6fba.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5ca2e26-8d97-41c7-ab13-0a83acea6fba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25906fd46cc175d22a26b74f6818276c
04ff44aae159949934dab236a859d47605229416
71c54baaeedf1f95b24b118e0e788b516847712cc81704520cff58b22a8e3b76
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5ca2e26-8d97-41c7-ab13-0a83acea6fba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4266
x-amzn-requestid: 928296aa-883a-45a1-adc1-b4bb1d8041fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKMEnjoAMF0Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a41-4bf2d24e089a9b19178bac8b;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: PWoH84JsugJSOe6HbRzZ5h5RUpat59Ky1xlqUjFH5JqQ9Y14G-e-5w==
via: 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:30 GMT
age: 10739
etag: "04ff44aae159949934dab236a859d47605229416"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b64fcd58491917edfc8ffb57c1382cd0
edf97aab58dacd11fa52924b1382c2bf1ede5e55
a2c60a2f7780085b4643ab7f521fb6c858ca72c3170e6f3acd2250b9c3b14cc5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12662
x-amzn-requestid: edaa58fb-c3eb-4af0-ad32-be8c7cf14421
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKLHSBoAMFsxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a40-4c35cd455ff7a829756eeb56;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0hHTn8clg8Vivq9EZIW00ggF69akYfyHcnAgqGkdvydUzPYnQl0jeA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:30 GMT
age: 10739
etag: "edf97aab58dacd11fa52924b1382c2bf1ede5e55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
200 OK 42 kB URL HTTP/2 bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10200), with CRLF, LF line terminators
Hash 1306b287a3e79517d9ce5dc1be18dc5e
eb33f7f60ae2452867d4254be0725319de0464be
b9c5a3518f3dda457315894a24a9d36bc08a1f6a023652c96d172340c6fa3f3f
GET /index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4 HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://cti.myvnc.com/
Connection: keep-alive
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: text/html; charset=utf-8
cf-ray: 766a406f9b21b4ff-OSL
access-control-allow-origin: *
cache-control: max-age=60, public, s-maxage=600, r-maxage=10
last-modified: Mon, 31 Oct 2022 07:51:05 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: MISS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
status: 200 OK
x-content-digest: ecb2b3622c85ec1dd11b55fab3644ad86d5cb2d0
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss, store
x-request-id: 4bf069d1ae65c7d208de3a3efd6d4edc
x-runtime: 0.285594
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39446652ee66d20bd73df20f1a29589c
349ea78f3ad0f2f7376ba22e417226b2e06806d7
655a00944a319ba167e99b43055044cb18bc48d53605ff0d1b6c8b1ba8ee8237
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4737
x-amzn-requestid: ad230e08-9f4e-46cf-9a86-f8e013a1c498
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQBFkEhLIAMFq_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697bbd-7e8b686a23a84c5d473c9ef5;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:42:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FoOPmZEjC6nhw801dgqENVL-9-aC0pyFAF-fMS57XzQyfxck2GGUvA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:55:45 GMT
age: 9824
etag: "349ea78f3ad0f2f7376ba22e417226b2e06806d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=cTBBcG5WV1VyMkZvektLNC9VR1RJdz09LS01Y1RCL1ZPYkJTYktyUVlyVnhjZkd3PT0%3D--41114bcdb1d39365b85d4093c652cd77d472efbb&page_id=b1Y0TW9JZndyR2syNW9zZS9oSDJhdz09LS1KN2JITktoUEJrZ1M3T25PYzJLaWJBPT0%3D--2fb4c9c381cc8518de05523690b07b6ed7ed204f&funnel_step_id=VnlaRDNjU2MvbFZpVjQwM2ZYaVEvdz09LS1iaklKdkwvQ1VhZkFLVHlGWkcyMDdBPT0%3D--9b91573651c52213d3f0880b6c7c9497fc7df3b1&user_id=N3puZnExUHFGS2hhcldmUEVEemZOdz09LS1rZTZ5Tnc0U2pmenN1c1BRV2ZQVmVnPT0%3D--e33744d1b15128bce4841aebf26bc0e3b87a7db6&account_id=Uno5bUNuYmxCelFpNmFhdnN1eE83QT09LS1HTDA5bjhuUkluVUFzdnpSSGNBQzBBPT0%3D--0e6cbba59288c29b0fd7ab1fd8e12e478be920ff&page_code=NTMyMzY5Njc%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=8becf4f4-fea6-40dc-9632-7bc48a1bf4e1&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4
202 Accepted 279 B URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=cTBBcG5WV1VyMkZvektLNC9VR1RJdz09LS01Y1RCL1ZPYkJTYktyUVlyVnhjZkd3PT0%3D--41114bcdb1d39365b85d4093c652cd77d472efbb&page_id=b1Y0TW9JZndyR2syNW9zZS9oSDJhdz09LS1KN2JITktoUEJrZ1M3T25PYzJLaWJBPT0%3D--2fb4c9c381cc8518de05523690b07b6ed7ed204f&funnel_step_id=VnlaRDNjU2MvbFZpVjQwM2ZYaVEvdz09LS1iaklKdkwvQ1VhZkFLVHlGWkcyMDdBPT0%3D--9b91573651c52213d3f0880b6c7c9497fc7df3b1&user_id=N3puZnExUHFGS2hhcldmUEVEemZOdz09LS1rZTZ5Tnc0U2pmenN1c1BRV2ZQVmVnPT0%3D--e33744d1b15128bce4841aebf26bc0e3b87a7db6&account_id=Uno5bUNuYmxCelFpNmFhdnN1eE83QT09LS1HTDA5bjhuUkluVUFzdnpSSGNBQzBBPT0%3D--0e6cbba59288c29b0fd7ab1fd8e12e478be920ff&page_code=NTMyMzY5Njc%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=8becf4f4-fea6-40dc-9632-7bc48a1bf4e1&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4
IP
Hash 8e2e79b62a4dcf0ae6298abf6f04c42d
d5818d6be7f9e5fe43895bc5ee0b26c8b1f06e5c
0177f64e5fe403e018096149b759ed648c79ef0210c73ef092c358560e8ac602
GET /userevents/?funnel_id=cTBBcG5WV1VyMkZvektLNC9VR1RJdz09LS01Y1RCL1ZPYkJTYktyUVlyVnhjZkd3PT0%3D--41114bcdb1d39365b85d4093c652cd77d472efbb&page_id=b1Y0TW9JZndyR2syNW9zZS9oSDJhdz09LS1KN2JITktoUEJrZ1M3T25PYzJLaWJBPT0%3D--2fb4c9c381cc8518de05523690b07b6ed7ed204f&funnel_step_id=VnlaRDNjU2MvbFZpVjQwM2ZYaVEvdz09LS1iaklKdkwvQ1VhZkFLVHlGWkcyMDdBPT0%3D--9b91573651c52213d3f0880b6c7c9497fc7df3b1&user_id=N3puZnExUHFGS2hhcldmUEVEemZOdz09LS1rZTZ5Tnc0U2pmenN1c1BRV2ZQVmVnPT0%3D--e33744d1b15128bce4841aebf26bc0e3b87a7db6&account_id=Uno5bUNuYmxCelFpNmFhdnN1eE83QT09LS1HTDA5bjhuUkluVUFzdnpSSGNBQzBBPT0%3D--0e6cbba59288c29b0fd7ab1fd8e12e478be920ff&page_code=NTMyMzY5Njc%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniqueVisitorsCreatedSummary&nonce=8becf4f4-fea6-40dc-9632-7bc48a1bf4e1&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4 HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Tue, 08 Nov 2022 00:39:29 GMT
content-type: text/html
cf-ray: 766a40774ce2b4f7-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: d44079b75194ab1f66b6e9fcbcca2bad
x-runtime: 0.033876
set-cookie: __cf_bm=I7brxx3wtHjNYZs7.xELzRdShup2pTVM4k8AbThJlKg-1667867969-0-AZCgWZ9RbH0rOrHknzafJ4mxxqNy9GfOs2a8zuBuoMNX8aJVGPWS4FuJz9ChwBZzsVBH1jl5hlhMBAibVnrzU2k/CbbY+fc+Wcmw/dbhgVJf; path=/; expires=Tue, 08-Nov-22 01:09:29 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
go.maxweb.com/conversion/iframe/?a=6397&token=f4d0d337deba4561beb954e818c2dfca
200 OK 878 B URL HTTP/2 go.maxweb.com/conversion/iframe/?a=6397&token=f4d0d337deba4561beb954e818c2dfca
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a92692eff7670c39ca5795c2ab9e305a
755c2cba145d2e4cb7b4c93cfc691bbef9dc9cc4
3ee869e341b9ea39930c9fc4cf4688011498eea5239213784dac1ff5907d1f5e
GET /conversion/iframe/?a=6397&token=f4d0d337deba4561beb954e818c2dfca HTTP/1.1
Host: go.maxweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:29 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Tue, 08 Nov 2022 01:39:29 GMT
cache-control: max-age=3600, private
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 766a40799e73b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 3.4 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8312), with no line terminators
Hash 89be5fd8b5292dc6e38fd7a805bf02f8
683023c366699c6f0926638e246bdff494609c72
96fff1dd1cebc48e791cdc5fa16edbdc27fc7a15ba69ec81809f84b857f7e544
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "446da9725f4c8e155874416d765e9a8c:1667734744.287101"
Last-Modified: Sun, 06 Nov 2022 11:39:04 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Tue, 08 Nov 2022 00:59:29 GMT
Date: Tue, 08 Nov 2022 00:39:29 GMT
Content-Length: 3351
Connection: keep-alive
d2saw6je89goi1.cloudfront.net/uploads/digital_asset/file/607546/vitalityfavicon-16x16.png
200 OK 1.3 kB URL HTTP/2 d2saw6je89goi1.cloudfront.net/uploads/digital_asset/file/607546/vitalityfavicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash e867d01d8377be8ed1ba153f68b720d5
7dd5a7e15a5d2a3448f00fbfd2a515930835136b
d8f7b8ea5272be06d9485db56e6c8fa02179529d80c71b99783ebf731c376004
GET /uploads/digital_asset/file/607546/vitalityfavicon-16x16.png HTTP/1.1
Host: d2saw6je89goi1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 1257
date: Tue, 06 Sep 2022 01:19:42 GMT
last-modified: Sat, 19 Oct 2019 10:14:07 GMT
etag: "e867d01d8377be8ed1ba153f68b720d5"
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ekGz5txx6xsWjW6fpUEcSdf2NAMV1dBXG-Mv0ma3b8hTdCgdMZe62Q==
age: 5440788
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d9e23a9bac6355d898d29c56c76a7b00
7cb358d9beb843c88c86b5c642a06ea5f5130229
e65a19ba171586388a4c1260cd602e4938f4a0de1fbe4cb622976d11a0615954
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2962
Cache-Control: max-age=110110
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:29 GMT
Etag: "6368a4cd-1d7"
Expires: Wed, 09 Nov 2022 07:14:39 GMT
Last-Modified: Mon, 07 Nov 2022 06:25:17 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6e8ee97ec58f7d2991905f88bd3a463f
b87a69e7b938d01a4ac7d74ec69bffb4051695f0
1fe031e258c6a541e040de89c4ebcdfd9ddf78d391f77e858b44aef18469373d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a9374206851834987bb6f42fdbde6965
1e7632ba7b83a2258cb88662d2fb2783d400dec3
854af7f8daaf516b72c709bf1c9e6ba2637431efac48d977c520440cb3b99dca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tracking.buygoods.com/track/?a=7193&firstcookie=0&referrer=http%3A%2F%2Fcti.myvnc.com%2F&product=blood1,blood3,blood6&sessid2=&caller_url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4
200 OK 22 kB URL HTTP/2 tracking.buygoods.com/track/?a=7193&firstcookie=0&referrer=http%3A%2F%2Fcti.myvnc.com%2F&product=blood1,blood3,blood6&sessid2=&caller_url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4
IP
File type ASCII text, with very long lines (704), with CRLF line terminators
Hash 32731ffd7301e50b0e3354fe1d24abaf
212e0fff4c26d800cdbca72b639b1796332f33a3
