www.lilmaaloumiat.com/p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file
142.250.74.147301 Moved Permanently 269 B URL HTTP/1.1 www.lilmaaloumiat.com/p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file
IP 142.250.74.147:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d8052a1bd1a46b2baee65e4a09a74708
a82e4d42d53be04631f741c872d05a0bf2e86c0b
4e269957f56e54465b334fdc45fd6981e75c035223eb6aa941f3f3b39b1ed9d3
GET /p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file HTTP/1.1
Host: www.lilmaaloumiat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.lilmaaloumiat.com/p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sun, 01 Jan 2023 19:20:22 GMT
Expires: Sun, 01 Jan 2023 19:20:22 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 269
Server: GSE
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash d3098a490e8d38d4150d961624aa7b64
6ecbca59302d0ac5436f1723137d42523f629ea1
158e277ba0220577b59b15e4017b6c27f59295bcd7e5d0e52d027dc7c4309f0b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "158E277BA0220577B59B15E4017B6C27F59295BCD7E5D0E52D027DC7C4309F0B"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4170
Expires: Sun, 01 Jan 2023 20:29:52 GMT
Date: Sun, 01 Jan 2023 19:20:22 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 0e93d32de9bcebd3483b40a8fed30718
7e1fe5db1f08b75a079780717e4f18ad76767212
4f0aaacfefd27c89225a1a0d2fbe778ec4f3369b5e4e1599255bf12866196cd4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F0AAACFEFD27C89225A1A0D2FBE778EC4F3369B5E4E1599255BF12866196CD4"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8102
Expires: Sun, 01 Jan 2023 21:35:24 GMT
Date: Sun, 01 Jan 2023 19:20:22 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 6d6d99cd1201f65eeb7d437b62bad1f3
6d5e41d7a2786ccaad7c7276ecdd9411f8cbd6ba
db2b42007fc4ad126c8af8d7cce27af88947231d09ded56da33cfee3d2594e23
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB2B42007FC4AD126C8AF8D7CCE27AF88947231D09DED56DA33CFEE3D2594E23"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11811
Expires: Sun, 01 Jan 2023 22:37:13 GMT
Date: Sun, 01 Jan 2023 19:20:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 01 Jan 2023 18:47:18 GMT
content-type: application/json
age: 1984
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: HOlDuhXCsDk1BZnnPHk5AOciSlnByY80kTLmPzR6wBn8rVsfLc3OvHMDX/pffEfSzzwl+HtbgHPkCtpLCzpAMQ==
x-amz-request-id: MRE1RX3095MGG7FA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 01 Jan 2023 18:57:57 GMT
age: 1345
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 19:20:22 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/fkgNNOKN8Ys
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/fkgNNOKN8Ys
IP 142.250.74.131:0
Hash eda4581d9b70c67d771899fe40e69a45
0633b0e398adc5c2fbd4b7961b8939ca0299f481
ba89379507d606d5de8ef427e67a78c87f2a9abf68a3ae590910a60db97d5142
POST /s/gts1d4/fkgNNOKN8Ys HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:22 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 01 Jan 2023 19:08:11 GMT
age: 731
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e2a99db6956684dc306ada584f1907d8
21c3fc85b00308907c1cffcb36b1ba1a4617f613
cf568c4a26fb352228e849b18fbca0f6fd3b3a89055cd5f4fc0cdd11f9b9733e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 405
Cache-Control: max-age=136391
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Etag: "63b14d29-1d7"
Expires: Tue, 03 Jan 2023 09:13:34 GMT
Last-Modified: Sun, 01 Jan 2023 09:06:49 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
www.lilmaaloumiat.com/p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file
142.250.74.147200 OK 115 kB URL HTTP/2 www.lilmaaloumiat.com/p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file