d9d6ea8bcbb16d70e73662306cd8f06eb49e1c2041641514c04137a310d4730a
GET /track/?a=7193&firstcookie=0&referrer=http%3A%2F%2Fcti.myvnc.com%2F&product=blood1,blood3,blood6&sessid2=&caller_url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4 HTTP/1.1
Host: tracking.buygoods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:29 GMT
content-type: application/javascript
p3p: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE"
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Tue, Jan 12 1999 01:01:01 GMT
set-cookie: spiaffid_7193=58; expires=Mon, 06-Feb-2023 00:39:29 GMT; Max-Age=7776000; path=/; domain=.buygoods.com
spisubid_7193=4288%7C52c20bde14004ba7a749a7766ed548d4; expires=Mon, 06-Feb-2023 00:39:29 GMT; Max-Age=7776000; path=/; domain=.buygoods.com
spicampaign_id_7193=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.buygoods.com
spireferrer_7193=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.buygoods.com
spireferrer_7193=91.90.42.154:cti.myvnc.com:bloodsugarblaster.com%2Findex-vsl-bsb-bg-1; expires=Mon, 06-Feb-2023 00:39:29 GMT; Max-Age=7776000; path=/; domain=.buygoods.com
spisessid2_7193=sessid20221108003920418; expires=Mon, 06-Feb-2023 00:39:29 GMT; Max-Age=7776000; path=/; domain=.buygoods.com
spi_funnel_codename_7193=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.buygoods.com
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 766a40797fcd0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/702547308/?random=1667867966706&cv=11&fst=1667867966706&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ref=http%3A%2F%2Fcti.myvnc.com%2F&tiba=Blood%20Sugar%20Blaster%20-%20Official&auid=860036710.1667867967&rfmt=3&fmt=4
200 OK 943 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/702547308/?random=1667867966706&cv=11&fst=1667867966706&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ref=http%3A%2F%2Fcti.myvnc.com%2F&tiba=Blood%20Sugar%20Blaster%20-%20Official&auid=860036710.1667867967&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2087), with no line terminators
Hash 5addd866b1486cf051574ed6fa0efa4f
9e544b33158529cce0a761205d62758c1b5e53a8
e501eacf48362fdb3de26279d3a3ffdd32ee48c87ef531b5bc3158a5e87cc60d
GET /pagead/viewthroughconversion/702547308/?random=1667867966706&cv=11&fst=1667867966706&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ref=http%3A%2F%2Fcti.myvnc.com%2F&tiba=Blood%20Sugar%20Blaster%20-%20Official&auid=860036710.1667867967&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 00:39:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 943
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 08-Nov-2022 00:54:29 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d9e23a9bac6355d898d29c56c76a7b00
7cb358d9beb843c88c86b5c642a06ea5f5130229
e65a19ba171586388a4c1260cd602e4938f4a0de1fbe4cb622976d11a0615954
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2962
Cache-Control: max-age=110110
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:29 GMT
Etag: "6368a4cd-1d7"
Expires: Wed, 09 Nov 2022 07:14:39 GMT
Last-Modified: Mon, 07 Nov 2022 06:25:17 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a9374206851834987bb6f42fdbde6965
1e7632ba7b83a2258cb88662d2fb2783d400dec3
854af7f8daaf516b72c709bf1c9e6ba2637431efac48d977c520440cb3b99dca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6e8ee97ec58f7d2991905f88bd3a463f
b87a69e7b938d01a4ac7d74ec69bffb4051695f0
1fe031e258c6a541e040de89c4ebcdfd9ddf78d391f77e858b44aef18469373d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/03bec62d/www-widgetapi.vflset/www-widgetapi.js
200 OK 53 kB URL HTTP/2 www.youtube.com/s/player/03bec62d/www-widgetapi.vflset/www-widgetapi.js
IP
File type ASCII text, with very long lines (817)
Hash efbe5d693c29988cd946bacd530b5424
45a2aa278239d51efe6141f66909e0168ffe10c2
696e8e37891b75f8b331acfd60dc86042657593af43aeb40b2c50881e31059b9
GET /s/player/03bec62d/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 52800
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Nov 2022 20:54:17 GMT
expires: Tue, 07 Nov 2023 20:54:17 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 31 Oct 2022 00:17:24 GMT
content-type: text/javascript
age: 13513
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 01c1a1367e530a799bcaee7de89eefee
19d2450df87f1f3bb1c94e6e0bafbd60c7aead00
79cce6506b30bd3c699a700851db3254c2b909e559c54408b7d254b8e50003e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3549d49ec9ef3b66f2f3da1f6172ef93
54fa67ac88099ed2d4cdf7e24c8b301c7a098d0b
0af6a29f343dcbc612e18ab821ae8555975e27c363d72205366a3c5bb85b7211
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/702547308/?random=1667867966706&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ref=http%3A%2F%2Fcti.myvnc.com%2F&tiba=Blood%20Sugar%20Blaster%20-%20Official&fmt=3&is_vtc=1&random=1683648185&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/702547308/?random=1667867966706&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ref=http%3A%2F%2Fcti.myvnc.com%2F&tiba=Blood%20Sugar%20Blaster%20-%20Official&fmt=3&is_vtc=1&random=1683648185&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/702547308/?random=1667867966706&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ref=http%3A%2F%2Fcti.myvnc.com%2F&tiba=Blood%20Sugar%20Blaster%20-%20Official&fmt=3&is_vtc=1&random=1683648185&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 00:39:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/702547308/?random=1667867966706&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ref=http%3A%2F%2Fcti.myvnc.com%2F&tiba=Blood%20Sugar%20Blaster%20-%20Official&fmt=3&is_vtc=1&random=1683648185&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/702547308/?random=1667867966706&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ref=http%3A%2F%2Fcti.myvnc.com%2F&tiba=Blood%20Sugar%20Blaster%20-%20Official&fmt=3&is_vtc=1&random=1683648185&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/702547308/?random=1667867966706&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2wgb20&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ref=http%3A%2F%2Fcti.myvnc.com%2F&tiba=Blood%20Sugar%20Blaster%20-%20Official&fmt=3&is_vtc=1&random=1683648185&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 00:39:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/607159577/?random=1667867967386&cv=11&fst=1667867967386&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&label=zeYFCJuKwf8BEJmKwqEC&hn=www.google.com&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels>m_ee=1&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/607159577/?random=1667867967386&cv=11&fst=1667867967386&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&label=zeYFCJuKwf8BEJmKwqEC&hn=www.google.com&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels>m_ee=1&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/607159577/?random=1667867967386&cv=11&fst=1667867967386&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&label=zeYFCJuKwf8BEJmKwqEC&hn=www.google.com&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels>m_ee=1&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.maxweb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 00:39:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/607159577/?random=1667867967386&cv=11&fst=1667867967386&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&label=zeYFCJuKwf8BEJmKwqEC&hn=www.google.com&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels>m_ee=1&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/607159577/?random=1667867967377&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4031923539&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/607159577/?random=1667867967377&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4031923539&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/607159577/?random=1667867967377&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4031923539&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.maxweb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 00:39:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/607159577/?random=1667867967377&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4031923539&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/607159577/?random=1667867967377&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4031923539&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/607159577/?random=1667867967377&cv=11&fst=1667865600000&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4031923539&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.maxweb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 00:39:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/607159577/?random=1667867967386&cv=11&fst=1667867967386&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&label=zeYFCJuKwf8BEJmKwqEC&hn=www.google.com&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels>m_ee=1&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/607159577/?random=1667867967386&cv=11&fst=1667867967386&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&label=zeYFCJuKwf8BEJmKwqEC&hn=www.google.com&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels>m_ee=1&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/607159577/?random=1667867967386&cv=11&fst=1667867967386&bg=ffffff&guid=ON&async=1>m=2oab20&u_w=1280&u_h=1024&label=zeYFCJuKwf8BEJmKwqEC&hn=www.google.com&frm=2&url=https%3A%2F%2Fgo.maxweb.com%2Fconversion%2Fiframe%2F%3Fa%3D6397%26token%3Df4d0d337deba4561beb954e818c2dfca&ref=https%3A%2F%2Fbloodsugarblaster.com%2F&tiba=Pixels>m_ee=1&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.maxweb.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 08 Nov 2022 00:39:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=3&ev=PageVisit&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&rl=http%3A%2F%2Fcti.myvnc.com%2F&if=false&ts=1667867967440&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&it=1667867967355&coo=false&tm=2&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=3&ev=PageVisit&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&rl=http%3A%2F%2Fcti.myvnc.com%2F&if=false&ts=1667867967440&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&it=1667867967355&coo=false&tm=2&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=3&ev=PageVisit&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&rl=http%3A%2F%2Fcti.myvnc.com%2F&if=false&ts=1667867967440&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&it=1667867967355&coo=false&tm=2&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 00:39:30 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1&ev=PageVisit&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&rl=http%3A%2F%2Fcti.myvnc.com%2F&if=false&ts=1667867967475&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&it=1667867967355&coo=false&tm=2&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1&ev=PageVisit&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&rl=http%3A%2F%2Fcti.myvnc.com%2F&if=false&ts=1667867967475&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&it=1667867967355&coo=false&tm=2&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1&ev=PageVisit&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&rl=http%3A%2F%2Fcti.myvnc.com%2F&if=false&ts=1667867967475&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&it=1667867967355&coo=false&tm=2&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 00:39:30 GMT
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1046423/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1046423/tfa.js
IP
File type ASCII text, with very long lines (58523)
Hash 501ba6eb05e219b535ce26a39bb685d2
d63a6934aa4d7ec3c8e82e1c61cad9d4934eb12a
615fe151660188da2058cb1f996860e848f7b1d3a5460d560d1761f9da5b0d69
GET /libtrc/unip/1046423/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8jkqK/mMud2hiHqeLp/6TkOmsStZ274r45hld3tIBq5sQcgHwCycMaUXZtZWNzIDp6aVsLEOMoo=
x-amz-request-id: EA7BNTQ4S1P2MS4Y
x-amz-replication-status: COMPLETED
last-modified: Sun, 06 Nov 2022 11:15:51 GMT
etag: "3895bac0ba96c52339e881b083165e48"
x-amz-version-id: F_18Iad9kUVncVVHz.u.hORBUdS0wVbN
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 08 Nov 2022 00:39:30 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1629-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1667867970.953472,VS0,VE219
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 47
content-length: 17963
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=3&ev=PageVisit&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&rl=http%3A%2F%2Fcti.myvnc.com%2F&if=false&ts=1667867967442&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=28&it=1667867967355&coo=false&tm=2&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=3&ev=PageVisit&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&rl=http%3A%2F%2Fcti.myvnc.com%2F&if=false&ts=1667867967442&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=28&it=1667867967355&coo=false&tm=2&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=3&ev=PageVisit&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&rl=http%3A%2F%2Fcti.myvnc.com%2F&if=false&ts=1667867967442&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=28&it=1667867967355&coo=false&tm=2&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 00:39:30 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 01c1a1367e530a799bcaee7de89eefee
19d2450df87f1f3bb1c94e6e0bafbd60c7aead00
79cce6506b30bd3c699a700851db3254c2b909e559c54408b7d254b8e50003e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.clarity.ms/eus2/s/0.6.43/clarity.js
200 OK 55 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 441723b72633b1ac9757ad7c63168005
806166ca9ebb5839dd90a5e5c9335e3e0b18c169
cc8a16ce849d72f106bd67187e4b60c20da3093375202bf0b53f23e8f40a8b11
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 55116
content-type: application/javascript;charset=utf-8
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8eec314a76b4c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0QqVpYwAAAADvtB3KaTMkTpX9wUlCYJqPU1ZHMjBFREdFMDYwOQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Tue, 08 Nov 2022 00:39:29 GMT
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1667867967067&aid=a-069t&se=e30&duid=d598983de66e--01ghaatzfbx1anabw4pt4vaj48&tna=v2.5.0&pu=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&wpn=lc-bundle&refr=http%3A%2F%2Fcti.myvnc.com%2F&c=PHRpdGxlPkJsb29kIFN1Z2FyIEJsYXN0ZXIgLSBPZmZpY2lhbDwvdGl0bGU-PG1ldGEgY2xhc3M9Im1ldGFUYWdUb3AiIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJGaWdodCBkaWFiZXRlcyBhbmQgcmVndWxhdGUgYmxvb2Qgc3VnYXIgbmF0dXJhbGx5IHdpdGggQmxvb2QgU3VnYXIgQmxhc3Rlci4iPjxsaW5rIHJlbD0iY2Fub25pY2FsIiBocmVmPSJodHRwczovL2Jsb29kc3VnYXJibGFzdGVyLmNvbS9pbmRleC12c2wtYnNiLWJnLTEiPjxoMSBjbGFzcz0ibmUgZWxIZWFkbGluZSBoc1NpemUzIGxoNCBlbE1hcmdpbjAgZWxCR1N0eWxlMCBoc1RleHRTaGFkb3cwIiBzdHlsZT0idGV4dC1hbGlnbjogY2VudGVyOyBmb250LXNpemU6IDE0cHg7IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj48ZGl2PjxiPklzIHRoZSBrZXkgdG8gcmV2ZXJzaW5nIHR5cGUgMiBkaWFiZXRlcyBoaWRkZW4gd2l0aGluIGFuIGFuY2llbnQgSGluZHUgbWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiAyOHB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgZGF0YS1rZWVwZXItZWRpdGVkPSJ5ZXMiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPjxkaXY-PGI-SXMgVGhlIEtleSBUbyBIZWFsIFR5cGUgMiBEaWFiZXRlcyBIaWRkZW4gV2l0aGluIEFuIEFuY2llbnQgSGluZHUgTWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiA0NnB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgY29udGVudGVkaXRhYmxlPSJmYWxzZSI-PGI-Q3VzdG9tZXImbmJzcDt0ZXN0aW1vbmlhbHM8L2I-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjtmb250LXNpemU6IDMycHgiIGRhdGEtYm9sZD0iaW5oZXJpdCIgZGF0YS1ncmFtbT0iZmFsc2UiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPgo8Yj5GQVE8L2I-CjwvaDE-PGgxIGNsYXNzPSJuZSBlbEhlYWRsaW5lIGhzU2l6ZTMgbGg0IGVsTWFyZ2luMCBlbEJHU3R5bGUwIGhzVGV4dFNoYWRvdzAiIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Zm9udC1zaXplOiAzMnB4IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj5TaW1wbHkgc2VsZWN0IHdoaWNoIGRpc2NvdW50ZWQgb3B0aW9uIHlvdSB3YW50IGJlbG93IGFuZCA8Yj5jbGljayBvbiB0aGUgeWVsbG93IOKAnGFkZCB0byBvcmRlcuKAnSBidXR0b24uPC9iPgo8L2gxPg
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1667867967067&aid=a-069t&se=e30&duid=d598983de66e--01ghaatzfbx1anabw4pt4vaj48&tna=v2.5.0&pu=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&wpn=lc-bundle&refr=http%3A%2F%2Fcti.myvnc.com%2F&c=PHRpdGxlPkJsb29kIFN1Z2FyIEJsYXN0ZXIgLSBPZmZpY2lhbDwvdGl0bGU-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-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiAyOHB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgZGF0YS1rZWVwZXItZWRpdGVkPSJ5ZXMiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPjxkaXY-PGI-SXMgVGhlIEtleSBUbyBIZWFsIFR5cGUgMiBEaWFiZXRlcyBIaWRkZW4gV2l0aGluIEFuIEFuY2llbnQgSGluZHUgTWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiA0NnB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgY29udGVudGVkaXRhYmxlPSJmYWxzZSI-PGI-Q3VzdG9tZXImbmJzcDt0ZXN0aW1vbmlhbHM8L2I-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjtmb250LXNpemU6IDMycHgiIGRhdGEtYm9sZD0iaW5oZXJpdCIgZGF0YS1ncmFtbT0iZmFsc2UiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPgo8Yj5GQVE8L2I-CjwvaDE-PGgxIGNsYXNzPSJuZSBlbEhlYWRsaW5lIGhzU2l6ZTMgbGg0IGVsTWFyZ2luMCBlbEJHU3R5bGUwIGhzVGV4dFNoYWRvdzAiIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Zm9udC1zaXplOiAzMnB4IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj5TaW1wbHkgc2VsZWN0IHdoaWNoIGRpc2NvdW50ZWQgb3B0aW9uIHlvdSB3YW50IGJlbG93IGFuZCA8Yj5jbGljayBvbiB0aGUgeWVsbG93IOKAnGFkZCB0byBvcmRlcuKAnSBidXR0b24uPC9iPgo8L2gxPg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1667867967067&aid=a-069t&se=e30&duid=d598983de66e--01ghaatzfbx1anabw4pt4vaj48&tna=v2.5.0&pu=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&wpn=lc-bundle&refr=http%3A%2F%2Fcti.myvnc.com%2F&c=PHRpdGxlPkJsb29kIFN1Z2FyIEJsYXN0ZXIgLSBPZmZpY2lhbDwvdGl0bGU-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-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiAyOHB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgZGF0YS1rZWVwZXItZWRpdGVkPSJ5ZXMiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPjxkaXY-PGI-SXMgVGhlIEtleSBUbyBIZWFsIFR5cGUgMiBEaWFiZXRlcyBIaWRkZW4gV2l0aGluIEFuIEFuY2llbnQgSGluZHUgTWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiA0NnB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgY29udGVudGVkaXRhYmxlPSJmYWxzZSI-PGI-Q3VzdG9tZXImbmJzcDt0ZXN0aW1vbmlhbHM8L2I-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjtmb250LXNpemU6IDMycHgiIGRhdGEtYm9sZD0iaW5oZXJpdCIgZGF0YS1ncmFtbT0iZmFsc2UiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPgo8Yj5GQVE8L2I-CjwvaDE-PGgxIGNsYXNzPSJuZSBlbEhlYWRsaW5lIGhzU2l6ZTMgbGg0IGVsTWFyZ2luMCBlbEJHU3R5bGUwIGhzVGV4dFNoYWRvdzAiIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Zm9udC1zaXplOiAzMnB4IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj5TaW1wbHkgc2VsZWN0IHdoaWNoIGRpc2NvdW50ZWQgb3B0aW9uIHlvdSB3YW50IGJlbG93IGFuZCA8Yj5jbGljayBvbiB0aGUgeWVsbG93IOKAnGFkZCB0byBvcmRlcuKAnSBidXR0b24uPC9iPgo8L2gxPg HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 08 Nov 2022 00:39:30 GMT
content-length: 0
trace-id: 46f9d64c3fb9e06f
vary: Origin
location: /j?dtstmp=1667867967067&aid=a-069t&se=e30&duid=d598983de66e--01ghaatzfbx1anabw4pt4vaj48&tna=v2.5.0&pu=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&wpn=lc-bundle&refr=http%3A%2F%2Fcti.myvnc.com%2F&c=PHRpdGxlPkJsb29kIFN1Z2FyIEJsYXN0ZXIgLSBPZmZpY2lhbDwvdGl0bGU-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-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiAyOHB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgZGF0YS1rZWVwZXItZWRpdGVkPSJ5ZXMiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPjxkaXY-PGI-SXMgVGhlIEtleSBUbyBIZWFsIFR5cGUgMiBEaWFiZXRlcyBIaWRkZW4gV2l0aGluIEFuIEFuY2llbnQgSGluZHUgTWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiA0NnB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgY29udGVudGVkaXRhYmxlPSJmYWxzZSI-PGI-Q3VzdG9tZXImbmJzcDt0ZXN0aW1vbmlhbHM8L2I-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjtmb250LXNpemU6IDMycHgiIGRhdGEtYm9sZD0iaW5oZXJpdCIgZGF0YS1ncmFtbT0iZmFsc2UiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPgo8Yj5GQVE8L2I-CjwvaDE-PGgxIGNsYXNzPSJuZSBlbEhlYWRsaW5lIGhzU2l6ZTMgbGg0IGVsTWFyZ2luMCBlbEJHU3R5bGUwIGhzVGV4dFNoYWRvdzAiIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Zm9udC1zaXplOiAzMnB4IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj5TaW1wbHkgc2VsZWN0IHdoaWNoIGRpc2NvdW50ZWQgb3B0aW9uIHlvdSB3YW50IGJlbG93IGFuZCA8Yj5jbGljayBvbiB0aGUgeWVsbG93IOKAnGFkZCB0byBvcmRlcuKAnSBidXR0b24uPC9iPgo8L2gxPg&n3pc=true