IP 142.250.74.147:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2516)
Size 115 kB (115441 bytes)
Hash b20101836a5d0661bf6a636e5a98af96
ba676add85fffe98f22ec32507edff706f19df6e
ac2d91f8f6e0bf7223dacdf89b304872ad9b5639073b8e835face6e246b3ff21
GET /p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file HTTP/1.1
Host: www.lilmaaloumiat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sun, 01 Jan 2023 19:20:22 GMT
date: Sun, 01 Jan 2023 19:20:22 GMT
cache-control: private, max-age=0
last-modified: Mon, 28 Nov 2022 10:16:38 GMT
etag: W/"159cbb76da21771b81f6d16f9e0f455a916bbe2126e8dd32d678f6c283aa7226"
x-robots-tag: all,noarchive,nofollow,noimageindex,noindex,none,noodp,nosnippet,notranslate
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 115441
server: GSE
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 81c87a3f088331ce54f7b42d3815e4d7
93f7ac5fa21edef94d130988ab2833a36a8db38d
e493ad44a81a5773112904c8141b028cac7298d3cf1b44368291d9a0a3b800d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0468fec435ade9da599ed1f46bb61464
61294530d9be7c2a732758fb6b06ae51170f02b6
48497874c626a3cd466af1566fa28103970006af3756f9b5c0256cddcbd9dade
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.lilmaaloumiat.com/js/cookienotice.js
142.250.74.147200 OK 2.0 kB URL HTTP/2 www.lilmaaloumiat.com/js/cookienotice.js
IP 142.250.74.147:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: www.lilmaaloumiat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sun, 01 Jan 2023 19:20:23 GMT
expires: Sun, 08 Jan 2023 19:20:23 GMT
cache-control: public, max-age=604800
last-modified: Sun, 01 Jan 2023 16:49:29 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 639628294f17a08eb592873f3bbde34e
7d4d419b6b8c3122a911f309cf6a58c8866a3898
f3a3777dd4c0408b58f927f38fd93d2953db45f3ad46051dfc3d94de718f4f72
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 639628294f17a08eb592873f3bbde34e
7d4d419b6b8c3122a911f309cf6a58c8866a3898
f3a3777dd4c0408b58f927f38fd93d2953db45f3ad46051dfc3d94de718f4f72
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
142.250.74.74200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
IP 142.250.74.74:0
File type ASCII text, with very long lines (32341)
Hash 856f85cc1b07156fa844b44a10c236c2
7cef457c0e1cd0c20f4e699564ea8997f0332021
c61aa9ce7b32f93630abac1a4b27382f9333e0ff69477c9d9099070ae0742b01
GET /ajax/libs/jquery/1.11.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33576
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Dec 2022 19:35:05 GMT
expires: Fri, 29 Dec 2023 19:35:05 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 258318
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-150293817-1
142.250.74.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-150293817-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash fed115e797045daea3dc410de0ea53f3
cb5ab3da07f092d3c25cd0dab77189850019371a
729a5ecd30d362b9d8661cdf57600ca57c72ab08c21826219040b631f3c565f0
GET /gtag/js?id=UA-150293817-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 01 Jan 2023 19:20:23 GMT
expires: Sun, 01 Jan 2023 19:20:23 GMT
cache-control: private, max-age=900
last-modified: Sun, 01 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43636
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 53a29b10091c93ef3d009c54b4cc770e
228fab15fc1f823c2434e45855c14fa1829ecbdf
6d504c597429bfa86b70edfb0f9f65a658a8a34fa514223983422813146f6575
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 974ba12425a4c6cb1dd9a238a9a3d2a6
4e03e81f1715fd0fbcd4e03710de2becafe8047f
18e4987c782c9758ea8fc0bb60f4632a1b551fe53dbe64e96146abe80988f3cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 6cd0a5b7e28ba0fec6e32f7f11bcc2f2
a90226cf80d93c01cfbf7300eaa77644faef02ec