set-cookie: lidid=742eeefe-0406-4840-b2ab-05d49f1a0673; Max-Age=63072000; Expires=Thu, 07 Nov 2024 00:39:30 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://bloodsugarblaster.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 6470cf890ce0d9efe4c7c2d29a145d9d
7c985f8036b286a3aae6bbbf62df105fb735fe50
5dfc5987f9adb86e61a9a454fbbb969d775f332a0448ddfaffd889b624dc65fc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1436
Cache-Control: max-age=154256
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:30 GMT
Etag: "63695736-117"
Expires: Wed, 09 Nov 2022 19:30:26 GMT
Last-Modified: Mon, 07 Nov 2022 19:06:30 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
tr.outbrain.com/cachedClickId?marketerId=00004e54d8d3829abd2f80200cca2553b5,00004e54d8d3829abd2f80200cca2553b5,002d8eb1d62679a3c5cbc6344aaddd4cb3
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00004e54d8d3829abd2f80200cca2553b5,00004e54d8d3829abd2f80200cca2553b5,002d8eb1d62679a3c5cbc6344aaddd4cb3
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00004e54d8d3829abd2f80200cca2553b5,00004e54d8d3829abd2f80200cca2553b5,002d8eb1d62679a3c5cbc6344aaddd4cb3 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 08 Nov 2022 00:39:30 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: fe8fd1a11e52327af228110d4a528719
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=00004e54d8d3829abd2f80200cca2553b5,002d8eb1d62679a3c5cbc6344aaddd4cb3&obApiVersion=1.1&obtpVersion=1.11.2&name=PAGE_VIEW&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&optOut=false&bust=08004233634024921&referrer=http%3A%2F%2Fcti.myvnc.com%2F
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00004e54d8d3829abd2f80200cca2553b5,002d8eb1d62679a3c5cbc6344aaddd4cb3&obApiVersion=1.1&obtpVersion=1.11.2&name=PAGE_VIEW&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&optOut=false&bust=08004233634024921&referrer=http%3A%2F%2Fcti.myvnc.com%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00004e54d8d3829abd2f80200cca2553b5,002d8eb1d62679a3c5cbc6344aaddd4cb3&obApiVersion=1.1&obtpVersion=1.11.2&name=PAGE_VIEW&dl=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&optOut=false&bust=08004233634024921&referrer=http%3A%2F%2Fcti.myvnc.com%2F HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 08 Nov 2022 00:39:30 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 7aaae065fbe9eabe038499f8d0fd8b21
content-encoding: gzip
rp.liadm.com/j?dtstmp=1667867967067&aid=a-069t&se=e30&duid=d598983de66e--01ghaatzfbx1anabw4pt4vaj48&tna=v2.5.0&pu=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&wpn=lc-bundle&refr=http%3A%2F%2Fcti.myvnc.com%2F&c=PHRpdGxlPkJsb29kIFN1Z2FyIEJsYXN0ZXIgLSBPZmZpY2lhbDwvdGl0bGU-PG1ldGEgY2xhc3M9Im1ldGFUYWdUb3AiIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJGaWdodCBkaWFiZXRlcyBhbmQgcmVndWxhdGUgYmxvb2Qgc3VnYXIgbmF0dXJhbGx5IHdpdGggQmxvb2QgU3VnYXIgQmxhc3Rlci4iPjxsaW5rIHJlbD0iY2Fub25pY2FsIiBocmVmPSJodHRwczovL2Jsb29kc3VnYXJibGFzdGVyLmNvbS9pbmRleC12c2wtYnNiLWJnLTEiPjxoMSBjbGFzcz0ibmUgZWxIZWFkbGluZSBoc1NpemUzIGxoNCBlbE1hcmdpbjAgZWxCR1N0eWxlMCBoc1RleHRTaGFkb3cwIiBzdHlsZT0idGV4dC1hbGlnbjogY2VudGVyOyBmb250LXNpemU6IDE0cHg7IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj48ZGl2PjxiPklzIHRoZSBrZXkgdG8gcmV2ZXJzaW5nIHR5cGUgMiBkaWFiZXRlcyBoaWRkZW4gd2l0aGluIGFuIGFuY2llbnQgSGluZHUgbWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiAyOHB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgZGF0YS1rZWVwZXItZWRpdGVkPSJ5ZXMiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPjxkaXY-PGI-SXMgVGhlIEtleSBUbyBIZWFsIFR5cGUgMiBEaWFiZXRlcyBIaWRkZW4gV2l0aGluIEFuIEFuY2llbnQgSGluZHUgTWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiA0NnB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgY29udGVudGVkaXRhYmxlPSJmYWxzZSI-PGI-Q3VzdG9tZXImbmJzcDt0ZXN0aW1vbmlhbHM8L2I-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjtmb250LXNpemU6IDMycHgiIGRhdGEtYm9sZD0iaW5oZXJpdCIgZGF0YS1ncmFtbT0iZmFsc2UiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPgo8Yj5GQVE8L2I-CjwvaDE-PGgxIGNsYXNzPSJuZSBlbEhlYWRsaW5lIGhzU2l6ZTMgbGg0IGVsTWFyZ2luMCBlbEJHU3R5bGUwIGhzVGV4dFNoYWRvdzAiIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Zm9udC1zaXplOiAzMnB4IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj5TaW1wbHkgc2VsZWN0IHdoaWNoIGRpc2NvdW50ZWQgb3B0aW9uIHlvdSB3YW50IGJlbG93IGFuZCA8Yj5jbGljayBvbiB0aGUgeWVsbG93IOKAnGFkZCB0byBvcmRlcuKAnSBidXR0b24uPC9iPgo8L2gxPg&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1667867967067&aid=a-069t&se=e30&duid=d598983de66e--01ghaatzfbx1anabw4pt4vaj48&tna=v2.5.0&pu=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&wpn=lc-bundle&refr=http%3A%2F%2Fcti.myvnc.com%2F&c=PHRpdGxlPkJsb29kIFN1Z2FyIEJsYXN0ZXIgLSBPZmZpY2lhbDwvdGl0bGU-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-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiAyOHB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgZGF0YS1rZWVwZXItZWRpdGVkPSJ5ZXMiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPjxkaXY-PGI-SXMgVGhlIEtleSBUbyBIZWFsIFR5cGUgMiBEaWFiZXRlcyBIaWRkZW4gV2l0aGluIEFuIEFuY2llbnQgSGluZHUgTWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiA0NnB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgY29udGVudGVkaXRhYmxlPSJmYWxzZSI-PGI-Q3VzdG9tZXImbmJzcDt0ZXN0aW1vbmlhbHM8L2I-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjtmb250LXNpemU6IDMycHgiIGRhdGEtYm9sZD0iaW5oZXJpdCIgZGF0YS1ncmFtbT0iZmFsc2UiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPgo8Yj5GQVE8L2I-CjwvaDE-PGgxIGNsYXNzPSJuZSBlbEhlYWRsaW5lIGhzU2l6ZTMgbGg0IGVsTWFyZ2luMCBlbEJHU3R5bGUwIGhzVGV4dFNoYWRvdzAiIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Zm9udC1zaXplOiAzMnB4IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj5TaW1wbHkgc2VsZWN0IHdoaWNoIGRpc2NvdW50ZWQgb3B0aW9uIHlvdSB3YW50IGJlbG93IGFuZCA8Yj5jbGljayBvbiB0aGUgeWVsbG93IOKAnGFkZCB0byBvcmRlcuKAnSBidXR0b24uPC9iPgo8L2gxPg&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1667867967067&aid=a-069t&se=e30&duid=d598983de66e--01ghaatzfbx1anabw4pt4vaj48&tna=v2.5.0&pu=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&wpn=lc-bundle&refr=http%3A%2F%2Fcti.myvnc.com%2F&c=PHRpdGxlPkJsb29kIFN1Z2FyIEJsYXN0ZXIgLSBPZmZpY2lhbDwvdGl0bGU-PG1ldGEgY2xhc3M9Im1ldGFUYWdUb3AiIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJGaWdodCBkaWFiZXRlcyBhbmQgcmVndWxhdGUgYmxvb2Qgc3VnYXIgbmF0dXJhbGx5IHdpdGggQmxvb2QgU3VnYXIgQmxhc3Rlci4iPjxsaW5rIHJlbD0iY2Fub25pY2FsIiBocmVmPSJodHRwczovL2Jsb29kc3VnYXJibGFzdGVyLmNvbS9pbmRleC12c2wtYnNiLWJnLTEiPjxoMSBjbGFzcz0ibmUgZWxIZWFkbGluZSBoc1NpemUzIGxoNCBlbE1hcmdpbjAgZWxCR1N0eWxlMCBoc1RleHRTaGFkb3cwIiBzdHlsZT0idGV4dC1hbGlnbjogY2VudGVyOyBmb250LXNpemU6IDE0cHg7IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj48ZGl2PjxiPklzIHRoZSBrZXkgdG8gcmV2ZXJzaW5nIHR5cGUgMiBkaWFiZXRlcyBoaWRkZW4gd2l0aGluIGFuIGFuY2llbnQgSGluZHUgbWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiAyOHB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgZGF0YS1rZWVwZXItZWRpdGVkPSJ5ZXMiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPjxkaXY-PGI-SXMgVGhlIEtleSBUbyBIZWFsIFR5cGUgMiBEaWFiZXRlcyBIaWRkZW4gV2l0aGluIEFuIEFuY2llbnQgSGluZHUgTWFudXNjcmlwdD88L2I-PC9kaXY-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsgZm9udC1zaXplOiA0NnB4OyIgZGF0YS1ib2xkPSJpbmhlcml0IiBkYXRhLWdyYW1tPSJmYWxzZSIgY29udGVudGVkaXRhYmxlPSJmYWxzZSI-PGI-Q3VzdG9tZXImbmJzcDt0ZXN0aW1vbmlhbHM8L2I-PC9oMT48aDEgY2xhc3M9Im5lIGVsSGVhZGxpbmUgaHNTaXplMyBsaDQgZWxNYXJnaW4wIGVsQkdTdHlsZTAgaHNUZXh0U2hhZG93MCIgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjtmb250LXNpemU6IDMycHgiIGRhdGEtYm9sZD0iaW5oZXJpdCIgZGF0YS1ncmFtbT0iZmFsc2UiIGNvbnRlbnRlZGl0YWJsZT0iZmFsc2UiPgo8Yj5GQVE8L2I-CjwvaDE-PGgxIGNsYXNzPSJuZSBlbEhlYWRsaW5lIGhzU2l6ZTMgbGg0IGVsTWFyZ2luMCBlbEJHU3R5bGUwIGhzVGV4dFNoYWRvdzAiIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Zm9udC1zaXplOiAzMnB4IiBkYXRhLWJvbGQ9ImluaGVyaXQiIGRhdGEtZ3JhbW09ImZhbHNlIiBjb250ZW50ZWRpdGFibGU9ImZhbHNlIj5TaW1wbHkgc2VsZWN0IHdoaWNoIGRpc2NvdW50ZWQgb3B0aW9uIHlvdSB3YW50IGJlbG93IGFuZCA8Yj5jbGljayBvbiB0aGUgeWVsbG93IOKAnGFkZCB0byBvcmRlcuKAnSBidXR0b24uPC9iPgo8L2gxPg&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Referer: https://bloodsugarblaster.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:30 GMT
content-type: application/json
content-length: 13
trace-id: 18f04406461338dd
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 9946b1a7-a2cc-4eb6-9821-a95de183ad98
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://bloodsugarblaster.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
trc.taboola.com/1381010/trc/3/json?tim=1667867967702&data=%7B%22id%22%3A288%2C%22ii%22%3A%22%2Findex-vsl-bsb-bg-1%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1667867967528%2C%22cv%22%3A%2220221106-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%22%2C%22e%22%3A%22http%3A%2F%2Fcti.myvnc.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dprimalmarketingllc-sc1%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1667867967538%2C%22ref%22%3A%22http%3A%2F%2Fcti.myvnc.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A47%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 3.6 kB URL HTTP/2 trc.taboola.com/1381010/trc/3/json?tim=1667867967702&data=%7B%22id%22%3A288%2C%22ii%22%3A%22%2Findex-vsl-bsb-bg-1%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1667867967528%2C%22cv%22%3A%2220221106-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%22%2C%22e%22%3A%22http%3A%2F%2Fcti.myvnc.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dprimalmarketingllc-sc1%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1667867967538%2C%22ref%22%3A%22http%3A%2F%2Fcti.myvnc.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A47%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
File type ASCII text, with very long lines (4212)
Hash 55c225ea13295f5a48032c0af0db3fb3
bff93017804aeee44df80c86c6747cccc4965b45
c4335eac3d197def5c9ae4f16263e90e54acecc3cb7d5facfea0d1a88b6b972d
GET /1381010/trc/3/json?tim=1667867967702&data=%7B%22id%22%3A288%2C%22ii%22%3A%22%2Findex-vsl-bsb-bg-1%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1667867967528%2C%22cv%22%3A%2220221106-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%22%2C%22e%22%3A%22http%3A%2F%2Fcti.myvnc.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dprimalmarketingllc-sc1%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1667867967538%2C%22ref%22%3A%22http%3A%2F%2Fcti.myvnc.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A47%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 08 Nov 2022 00:39:30 GMT
via: 1.1 varnish
x-served-by: cache-bma1629-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667867970.394788,VS0,VE107
vary: Accept-Encoding
x-vcl-time-ms: 107
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
200 OK 487 B URL HTTP/2 www.youtube.com/iframe_api
IP
File type ASCII text, with very long lines (509)
Hash 3143a22fdee806626841910651f89608
5eda5076a4409963b983386b62107b7e587f2f3c
c3dfee21c8e39194c5670d0754ccbf275b47e230093157ce08236993f2dbcff4
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Tue, 08 Nov 2022 00:39:29 GMT
date: Tue, 08 Nov 2022 00:39:29 GMT
cache-control: private, max-age=0
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=QISxl6u-GeY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=FRyNSH6Shhg; Domain=.youtube.com; Expires=Sun, 07-May-2023 00:39:29 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+987; expires=Thu, 07-Nov-2024 00:39:29 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=cTBBcG5WV1VyMkZvektLNC9VR1RJdz09LS01Y1RCL1ZPYkJTYktyUVlyVnhjZkd3PT0%3D--41114bcdb1d39365b85d4093c652cd77d472efbb&page_id=b1Y0TW9JZndyR2syNW9zZS9oSDJhdz09LS1KN2JITktoUEJrZ1M3T25PYzJLaWJBPT0%3D--2fb4c9c381cc8518de05523690b07b6ed7ed204f&funnel_step_id=VnlaRDNjU2MvbFZpVjQwM2ZYaVEvdz09LS1iaklKdkwvQ1VhZkFLVHlGWkcyMDdBPT0%3D--9b91573651c52213d3f0880b6c7c9497fc7df3b1&user_id=N3puZnExUHFGS2hhcldmUEVEemZOdz09LS1rZTZ5Tnc0U2pmenN1c1BRV2ZQVmVnPT0%3D--e33744d1b15128bce4841aebf26bc0e3b87a7db6&account_id=Uno5bUNuYmxCelFpNmFhdnN1eE83QT09LS1HTDA5bjhuUkluVUFzdnpSSGNBQzBBPT0%3D--0e6cbba59288c29b0fd7ab1fd8e12e478be920ff&page_code=NTMyMzY5Njc%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=ab064e0f-32fe-42c2-813a-e9f5f46aa60f&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4
202 Accepted 1.4 kB URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=cTBBcG5WV1VyMkZvektLNC9VR1RJdz09LS01Y1RCL1ZPYkJTYktyUVlyVnhjZkd3PT0%3D--41114bcdb1d39365b85d4093c652cd77d472efbb&page_id=b1Y0TW9JZndyR2syNW9zZS9oSDJhdz09LS1KN2JITktoUEJrZ1M3T25PYzJLaWJBPT0%3D--2fb4c9c381cc8518de05523690b07b6ed7ed204f&funnel_step_id=VnlaRDNjU2MvbFZpVjQwM2ZYaVEvdz09LS1iaklKdkwvQ1VhZkFLVHlGWkcyMDdBPT0%3D--9b91573651c52213d3f0880b6c7c9497fc7df3b1&user_id=N3puZnExUHFGS2hhcldmUEVEemZOdz09LS1rZTZ5Tnc0U2pmenN1c1BRV2ZQVmVnPT0%3D--e33744d1b15128bce4841aebf26bc0e3b87a7db6&account_id=Uno5bUNuYmxCelFpNmFhdnN1eE83QT09LS1HTDA5bjhuUkluVUFzdnpSSGNBQzBBPT0%3D--0e6cbba59288c29b0fd7ab1fd8e12e478be920ff&page_code=NTMyMzY5Njc%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=ab064e0f-32fe-42c2-813a-e9f5f46aa60f&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4
IP
File type gzip compressed data, from Unix\012- data
Hash 8d929005323a4b5e878e0f27b3fa1e00
7d1207f275839ba9afc68c877e7ffd77468a72df
c934e36e20066a36276bbff45bf17ff25b3c1bc3cd30772e92b5134d57228326
GET /userevents/?funnel_id=cTBBcG5WV1VyMkZvektLNC9VR1RJdz09LS01Y1RCL1ZPYkJTYktyUVlyVnhjZkd3PT0%3D--41114bcdb1d39365b85d4093c652cd77d472efbb&page_id=b1Y0TW9JZndyR2syNW9zZS9oSDJhdz09LS1KN2JITktoUEJrZ1M3T25PYzJLaWJBPT0%3D--2fb4c9c381cc8518de05523690b07b6ed7ed204f&funnel_step_id=VnlaRDNjU2MvbFZpVjQwM2ZYaVEvdz09LS1iaklKdkwvQ1VhZkFLVHlGWkcyMDdBPT0%3D--9b91573651c52213d3f0880b6c7c9497fc7df3b1&user_id=N3puZnExUHFGS2hhcldmUEVEemZOdz09LS1rZTZ5Tnc0U2pmenN1c1BRV2ZQVmVnPT0%3D--e33744d1b15128bce4841aebf26bc0e3b87a7db6&account_id=Uno5bUNuYmxCelFpNmFhdnN1eE83QT09LS1HTDA5bjhuUkluVUFzdnpSSGNBQzBBPT0%3D--0e6cbba59288c29b0fd7ab1fd8e12e478be920ff&page_code=NTMyMzY5Njc%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::UniquePageviewsCreatedSummary&nonce=ab064e0f-32fe-42c2-813a-e9f5f46aa60f&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4 HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Tue, 08 Nov 2022 00:39:29 GMT
content-type: text/html
cf-ray: 766a40774ce1b4f7-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 4b06625ab5d674978cf547cc986c1505
x-runtime: 0.037271
set-cookie: __cf_bm=AMMZKIyUYFzrEYiPaX_mH0lvPDtMic86YapjcjWNWhA-1667867969-0-AWH5A9sHhl5nGk8Aq4nIWaG8N9DtPREkXIJ+zKa5YeSxofKDUtWlaReR6i3z3KUiSX71Wk+IEDlcjU98IimOgfXelNZRjD6sYqkRehArwJo7; path=/; expires=Tue, 08-Nov-22 01:09:29 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
a.adskeeper.co.uk/mgsensor.js?d=1667867966784
200 OK 4.7 kB URL HTTP/2 a.adskeeper.co.uk/mgsensor.js?d=1667867966784
IP
File type ASCII text, with very long lines (15112), with no line terminators
Hash 2c633f682a948fe7f840c237ff9c89d8
3209af69c2c15cc3eaba9b77ff36fe631822b715
3473db2c9902688892fa7a59683c4ae966086d404be94430f7ef5b994f17ef14
GET /mgsensor.js?d=1667867966784 HTTP/1.1
Host: a.adskeeper.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:30 GMT
content-type: application/javascript
vary: Accept-Encoding
x-mg-request-uuid: aa18064f-ebb9-4b9d-9f5c-d7642c03bb76
content-encoding: gzip
last-modified: Tue, 08 Nov 2022 00:39:30 GMT
cf-cache-status: MISS
expires: Tue, 08 Nov 2022 04:39:30 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 766a407c2b061c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 05 Nov 2022 12:31:58 GMT
expires: Sun, 05 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 216452
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 01b86e1c090d19b9ce7317c718aec85d
e7c242db9e5a264137a11f669b063f46532a6601
19dade05679f4dfaa869338c8362d2067db50626553b255bb6660edd1a38b0ee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 08 Nov 2022 00:29:05 GMT
expires: Tue, 08 Nov 2022 00:44:05 GMT
cache-control: public, max-age=900
age: 625
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 01b86e1c090d19b9ce7317c718aec85d
e7c242db9e5a264137a11f669b063f46532a6601
19dade05679f4dfaa869338c8362d2067db50626553b255bb6660edd1a38b0ee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 08 Nov 2022 00:39:30 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 741
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://bloodsugarblaster.com
access-control-allow-credentials: true
date: Tue, 08 Nov 2022 00:39:30 GMT
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash ab7ca189fefc3279a12db1a06b1fd717
00e71c78ccf3b241439ee4ec76f1ea466b7ca92b
5291859fa1ef9a11802074a63f586e958e3438112f5455dcc79505957435c430
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 08 Nov 2022 00:39:31 GMT
server: ESF
cache-control: private
content-length: 30908
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Nov 2022 21:46:16 GMT
expires: Fri, 03 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 355995
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d223af7eaee0a915b3ae0d4d89cbf0fd
49ea78caedfa17eb5da930b17c466b7bbda5428b
78e2e4503cf1664214210314340e48230d9053e61d5bfbf3ab8bc0963f4251dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/CwVTwzgKR79Uc6JOnoeLQpp2wWh1-U_HY6vLA6ze4RTbZZqqz_u4Erm7ptPRtDw-lp31SiyRVg=s68-c-k-c0x00ffffff-no-rj
200 OK 3.1 kB URL HTTP/2 yt3.ggpht.com/CwVTwzgKR79Uc6JOnoeLQpp2wWh1-U_HY6vLA6ze4RTbZZqqz_u4Erm7ptPRtDw-lp31SiyRVg=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash b5ca5bba8661283de03a0cfbd772d228
b3393683ce4e837efd5493e421742a3b0dfe3108
7cefd9b5dd2078cd21000a351504c638e40f4adf401d593db961e4a1400f748b
GET /CwVTwzgKR79Uc6JOnoeLQpp2wWh1-U_HY6vLA6ze4RTbZZqqz_u4Erm7ptPRtDw-lp31SiyRVg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3128
x-xss-protection: 0
date: Mon, 07 Nov 2022 22:48:01 GMT
expires: Sun, 06 Nov 2022 10:28:55 GMT
cache-control: public, max-age=86400, no-transform
age: 6690
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d223af7eaee0a915b3ae0d4d89cbf0fd
49ea78caedfa17eb5da930b17c466b7bbda5428b
78e2e4503cf1664214210314340e48230d9053e61d5bfbf3ab8bc0963f4251dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js-agent.newrelic.com/nr-1216.min.js
200 OK 14 kB URL HTTP/2 js-agent.newrelic.com/nr-1216.min.js
IP
File type ASCII text, with very long lines (32022)
Hash b7c09cc097b2847f9edc784adba62dcb
5aa648623cf5e3b4b215fe5d068a7904c59f2925
6da450b6a3ba53bdab36f6529e987a245cdfca9a37b77790f06dfd8d5797bdaa
GET /nr-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Vf9xsFZHH0UI6bmTnW+KeBzegICGOxvtMLIWtbljNKoJtdkUEk/MfmbYPFui+bgtiUf/4lC5dk8=
x-amz-request-id: 4AV5AVKCCR961CNG
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "9f533d8cd24b2c5e3b4dc886ecbd43e8"
x-amz-version-id: mHHzJIqOizHibcYt0xqAszRr0gQRiNYy
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Tue, 08 Nov 2022 00:39:31 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 9
x-timer: S1667867971.264767,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 14391
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 08 Nov 2022 00:39:31 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e1d4b138435fdbbbff4e76236123d98a
77713871ff0d03fbe79c2f03ff2b5f6936dc720a
611eacf569916fcb9ae79177d24f9590187906ccf0b4e57c81334ccfc7c40124
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 998
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 08 Nov 2022 00:39:31 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8b11bb4840676da733974d94b559adc7
6ea5b46f56a65459b2b681a51d00afcd09d33aa2
18dcf1bb2a6893849c0f5dc7df3bcf2c595c74174a6789aa00ea801f353ee7a7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8b11bb4840676da733974d94b559adc7
6ea5b46f56a65459b2b681a51d00afcd09d33aa2
18dcf1bb2a6893849c0f5dc7df3bcf2c595c74174a6789aa00ea801f353ee7a7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bloodsugarblaster.com/cdn-cgi/rum?