6442600951ff29f1376d79dec39b92594d6fe6124126bafd90a095d6b3b7fde7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 53a604c8b813eddf66edf676e2f52809
192a8d431b3ff8d6018dc9ad1341b7284f6a0105
fba8f770897ed5ffd38dcce0d550b95ce3fd21bdd59f8d49820eebbaa7d74a95
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2504215749-css_bundle_v2_rtl.css
142.250.74.73200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2504215749-css_bundle_v2_rtl.css
IP 142.250.74.73:0
File type ASCII text, with very long lines (35994)
Hash 80ce34d529819878a4a26584e8eec719
34e44bf7d3e11ab0ee1faf2cc5d2c7f7b9f053e2
625e3271a91189e54e12bd29994e693f26d45d83de700ce5e7b3db033fd1606f
GET /static/v1/widgets/2504215749-css_bundle_v2_rtl.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 01 Jan 2023 03:31:55 GMT
expires: Mon, 01 Jan 2024 03:31:55 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 01 Jan 2023 02:49:12 GMT
content-type: text/css
age: 56908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-auto-ads-0.1.js
142.250.74.161200 OK 7.6 kB URL HTTP/2 cdn.ampproject.org/v0/amp-auto-ads-0.1.js
IP 142.250.74.161:0
File type ASCII text, with very long lines (24963)
Hash cd86a58b41327f050df08e98482186c3
6e3d9f886f2d975eb812ad25d7773933a35c1782
8c896c9355e2de8b6b94dfc5bc86519e4a44f7e38681517e538b34bdb19c6ac7
GET /v0/amp-auto-ads-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 7580
date: Sun, 01 Jan 2023 19:20:23 GMT
expires: Sun, 01 Jan 2023 19:20:23 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "68f3175abba6e2b9"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.82.221.194101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.82.221.194:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WGtfsYCwpaaxE2SYdfKKaw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jIFXhAmP6Fy9ffCNOoVl+pCWgHU=
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash a6a588d80b1df4ea813356619d4d937b
0c3f7db0c396b08b956c3875342bb7282014e9d9
ef6d713156f99e91a8f403cbacb96e02c1ad84fecbc9ab084309942c2879b665
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4068
Cache-Control: max-age=96537
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Etag: "63b0a32c-118"
Expires: Mon, 02 Jan 2023 22:09:20 GMT
Last-Modified: Sat, 31 Dec 2022 21:01:32 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280
apis.google.com/js/platform.js
142.250.74.46200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP 142.250.74.46:0
File type ASCII text, with very long lines (1429)
Hash 1cc36f699291ba29dab9ec0f885b281b
d536f8bda7d333c21eae8e3d816d690402adb90c
6b20ce0ec6b6c57b33e8118f8d5d3c501ede61b8589ebab71d411b81d0fae994
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20933
date: Sun, 01 Jan 2023 19:20:23 GMT
expires: Sun, 01 Jan 2023 19:20:23 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "4fcbc207c89b8c6c"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/1197256859-widgets.js
142.250.74.73200 OK 56 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1197256859-widgets.js
IP 142.250.74.73:0
File type ASCII text, with very long lines (2221)
Hash 15d181d1185f956f34ef9d8cff4af838
41a3dfc3567601d72332b73abadda6031cdf593b
2c8823905cd520208804414a54a064a4f98e315a8b97cca381cfae0fe630b7e1
GET /static/v1/widgets/1197256859-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56470
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 01 Jan 2023 03:01:04 GMT
expires: Mon, 01 Jan 2024 03:01:04 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 30 Dec 2022 11:49:36 GMT
content-type: text/javascript
age: 58759
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
customketodiet.com/uploads/banners/en/keto-diet-fb-banner-3.jpg
104.26.2.118200 OK 212 kB URL HTTP/2 customketodiet.com/uploads/banners/en/keto-diet-fb-banner-3.jpg