204 No Content 0 B URL HTTP/2 bloodsugarblaster.com/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 57393
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTMyMzY5Njc=:visited=true; cf:visitor_id=ae6cc9de-cd86-488b-9cd0-39439994cabf; aff_id=58; subid=4288; subid2=52c20bde14004ba7a749a7766ed548d4; addevent_track_cookie=18213c3f-0e1f-4feb-540f-132b70e325f0; _gcl_au=1.1.860036710.1667867967; _li_dcdm_c=.bloodsugarblaster.com; _lc2_fpi=d598983de66e--01ghaatzfbx1anabw4pt4vaj48; sessid2=sessid20221108003920418; spi_funnel_codename=; aff_id=58; sid=4288%7C52c20bde14004ba7a749a7766ed548d4; campaign_id=; referrer=91.90.42.154:cti.myvnc.com:bloodsugarblaster.com%2Findex-vsl-bsb-bg-1; _ga=GA1.2.1426925369.1667867967; _gid=GA1.2.1075757591.1667867967; _gat_UA-149369172-1=1; _clck=1bswqgs|1|f6e|0; outbrain_cid_fetch=true; AdskeeperSensorNVis=1; AdskeeperSensorHref=https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4; _clsk=dt2z6c|1667867968663|1|1|b.clarity.ms/collect
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Tue, 08 Nov 2022 00:39:31 GMT
access-control-allow-origin: https://bloodsugarblaster.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 766a4085d839b4ff-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
bloodsugarblaster.com/images/background.png?_unique=0.6564885656582619&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//bloodsugarblaster.com/index-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&_referrer=ttp%3A//cti.myvnc.com/&_title=Blood%20Sugar%20Blaster%20-%20Official&_key=8kicdisg&_page_key=ifa10jj7z7rarncw&_fid=11855795&_fspos=1&_fvrs=2&_funnel_stat=1&_location=https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4&_referrer=http://cti.myvnc.com/
200 OK 89 B URL HTTP/2 bloodsugarblaster.com/images/background.png?_unique=0.6564885656582619&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//bloodsugarblaster.com/index-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&_referrer=ttp%3A//cti.myvnc.com/&_title=Blood%20Sugar%20Blaster%20-%20Official&_key=8kicdisg&_page_key=ifa10jj7z7rarncw&_fid=11855795&_fspos=1&_fvrs=2&_funnel_stat=1&_location=https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4&_referrer=http://cti.myvnc.com/
IP
File type ASCII text, with no line terminators
Hash a9a03c5ad193f46dd97ef889bb533bc9
998d2a3adbe124d422d98fd50b4fabc9ad622bc4
e0a18ed7d83d764ad35c4be9dda17dc2ab6af2ed12fd1861e060deb1747007b1
GET /images/background.png?_unique=0.6564885656582619&_uniqueVisitorID=null&_type=WINDOW&_location=ttps%3A//bloodsugarblaster.com/index-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&_referrer=ttp%3A//cti.myvnc.com/&_title=Blood%20Sugar%20Blaster%20-%20Official&_key=8kicdisg&_page_key=ifa10jj7z7rarncw&_fid=11855795&_fspos=1&_fvrs=2&_funnel_stat=1&_location=https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4&_referrer=http://cti.myvnc.com/ HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTMyMzY5Njc=:visited=true; cf:visitor_id=ae6cc9de-cd86-488b-9cd0-39439994cabf; aff_id=58; subid=4288; subid2=52c20bde14004ba7a749a7766ed548d4; addevent_track_cookie=18213c3f-0e1f-4feb-540f-132b70e325f0; _gcl_au=1.1.860036710.1667867967; _li_dcdm_c=.bloodsugarblaster.com; _lc2_fpi=d598983de66e--01ghaatzfbx1anabw4pt4vaj48; sessid2=sessid20221108003920418; spi_funnel_codename=; aff_id=58; sid=4288%7C52c20bde14004ba7a749a7766ed548d4; campaign_id=; referrer=91.90.42.154:cti.myvnc.com:bloodsugarblaster.com%2Findex-vsl-bsb-bg-1; _ga=GA1.2.1426925369.1667867967; _gid=GA1.2.1075757591.1667867967; _gat_UA-149369172-1=1; _clck=1bswqgs|1|f6e|0; outbrain_cid_fetch=true; AdskeeperSensorNVis=1; AdskeeperSensorHref=https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:31 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 766a40842f4ab4ff-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store, private
strict-transport-security: max-age=0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
status: 200 OK
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: cc7d2252516e44b473b983081e250ee1
x-runtime: 0.019651
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1667889571&ei=QqVpY9LlO5mQv_IP19WMuAQ&ip=91.90.42.154&id=o-ABU_v3VIdnwGBcSgnyFRewRPY4zK0gZ_Z4Qx44zFzcNN&itag=251&source=youtube&requiressl=yes&mh=zT&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=2687500&spc=SFxXNhWXBMYec6coTt8aI8tq0BwMTaY&vprv=1&mime=audio%2Fwebm&ns=hy7r2afuJwhueAH5EpeufTIJ&gir=yes&clen=64508011&dur=4293.161&lmt=1665870148918759&mt=1667867581&fvip=4&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5432434&n=qo_zRWI80uDVZw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhALAqoaeAJTstzP9X1xB3zjG01UDpuWtsS3BnUs8B8lj0AiAL4FHiu5Njjl3u5ajmkRJG76XC3tUH01JE9qFXQ-BLEw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAJXPV51pEbd4pYBwTpeTZGuwmTlGC6yHHXZD5WyVvsLeAiBuQOiCUCR8RcJRx6n8SL10fptcCi5VK_BVQ72gbYrfoQ%3D%3D&alr=yes&cpn=-XGTZdSgKZOrt1df&cver=1.20221030.00.00&range=0-73426&rn=2&rbuf=0
200 OK 73 kB URL HTTP/1.1 rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1667889571&ei=QqVpY9LlO5mQv_IP19WMuAQ&ip=91.90.42.154&id=o-ABU_v3VIdnwGBcSgnyFRewRPY4zK0gZ_Z4Qx44zFzcNN&itag=251&source=youtube&requiressl=yes&mh=zT&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=2687500&spc=SFxXNhWXBMYec6coTt8aI8tq0BwMTaY&vprv=1&mime=audio%2Fwebm&ns=hy7r2afuJwhueAH5EpeufTIJ&gir=yes&clen=64508011&dur=4293.161&lmt=1665870148918759&mt=1667867581&fvip=4&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5432434&n=qo_zRWI80uDVZw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhALAqoaeAJTstzP9X1xB3zjG01UDpuWtsS3BnUs8B8lj0AiAL4FHiu5Njjl3u5ajmkRJG76XC3tUH01JE9qFXQ-BLEw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAJXPV51pEbd4pYBwTpeTZGuwmTlGC6yHHXZD5WyVvsLeAiBuQOiCUCR8RcJRx6n8SL10fptcCi5VK_BVQ72gbYrfoQ%3D%3D&alr=yes&cpn=-XGTZdSgKZOrt1df&cver=1.20221030.00.00&range=0-73426&rn=2&rbuf=0
IP
ASN #50304 Blix Solutions AS
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 1655895e24a67d3d42e659a8464558bf
f76a081412abb2bcb5c97d3fe0a76199664c21c2
ae00512eabc59b2b1def6876bef54078e1cc58ef209aa4d19d1ec2f134914eef
GET /videoplayback?expire=1667889571&ei=QqVpY9LlO5mQv_IP19WMuAQ&ip=91.90.42.154&id=o-ABU_v3VIdnwGBcSgnyFRewRPY4zK0gZ_Z4Qx44zFzcNN&itag=251&source=youtube&requiressl=yes&mh=zT&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=2687500&spc=SFxXNhWXBMYec6coTt8aI8tq0BwMTaY&vprv=1&mime=audio%2Fwebm&ns=hy7r2afuJwhueAH5EpeufTIJ&gir=yes&clen=64508011&dur=4293.161&lmt=1665870148918759&mt=1667867581&fvip=4&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5432434&n=qo_zRWI80uDVZw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhALAqoaeAJTstzP9X1xB3zjG01UDpuWtsS3BnUs8B8lj0AiAL4FHiu5Njjl3u5ajmkRJG76XC3tUH01JE9qFXQ-BLEw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAJXPV51pEbd4pYBwTpeTZGuwmTlGC6yHHXZD5WyVvsLeAiBuQOiCUCR8RcJRx6n8SL10fptcCi5VK_BVQ72gbYrfoQ%3D%3D&alr=yes&cpn=-XGTZdSgKZOrt1df&cver=1.20221030.00.00&range=0-73426&rn=2&rbuf=0 HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 15 Oct 2022 21:42:28 GMT
Content-Type: audio/webm
Date: Tue, 08 Nov 2022 00:39:31 GMT
Expires: Tue, 08 Nov 2022 00:39:31 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 73427
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1667889571&ei=QqVpY9LlO5mQv_IP19WMuAQ&ip=91.90.42.154&id=o-ABU_v3VIdnwGBcSgnyFRewRPY4zK0gZ_Z4Qx44zFzcNN&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=zT&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=2687500&spc=SFxXNhWXBMYec6coTt8aI8tq0BwMTaY&vprv=1&mime=video%2Fwebm&ns=hy7r2afuJwhueAH5EpeufTIJ&gir=yes&clen=76362453&dur=4293.122&lmt=1665876039375673&mt=1667867581&fvip=4&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5437434&n=qo_zRWI80uDVZw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAOVFpaVuQLVbbLxl5Oc17ewcoSY_BqZ7B1BGWemom4aKAiBgP7SQnw25i1vZmsyGg_84y_ci8mDcUnnN8ZrWTXDydg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAJXPV51pEbd4pYBwTpeTZGuwmTlGC6yHHXZD5WyVvsLeAiBuQOiCUCR8RcJRx6n8SL10fptcCi5VK_BVQ72gbYrfoQ%3D%3D&alr=yes&cpn=-XGTZdSgKZOrt1df&cver=1.20221030.00.00&range=0-160259&rn=1&rbuf=0
200 OK 160 kB URL HTTP/1.1 rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1667889571&ei=QqVpY9LlO5mQv_IP19WMuAQ&ip=91.90.42.154&id=o-ABU_v3VIdnwGBcSgnyFRewRPY4zK0gZ_Z4Qx44zFzcNN&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=zT&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=2687500&spc=SFxXNhWXBMYec6coTt8aI8tq0BwMTaY&vprv=1&mime=video%2Fwebm&ns=hy7r2afuJwhueAH5EpeufTIJ&gir=yes&clen=76362453&dur=4293.122&lmt=1665876039375673&mt=1667867581&fvip=4&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5437434&n=qo_zRWI80uDVZw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAOVFpaVuQLVbbLxl5Oc17ewcoSY_BqZ7B1BGWemom4aKAiBgP7SQnw25i1vZmsyGg_84y_ci8mDcUnnN8ZrWTXDydg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAJXPV51pEbd4pYBwTpeTZGuwmTlGC6yHHXZD5WyVvsLeAiBuQOiCUCR8RcJRx6n8SL10fptcCi5VK_BVQ72gbYrfoQ%3D%3D&alr=yes&cpn=-XGTZdSgKZOrt1df&cver=1.20221030.00.00&range=0-160259&rn=1&rbuf=0
IP
ASN #50304 Blix Solutions AS
File type WebM\012- EBML file, creator webmB\20\012- data
Size 160 kB (160260 bytes)
Hash d308c0166fb2899e545fcb866942621f
78d58d35af57bb9eee7f6d3e263a7bf9a620d41b
a737890c33dadf1c2ed4b21254a8d07e6c29f5ec29188123d0c641fb3e5e9a65
GET /videoplayback?expire=1667889571&ei=QqVpY9LlO5mQv_IP19WMuAQ&ip=91.90.42.154&id=o-ABU_v3VIdnwGBcSgnyFRewRPY4zK0gZ_Z4Qx44zFzcNN&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=zT&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeen7y&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=2687500&spc=SFxXNhWXBMYec6coTt8aI8tq0BwMTaY&vprv=1&mime=video%2Fwebm&ns=hy7r2afuJwhueAH5EpeufTIJ&gir=yes&clen=76362453&dur=4293.122&lmt=1665876039375673&mt=1667867581&fvip=4&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5437434&n=qo_zRWI80uDVZw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAOVFpaVuQLVbbLxl5Oc17ewcoSY_BqZ7B1BGWemom4aKAiBgP7SQnw25i1vZmsyGg_84y_ci8mDcUnnN8ZrWTXDydg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAJXPV51pEbd4pYBwTpeTZGuwmTlGC6yHHXZD5WyVvsLeAiBuQOiCUCR8RcJRx6n8SL10fptcCi5VK_BVQ72gbYrfoQ%3D%3D&alr=yes&cpn=-XGTZdSgKZOrt1df&cver=1.20221030.00.00&range=0-160259&rn=1&rbuf=0 HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 15 Oct 2022 23:20:39 GMT