IP 104.26.2.118:0
File type JPEG image data, progressive, precision 8, 1080x1080, components 3\012- data
Size 212 kB (211514 bytes)
Hash 85360bc5953991dfae351f8fae45cccc
b4d0c894cef3982bb8cce5d87b5360de3be6dd86
2a4169d093fda6a51ec3796851a084b51ad608f26a0b88b3f5d6ce554ed77bfa
GET /uploads/banners/en/keto-diet-fb-banner-3.jpg HTTP/1.1
Host: customketodiet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:23 GMT
content-type: image/jpeg
content-length: 211514
cf-bgj: imgq:100,h2pri
cf-polished: origSize=228200
etag: "37b68-5e3b39b01f0b0"
last-modified: Wed, 13 Jul 2022 18:03:42 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qCLtaXXbCnGmbMv%2BwZGykkvNSS9T3RlEwnhueHTkDBKN8m0mLCaFYuILIbGnddLrNRLb7apomh4iyT6V8JUVG9h3WqSjpxKxTHRT5nc1cdwr2%2B7XoLhUqY7WuPUFpzbN1ISC1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 782d9ca9bd41b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash bb809cfb572b68b1ae1e01bc048dbcfa
a739e1a0fe77e7914d7ae95ad60100f547537f93
7320fb9fc844b9a3dae88d01238fbe49c8f75911a11129d9d856229c90f9f324
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 013c85e86eac3e14a23da01d95c76be4
2a5eb994793c91b20930114d4ab82cd63a8ad602
89917b5963e8403ce7669fe867a62fbcfb286eb812fff36702899de8c2320edf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.firebase.com/v0/firebase.js
151.101.1.195200 OK 24 kB URL HTTP/2 cdn.firebase.com/v0/firebase.js
IP 151.101.1.195:0
File type ASCII text, with very long lines (1829)
Hash cb1ef176cd4227000c4c09846f103c06
9fd791ae13589a6d56b642291c69049f5533550a
d183c3e524e2c62ce8278731568b37635eb5aeb09b082c9b6c88ccabc6983841
GET /v0/firebase.js HTTP/1.1
Host: cdn.firebase.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public,max-age=432000
content-encoding: br
content-type: application/javascript
etag: "16af03cf134a042390c20240c4c8580c6a855f81d65e5f55e65313f1931e9183-br"
last-modified: Wed, 15 Jul 2020 22:46:44 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sun, 01 Jan 2023 19:20:23 GMT
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1672600823.407614,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23597
X-Firefox-Spdy: h2
exe.io/img/ref/r1.gif
104.26.3.103200 OK 60 kB IP 104.26.3.103:0
File type GIF image data, version 89a, 728 x 90\012- data
Hash e254624bb56d61b13f685b7145859bac
7c723ead660299a103061dec0a5d7a79b0ce7b4e
79d62afd315785791e8179617b67794c6c61c10458d01dfccc6956333e8dde26
GET /img/ref/r1.gif HTTP/1.1
Host: exe.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:23 GMT
content-type: image/gif
content-length: 60091
cache-control: max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=62268, status=vary_header_present
expires: Sat, 12 Aug 2023 23:48:47 GMT
last-modified: Fri, 25 Dec 2020 17:59:40 GMT
vary: User-Agent, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 12252696
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=faxtEoIhNERiNRjCkKi2zmYKuXfFYn4Po18vUKw4dqd0NbrmLVmSOlVpP1unttsumsli%2B31OvopT%2BEiWz4Jz9iMRC40hUx39sbd90eoNZZY3xAyvWVKAyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 782d9caa6a6cb52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 6cd0a5b7e28ba0fec6e32f7f11bcc2f2
a90226cf80d93c01cfbf7300eaa77644faef02ec
6442600951ff29f1376d79dec39b92594d6fe6124126bafd90a095d6b3b7fde7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 53a29b10091c93ef3d009c54b4cc770e
228fab15fc1f823c2434e45855c14fa1829ecbdf
6d504c597429bfa86b70edfb0f9f65a658a8a34fa514223983422813146f6575
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash a6a588d80b1df4ea813356619d4d937b
0c3f7db0c396b08b956c3875342bb7282014e9d9
ef6d713156f99e91a8f403cbacb96e02c1ad84fecbc9ab084309942c2879b665
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4068
Cache-Control: max-age=96537
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Etag: "63b0a32c-118"
Expires: Mon, 02 Jan 2023 22:09:20 GMT
Last-Modified: Sat, 31 Dec 2022 21:01:32 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash dbfef74ce76b23c224b757987732f8dc
4002319b0161d6ea3849c784ace79f577db288b2
406af203f4e69f59113802dc7ec297934b1e87c7101c5c5e3ee686c71d19b1b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/MSgLjC63PXc
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/MSgLjC63PXc
IP 142.250.74.131:0
Hash fcedf70bb6c7ff53e978657a74b2d1cf
5d0a9809d5ca86733faf95b5caf4896c4ebcf0da
f42bacdc10a3a483dddd009774cd2e8b117c2350f8e9568252d3254ae4c0b649
POST /s/gts1d4/MSgLjC63PXc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-Y15UuP8qVPs/W9hpSXTZ_HI/AAAAAAAACKA/QMMT58nQX_E7t8x1zbYOFZ4O4LtOyEM1wCLcBGAs/s1600/ADS-728-BigMag---AR.jpg
216.58.207.225200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-Y15UuP8qVPs/W9hpSXTZ_HI/AAAAAAAACKA/QMMT58nQX_E7t8x1zbYOFZ4O4LtOyEM1wCLcBGAs/s1600/ADS-728-BigMag---AR.jpg
IP 216.58.207.225:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 728x90, components 3\012- data
Hash 7b26bd39bccda7de8fb0c6dfe0ea0342
b02efc50619c4c65bea75c719c432a535c9dfb1a
b46a5381f91da17bc74b114b3d4767966b06240dbb7d986e39069415af48e909
GET /-Y15UuP8qVPs/W9hpSXTZ_HI/AAAAAAAACKA/QMMT58nQX_E7t8x1zbYOFZ4O4LtOyEM1wCLcBGAs/s1600/ADS-728-BigMag---AR.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ADS-728-BigMag---AR.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 11996
x-xss-protection: 0
date: Sun, 01 Jan 2023 19:20:23 GMT
expires: Tue, 27 Dec 2022 21:40:09 GMT
cache-control: public, max-age=86400, no-transform
etag: "v8a1"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 639628294f17a08eb592873f3bbde34e
7d4d419b6b8c3122a911f309cf6a58c8866a3898
f3a3777dd4c0408b58f927f38fd93d2953db45f3ad46051dfc3d94de718f4f72
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-Mz5dxWvAhI0/Yd65nTreoBI/AAAAAAAAARc/WS9GaGaFU4wyK5_gYf_Yoo_if-B_GoMfQCNcBGAsYHQ/s221/1111.png
216.58.207.225200 OK 25 kB URL HTTP/2 1.bp.blogspot.com/-Mz5dxWvAhI0/Yd65nTreoBI/AAAAAAAAARc/WS9GaGaFU4wyK5_gYf_Yoo_if-B_GoMfQCNcBGAsYHQ/s221/1111.png
IP 216.58.207.225:0
File type PNG image data, 221 x 143, 8-bit/color RGBA, non-interlaced\012- data
Hash ffa97d7575272c03e6808f55936e922a
8eff1dec7090c9de7ebec2315073e93ba631025e
5dc40f0c1effeee7909bd792529d10d57f5e197d9190a34485764cbd6efbbf20
GET /-Mz5dxWvAhI0/Yd65nTreoBI/AAAAAAAAARc/WS9GaGaFU4wyK5_gYf_Yoo_if-B_GoMfQCNcBGAsYHQ/s221/1111.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v118"
expires: Mon, 02 Jan 2023 19:20:23 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1111.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 01 Jan 2023 19:20:23 GMT
server: fife
content-length: 25426
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 95d00b19982da0f632e35ac67cf7de89
463b58545ea641448d6482e74a924dd0a34fd7e1
4c282655c478515d19a4a2edebd56834fbc88925f5681800dee43a07f0ebe3b0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 19:20:23 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 12:20:47 GMT
Expires: Thu, 05 Jan 2023 12:20:46 GMT
Etag: "463b58545ea641448d6482e74a924dd0a34fd7e1"
Cache-Control: max-age=319822,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 782d9cab3b6fb50f-OSL
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 8dfc9e1668f59239f4e1f605234a98fc
951b40b330e58c62f664138f395101907704d7ff
2582c4e5a9b45cd0c21dcd2fa7c11bb1f77a071ec488457c70235b3a35192a9f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3313
Cache-Control: max-age=93596
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Etag: "63b09aa2-116"
Expires: Mon, 02 Jan 2023 21:20:19 GMT