Content-Type: video/webm
Date: Tue, 08 Nov 2022 00:39:31 GMT
Expires: Tue, 08 Nov 2022 00:39:31 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 160260
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.digicert.com/
200 OK 279 B IP
Hash 84a9f613ac425daa4f7618a5cc638e33
5ff764f0b09de460ed439581fdabb512782e86dc
cf2ca8d33800d5f9402b95eb621a009e729a0e805b981162fe00ad76c764174d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=109633
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:31 GMT
Etag: "6368ae84-117"
Expires: Wed, 09 Nov 2022 07:06:44 GMT
Last-Modified: Mon, 07 Nov 2022 07:06:44 GMT
Server: nginx
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8b11bb4840676da733974d94b559adc7
6ea5b46f56a65459b2b681a51d00afcd09d33aa2
18dcf1bb2a6893849c0f5dc7df3bcf2c595c74174a6789aa00ea801f353ee7a7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.bloodsugarblaster.com/BSB_VSL/Click-to-play-sound-3.png
200 OK 13 kB URL HTTP/2 secure.bloodsugarblaster.com/BSB_VSL/Click-to-play-sound-3.png
IP
File type PNG image data, 898 x 504, 8-bit colormap, non-interlaced\012- data
Hash fd202ee1db9fcc1a43fe45bb08ef6abb
130f0c96f060c6ed03eea753d63358465088238a
83d49bd177f97c476bfbc13a83df017b21df599be8db6124bb325a643b8a8f42
GET /BSB_VSL/Click-to-play-sound-3.png HTTP/1.1
Host: secure.bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv; _gcl_au=1.1.860036710.1667867967; _li_dcdm_c=.bloodsugarblaster.com; _lc2_fpi=d598983de66e--01ghaatzfbx1anabw4pt4vaj48; sessid2=sessid20221108003920418; spi_funnel_codename=; aff_id=58; sid=4288%7C52c20bde14004ba7a749a7766ed548d4; campaign_id=; referrer=91.90.42.154:cti.myvnc.com:bloodsugarblaster.com%2Findex-vsl-bsb-bg-1; _ga=GA1.2.1426925369.1667867967; _gid=GA1.2.1075757591.1667867967; _gat_UA-149369172-1=1; _clck=1bswqgs|1|f6e|0; _clsk=dt2z6c|1667867968663|1|1|b.clarity.ms/collect
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:31 GMT
content-type: image/png
content-length: 13015
last-modified: Thu, 27 May 2021 16:37:35 GMT
etag: "60afcacf-32d7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
pragma: public
vary: Accept-Encoding
cf-cache-status: HIT
age: 453417
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ck%2Fa8rxGRb3r9r2GMMPekdoJz1O3IqH8t8Mkcxg4rRVm77BFPUqtoqxtgkle8cyQImapjPcOtSJ2nuOOq9%2BhyoeKoCSg9kwAbDQRiH9vNRDwf8haqxEgF6mBMukdDKSZ0CkT9d7wKidzwti4o25h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 766a40868aaafab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
app.clickfunnels.com/userevents/?funnel_id=cTBBcG5WV1VyMkZvektLNC9VR1RJdz09LS01Y1RCL1ZPYkJTYktyUVlyVnhjZkd3PT0%3D--41114bcdb1d39365b85d4093c652cd77d472efbb&page_id=b1Y0TW9JZndyR2syNW9zZS9oSDJhdz09LS1KN2JITktoUEJrZ1M3T25PYzJLaWJBPT0%3D--2fb4c9c381cc8518de05523690b07b6ed7ed204f&funnel_step_id=VnlaRDNjU2MvbFZpVjQwM2ZYaVEvdz09LS1iaklKdkwvQ1VhZkFLVHlGWkcyMDdBPT0%3D--9b91573651c52213d3f0880b6c7c9497fc7df3b1&user_id=N3puZnExUHFGS2hhcldmUEVEemZOdz09LS1rZTZ5Tnc0U2pmenN1c1BRV2ZQVmVnPT0%3D--e33744d1b15128bce4841aebf26bc0e3b87a7db6&account_id=Uno5bUNuYmxCelFpNmFhdnN1eE83QT09LS1HTDA5bjhuUkluVUFzdnpSSGNBQzBBPT0%3D--0e6cbba59288c29b0fd7ab1fd8e12e478be920ff&page_code=NTMyMzY5Njc%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=c606ef68-75bb-428a-ad83-7da1aa510633&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4
202 Accepted 279 B URL HTTP/2 app.clickfunnels.com/userevents/?funnel_id=cTBBcG5WV1VyMkZvektLNC9VR1RJdz09LS01Y1RCL1ZPYkJTYktyUVlyVnhjZkd3PT0%3D--41114bcdb1d39365b85d4093c652cd77d472efbb&page_id=b1Y0TW9JZndyR2syNW9zZS9oSDJhdz09LS1KN2JITktoUEJrZ1M3T25PYzJLaWJBPT0%3D--2fb4c9c381cc8518de05523690b07b6ed7ed204f&funnel_step_id=VnlaRDNjU2MvbFZpVjQwM2ZYaVEvdz09LS1iaklKdkwvQ1VhZkFLVHlGWkcyMDdBPT0%3D--9b91573651c52213d3f0880b6c7c9497fc7df3b1&user_id=N3puZnExUHFGS2hhcldmUEVEemZOdz09LS1rZTZ5Tnc0U2pmenN1c1BRV2ZQVmVnPT0%3D--e33744d1b15128bce4841aebf26bc0e3b87a7db6&account_id=Uno5bUNuYmxCelFpNmFhdnN1eE83QT09LS1HTDA5bjhuUkluVUFzdnpSSGNBQzBBPT0%3D--0e6cbba59288c29b0fd7ab1fd8e12e478be920ff&page_code=NTMyMzY5Njc%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=c606ef68-75bb-428a-ad83-7da1aa510633&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4
IP
Hash 84a9f613ac425daa4f7618a5cc638e33
5ff764f0b09de460ed439581fdabb512782e86dc
cf2ca8d33800d5f9402b95eb621a009e729a0e805b981162fe00ad76c764174d
GET /userevents/?funnel_id=cTBBcG5WV1VyMkZvektLNC9VR1RJdz09LS01Y1RCL1ZPYkJTYktyUVlyVnhjZkd3PT0%3D--41114bcdb1d39365b85d4093c652cd77d472efbb&page_id=b1Y0TW9JZndyR2syNW9zZS9oSDJhdz09LS1KN2JITktoUEJrZ1M3T25PYzJLaWJBPT0%3D--2fb4c9c381cc8518de05523690b07b6ed7ed204f&funnel_step_id=VnlaRDNjU2MvbFZpVjQwM2ZYaVEvdz09LS1iaklKdkwvQ1VhZkFLVHlGWkcyMDdBPT0%3D--9b91573651c52213d3f0880b6c7c9497fc7df3b1&user_id=N3puZnExUHFGS2hhcldmUEVEemZOdz09LS1rZTZ5Tnc0U2pmenN1c1BRV2ZQVmVnPT0%3D--e33744d1b15128bce4841aebf26bc0e3b87a7db6&account_id=Uno5bUNuYmxCelFpNmFhdnN1eE83QT09LS1HTDA5bjhuUkluVUFzdnpSSGNBQzBBPT0%3D--0e6cbba59288c29b0fd7ab1fd8e12e478be920ff&page_code=NTMyMzY5Njc%3D&mode_id=1&time_zone=Eastern%20Time%20(US%20%26%20Canada)&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=c606ef68-75bb-428a-ad83-7da1aa510633&url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4 HTTP/1.1
Host: app.clickfunnels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Tue, 08 Nov 2022 00:39:29 GMT
content-type: text/html
cf-ray: 766a40774cdeb4f7-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 269032da965f85119384f28a3c9834af
x-runtime: 0.032642
set-cookie: __cf_bm=62migJMbAmmph84PQr5b5Ag1P8lp2aL5dbp77CiYVMY-1667867969-0-ASP9G1td3bS8WfRq8l/eN+wUCib3YBPXEo3AH00II88S7i9g9SqP7rIVy/GAhL0iIO11EYrCqagJIEfomoz8o3T5KtYUiSjv//PCjdhJI0DG; path=/; expires=Tue, 08-Nov-22 01:09:29 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ae01ed64a4f624e20c6f7291553e8f41
19f849a7a44c682ada07677aceac26edea5c3903
f4b572a7585e69b63b520c624067c769ddc108f4b8503554b9f8046c00849dc9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash fd79841745350d86b27ad0358d75566a
881fa9d842bca5b0583276a512a4327b4b010bc7
8c2c99bc371652a98f722ea716f5843dadb2753558cdce04a923fc55bf2f3cb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5210
Cache-Control: max-age=170303
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:31 GMT
Etag: "63698728-1d7"
Expires: Wed, 09 Nov 2022 23:57:54 GMT
Last-Modified: Mon, 07 Nov 2022 22:31:04 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
c.bing.com/c.gif?CtsSyncId=7A001F19969748EA970DE96D4B1FC832&RedC=c.clarity.ms&MXFR=3215C2D97AAC6CA316D7D08F7EAC62D4
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=7A001F19969748EA970DE96D4B1FC832&RedC=c.clarity.ms&MXFR=3215C2D97AAC6CA316D7D08F7EAC62D4
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=7A001F19969748EA970DE96D4B1FC832&RedC=c.clarity.ms&MXFR=3215C2D97AAC6CA316D7D08F7EAC62D4 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bloodsugarblaster.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=7A001F19969748EA970DE96D4B1FC832&MUID=08F99B7651C7674113518920503266B5
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=08F99B7651C7674113518920503266B5; domain=c.bing.com; expires=Sun, 03-Dec-2023 00:39:31 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 38F6D62C919E4F4999D21258A206537B Ref B: OSL30EDGE0216 Ref C: 2022-11-08T00:39:31Z
date: Tue, 08 Nov 2022 00:39:31 GMT
content-length: 0
X-Firefox-Spdy: h2
i.ytimg.com/vi/4qxfssEiwaw/maxresdefault.jpg
200 OK 36 kB URL HTTP/2 i.ytimg.com/vi/4qxfssEiwaw/maxresdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 97c41a67a92283946b17701924296c92
ba580458709b9b9dba11c61e8fc3bba5d0efef08
3816c1aa2cced34ff147868f48592f3e54db90ffe15d713940c55c850aa97454
GET /vi/4qxfssEiwaw/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 35976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 08 Nov 2022 00:39:31 GMT
expires: Tue, 08 Nov 2022 02:39:31 GMT
cache-control: public, max-age=7200
etag: "1661486708"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ae01ed64a4f624e20c6f7291553e8f41
19f849a7a44c682ada07677aceac26edea5c3903
f4b572a7585e69b63b520c624067c769ddc108f4b8503554b9f8046c00849dc9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 00:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.clarity.ms/c.gif?CtsSyncId=7A001F19969748EA970DE96D4B1FC832&MUID=08F99B7651C7674113518920503266B5
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=7A001F19969748EA970DE96D4B1FC832&MUID=08F99B7651C7674113518920503266B5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=7A001F19969748EA970DE96D4B1FC832&MUID=08F99B7651C7674113518920503266B5 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bloodsugarblaster.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Tue, 08-Nov-2022 00:49:31 GMT; path=/; SameSite=None; Secure;
date: Tue, 08 Nov 2022 00:39:31 GMT
content-length: 42
X-Firefox-Spdy: h2
bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=4794&ck=1&ref=https://bloodsugarblaster.com/index-vsl-bsb-bg-1&ap=290&be=1644&fe=4436&dc=2358&perf=%7B%22timing%22:%7B%22of%22:1667867964103,%22n%22:0,%22f%22:1158,%22dn%22:1158,%22dne%22:1158,%22c%22:1158,%22s%22:1158,%22ce%22:1158,%22rq%22:1160,%22rp%22:1612,%22rpe%22:1615,%22dl%22:1621,%22di%22:2323,%22ds%22:2357,%22de%22:2541,%22dc%22:4435,%22l%22:4435,%22le%22:4550%7D,%22navigation%22:%7B%22ty%22:255%7D%7D&fcp=2063&jsonp=NREUM.setToken
200 OK 72 B URL HTTP/1.1 bam.nr-data.net/1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=4794&ck=1&ref=https://bloodsugarblaster.com/index-vsl-bsb-bg-1&ap=290&be=1644&fe=4436&dc=2358&perf=%7B%22timing%22:%7B%22of%22:1667867964103,%22n%22:0,%22f%22:1158,%22dn%22:1158,%22dne%22:1158,%22c%22:1158,%22s%22:1158,%22ce%22:1158,%22rq%22:1160,%22rp%22:1612,%22rpe%22:1615,%22dl%22:1621,%22di%22:2323,%22ds%22:2357,%22de%22:2541,%22dc%22:4435,%22l%22:4435,%22le%22:4550%7D,%22navigation%22:%7B%22ty%22:255%7D%7D&fcp=2063&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash 107d93e382e2c9b00fbf9fb0edc65d86
77e750e3ebf9706f4f6dd253785602d70be17c6c
a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937
GET /1/NRJS-fc902efb332119fff33?a=367981416&v=1216.487a282&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=4794&ck=1&ref=https://bloodsugarblaster.com/index-vsl-bsb-bg-1&ap=290&be=1644&fe=4436&dc=2358&perf=%7B%22timing%22:%7B%22of%22:1667867964103,%22n%22:0,%22f%22:1158,%22dn%22:1158,%22dne%22:1158,%22c%22:1158,%22s%22:1158,%22ce%22:1158,%22rq%22:1160,%22rp%22:1612,%22rpe%22:1615,%22dl%22:1621,%22di%22:2323,%22ds%22:2357,%22de%22:2541,%22dc%22:4435,%22l%22:4435,%22le%22:4550%7D,%22navigation%22:%7B%22ty%22:255%7D%7D&fcp=2063&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 08 Nov 2022 00:39:31 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 766a40870cb20b31-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=2863392b2cebbd8a; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
trc-events.taboola.com/1046423/log/3/unip?en=pre_d_eng_tb&tos=1821&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667867969354&vi=1667867967528&ri=1293ec1d4c721e650a87e537e985cb30&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1046423/log/3/unip?en=pre_d_eng_tb&tos=1821&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667867969354&vi=1667867967528&ri=1293ec1d4c721e650a87e537e985cb30&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1046423/log/3/unip?en=pre_d_eng_tb&tos=1821&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667867969354&vi=1667867967528&ri=1293ec1d4c721e650a87e537e985cb30&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 08 Nov 2022 00:39:32 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://bloodsugarblaster.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1381010/log/3/unip?en=pre_d_eng_tb&tos=1822&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667867969355&vi=1667867967528&ri=a25e04aa7e46aca493380b0486700bcb&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1381010/log/3/unip?en=pre_d_eng_tb&tos=1822&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667867969355&vi=1667867967528&ri=a25e04aa7e46aca493380b0486700bcb&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1381010/log/3/unip?en=pre_d_eng_tb&tos=1822&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1667867969355&vi=1667867967528&ri=a25e04aa7e46aca493380b0486700bcb&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 08 Nov 2022 00:39:32 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://bloodsugarblaster.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 171052
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://bloodsugarblaster.com
access-control-allow-credentials: true
date: Tue, 08 Nov 2022 00:39:32 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1046423/log/3/unip?en=pre_d_eng_tb&tos=4824&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667867972356&vi=1667867967528&ri=1293ec1d4c721e650a87e537e985cb30&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1046423/log/3/unip?en=pre_d_eng_tb&tos=4824&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667867972356&vi=1667867967528&ri=1293ec1d4c721e650a87e537e985cb30&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1046423/log/3/unip?en=pre_d_eng_tb&tos=4824&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667867972356&vi=1667867967528&ri=1293ec1d4c721e650a87e537e985cb30&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 08 Nov 2022 00:39:35 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://bloodsugarblaster.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1381010/log/3/unip?en=pre_d_eng_tb&tos=4825&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667867972358&vi=1667867967528&ri=a25e04aa7e46aca493380b0486700bcb&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1381010/log/3/unip?en=pre_d_eng_tb&tos=4825&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667867972358&vi=1667867967528&ri=a25e04aa7e46aca493380b0486700bcb&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1381010/log/3/unip?en=pre_d_eng_tb&tos=4825&scd=55&ssd=1&est=1667867967530&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1667867972358&vi=1667867967528&ri=a25e04aa7e46aca493380b0486700bcb&ref=http%3A%2F%2Fcti.myvnc.com%2F&cv=20221106-3-RELEASE&item-url=https%3A%2F%2Fbloodsugarblaster.com%2Findex-vsl-bsb-bg-1%3Faff_id%3D58%26subid%3D4288%26subid2%3D52c20bde14004ba7a749a7766ed548d4&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bloodsugarblaster.com
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 08 Nov 2022 00:39:35 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://bloodsugarblaster.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
bloodsugarblaster.com/assets/lander.css
200 OK 0 B URL HTTP/2 bloodsugarblaster.com/assets/lander.css
IP
GET /assets/lander.css HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: text/css
cf-ray: 766a4072cd57b4ff-OSL
access-control-allow-origin: *
age: 116
cache-control: public, max-age=1200
etag: W/"6359dae3-6a514"
expires: Tue, 08 Nov 2022 00:59:28 GMT
last-modified: Thu, 27 Oct 2022 01:12:03 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
display.buygoods.com/v1/disclaimer?id=disclaimer&account_id=7193&_=1667867966592
200 OK 0 B URL HTTP/2 display.buygoods.com/v1/disclaimer?id=disclaimer&account_id=7193&_=1667867966592
IP
GET /v1/disclaimer?id=disclaimer&account_id=7193&_=1667867966592 HTTP/1.1
Host: display.buygoods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:29 GMT
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-credentials: true
strict-transport-security: max-age=31536000;
set-cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
cache-control: private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 766a4077fab60b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
IP
GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 08 Nov 2022 00:39:28 GMT
date: Tue, 08 Nov 2022 00:39:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 0 B URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: tlrb4DPSCVj4+hJclehK1bisFW1eeSxdqX/jaLORE7oXElaCUUmcY9qyfyB+HQp930Ddzb7d4eyL6tl2MF0ZPQ==
content-length: 27337
x-fb-trip-id: 1904183273
date: Tue, 08 Nov 2022 00:39:29 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
bloodsugarblaster.com/vendor.js
200 OK 0 B URL HTTP/2 bloodsugarblaster.com/vendor.js
IP
GET /vendor.js HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:29 GMT
content-type: application/javascript
cf-ray: 766a4076df77b4ff-OSL
access-control-allow-origin: *
cache-control: max-age=900, public
etag: W/"7422e50efbaea439fda7ef3b0eb54ee1"
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: MISS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
status: 200 OK
x-content-digest: 581e49c9b7bdd06dab54c00931f4256b223e620e
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: fresh
x-request-id: 7df9390cbf0cbf03b293d2875d5a4e4c
x-runtime: 0.025273
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
bloodsugarblaster.com/assets/pushcrew.js
200 OK 0 B URL HTTP/2 bloodsugarblaster.com/assets/pushcrew.js
IP
GET /assets/pushcrew.js HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
Cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:28 GMT
content-type: application/x-javascript
cf-ray: 766a4072fd8eb4ff-OSL
access-control-allow-origin: *
age: 35
cache-control: public, max-age=1200
etag: W/"6359dae3-27d"
expires: Tue, 08 Nov 2022 00:59:28 GMT
last-modified: Thu, 27 Oct 2022 01:12:03 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
tracking.buygoods.com/track/?a=7193&firstcookie=0&referrer=http%3A%2F%2Fcti.myvnc.com%2F&product=blood1,blood3,blood6&sessid2=
200 OK 0 B URL HTTP/2 tracking.buygoods.com/track/?a=7193&firstcookie=0&referrer=http%3A%2F%2Fcti.myvnc.com%2F&product=blood1,blood3,blood6&sessid2=
IP
GET /track/?a=7193&firstcookie=0&referrer=http%3A%2F%2Fcti.myvnc.com%2F&product=blood1,blood3,blood6&sessid2= HTTP/1.1
Host: tracking.buygoods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 00:39:29 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
p3p: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE"
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Tue, Jan 12 1999 01:01:01 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 766a4074be570b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
b-code.liadm.com/a-069t.min.js
200 OK 0 B URL HTTP/2 b-code.liadm.com/a-069t.min.js
IP
GET /a-069t.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 07 Nov 2022 12:45:49 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6sWEynqtDf1gkayyGQ3nJxW16NERislzQZ9FKB2S6O9XK0W8sBSIcQ==
age: 42820
X-Firefox-Spdy: h2
bloodsugarblaster.com/index-vsl-bsb-bg?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
302 Found 0 B URL HTTP/2 bloodsugarblaster.com/index-vsl-bsb-bg?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
IP
GET /index-vsl-bsb-bg?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4 HTTP/1.1
Host: bloodsugarblaster.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://cti.myvnc.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 08 Nov 2022 00:39:27 GMT
content-type: text/html; charset=utf-8
location: https://bloodsugarblaster.com/index-vsl-bsb-bg-1?aff_id=58&subid=4288&subid2=52c20bde14004ba7a749a7766ed548d4
cf-ray: 766a406dfa06b4ff-OSL
access-control-allow-origin: *
cache-control: no-cache
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: MISS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
status: 302 Found
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: c1c9c977fa437b84ec894e96f338e383
x-runtime: 0.104253
set-cookie: __cf_bm=7gPae8b_j6qOryKc0JAoOF.djqiIcztZDYUf2Dcszb8-1667867967-0-ASDL44LDMQXkW/c/rM3cbI4pGnpoQ78jsE1NFQH38S4AVjpDaOa/e0/ERHxeDGWLDZDt2+yxOYMznkdFw6jOWs9eiMkchHUm38Eo/h6KJuWv; path=/; expires=Tue, 08-Nov-22 01:09:27 GMT; domain=.bloodsugarblaster.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
www.clarity.ms/tag/3y01lbt8hu
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/3y01lbt8hu
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/3y01lbt8hu HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bloodsugarblaster.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=9f847957af0e4936b51b1b590ccddd86.20221108.20231108; expires=Wed, 08 Nov 2023 00:39:30 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3d284f99-f285-495c-ac33-dedd7ecf1ac8
x-cache: CONFIG_NOCACHE
x-azure-ref: 0QaVpYwAAAAB+cjev4ccaSZs9tHA7U/ScU1ZHMjBFREdFMDYwOQA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Tue, 08 Nov 2022 00:39:29 GMT
X-Firefox-Spdy: h2
185.83.145.191
93.184.220.29
172.64.155.188
104.16.15.194
151.101.85.44
23.36.76.226
185.142.27.41
141.226.228.48