Last-Modified: Sat, 31 Dec 2022 20:25:06 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
104.17.24.14200 OK 5.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP 104.17.24.14:0
File type ASCII text, with very long lines (30837)
Hash 109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:23 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 944896
expires: Fri, 22 Dec 2023 19:20:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7u4ECocaiuxAWz3qprMpA2JR0wXc%2FBLZggKL2kGZS973rzu%2F2BethblXIPhQbiLLUUrbrHyPSnwqOA%2Fa4CUru1b7eyIj0l5hZQ6sZS7EyfIFFtlu9d2ShQy9NN8thDuUJsoH5GFN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 782d9cabaa44b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 8dfc9e1668f59239f4e1f605234a98fc
951b40b330e58c62f664138f395101907704d7ff
2582c4e5a9b45cd0c21dcd2fa7c11bb1f77a071ec488457c70235b3a35192a9f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3313
Cache-Control: max-age=93596
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:23 GMT
Etag: "63b09aa2-116"
Expires: Mon, 02 Jan 2023 21:20:19 GMT
Last-Modified: Sat, 31 Dec 2022 20:25:06 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
104.17.24.14200 OK 77 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 104.17.24.14:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lilmaaloumiat.com
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:23 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2168069
expires: Fri, 22 Dec 2023 19:20:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3FCkbu3y3nGRjmr95TQHSuu00BM8P8Sf4vHv1Yal%2BS9d8uKnlFLEWsp0OOCxebxrUlBap7yQ4eaIj%2BNQnJBykWA1ukJ%2FGvrzshnpzRQMwSZin3PbKv4JTIrQ0T5YT%2Foedt2pQ1yS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 782d9cac0892b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 95d00b19982da0f632e35ac67cf7de89
463b58545ea641448d6482e74a924dd0a34fd7e1
4c282655c478515d19a4a2edebd56834fbc88925f5681800dee43a07f0ebe3b0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 19:20:23 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 12:20:47 GMT
Expires: Thu, 05 Jan 2023 12:20:46 GMT
Etag: "463b58545ea641448d6482e74a924dd0a34fd7e1"
Cache-Control: max-age=319822,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 782d9caafe70b50b-OSL
p444974.clksite.com/adServe/banners?tid=444974_871472_0
52.116.53.147301 Moved Permanently 162 B URL HTTP/2 p444974.clksite.com/adServe/banners?tid=444974_871472_0
IP 52.116.53.147:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=444974_871472_0 HTTP/1.1
Host: p444974.clksite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 01 Jan 2023 19:20:23 GMT
content-type: text/html
content-length: 162
location: https://mybettermb.com/adServe/banners?tid=444974_871472_0
X-Firefox-Spdy: h2
p444974.clksite.com/adServe/banners?tid=444974_871470_3&type=footer&size=37
52.116.53.147301 Moved Permanently 162 B URL HTTP/2 p444974.clksite.com/adServe/banners?tid=444974_871470_3&type=footer&size=37
IP 52.116.53.147:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=444974_871470_3&type=footer&size=37 HTTP/1.1
Host: p444974.clksite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 01 Jan 2023 19:20:23 GMT
content-type: text/html
content-length: 162
location: https://mybettermb.com/adServe/banners?tid=444974_871470_3&type=footer&size=37
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash c7c36f2ce4a9b6bf4c03c617f4930803
1a8cf78051709d6fb432946450fb265deb5c0026
972417ddf2ca778c5f78cb2c2f5518fa89e585fc8bf59f4ba3beceb83e288ac3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 19:20:24 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 07:25:43 GMT
Expires: Thu, 05 Jan 2023 07:25:42 GMT
Etag: "1a8cf78051709d6fb432946450fb265deb5c0026"
Cache-Control: max-age=302117,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 782d9cae9897b50f-OSL
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 118862dd91acadbe96bd8df464b5d944
1f18ca3394c0502b2447001d8115d8f69211a72b
599a2f13cae2edc7b4ffbaee442cc40363b809400452364e21a05fd3599f72c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "599A2F13CAE2EDC7B4FFBAEE442CC40363B809400452364E21A05FD3599F72C6"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8073
Expires: Sun, 01 Jan 2023 21:34:57 GMT
Date: Sun, 01 Jan 2023 19:20:24 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 118862dd91acadbe96bd8df464b5d944
1f18ca3394c0502b2447001d8115d8f69211a72b
599a2f13cae2edc7b4ffbaee442cc40363b809400452364e21a05fd3599f72c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "599A2F13CAE2EDC7B4FFBAEE442CC40363B809400452364E21A05FD3599F72C6"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8073
Expires: Sun, 01 Jan 2023 21:34:57 GMT
Date: Sun, 01 Jan 2023 19:20:24 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 118862dd91acadbe96bd8df464b5d944
1f18ca3394c0502b2447001d8115d8f69211a72b
599a2f13cae2edc7b4ffbaee442cc40363b809400452364e21a05fd3599f72c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "599A2F13CAE2EDC7B4FFBAEE442CC40363B809400452364E21A05FD3599F72C6"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8073
Expires: Sun, 01 Jan 2023 21:34:57 GMT
Date: Sun, 01 Jan 2023 19:20:24 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 118862dd91acadbe96bd8df464b5d944
1f18ca3394c0502b2447001d8115d8f69211a72b
599a2f13cae2edc7b4ffbaee442cc40363b809400452364e21a05fd3599f72c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "599A2F13CAE2EDC7B4FFBAEE442CC40363B809400452364E21A05FD3599F72C6"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8073
Expires: Sun, 01 Jan 2023 21:34:57 GMT
Date: Sun, 01 Jan 2023 19:20:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6390ab-134c-4c14-ae9e-9591400607a3.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6390ab-134c-4c14-ae9e-9591400607a3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a92938ba6a58bd49a9938a24e404cba
2adeb5279f5a130a4ddc05199bc7b0b197a3cabc
1779831cec3a72aa82e2dab789c043da6a7fa432ff75a644733b0ee5f81b965b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6390ab-134c-4c14-ae9e-9591400607a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10426
x-amzn-requestid: b6ad4eac-168a-477b-9883-f77fffc6468f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d5ZfRG7XIAMF7zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ad3c61-7766d0293ca12d6e2436ac66;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 07:06:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fbLIBt1nYKjHIB6qMh22u5A92HgG0_f84qqlf5rqpwl4brcU5UB8eQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 13:01:40 GMT
age: 22724
etag: "2adeb5279f5a130a4ddc05199bc7b0b197a3cabc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21ed4431-081e-4d12-961f-aa4e653e835e.jpeg
34.120.237.76200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21ed4431-081e-4d12-961f-aa4e653e835e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 542c50a9c4ddc940c0b46f84973f26a6
adec3ce0b331c1ae542b07e3105ccbb7e517699a
2e6efc9930b8b281f4b4282a3f1f9815708b245760319bd711844c66f1b1cfb3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21ed4431-081e-4d12-961f-aa4e653e835e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4574
x-amzn-requestid: 5656411c-79b6-424e-ba7c-9a546cb6f99b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d42MyGYVIAMFXig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ad03eb-62d0a04f49947a6e42e6083d;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 03:05:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DFqVV_GbqyTSmrx57w2P_yiSWPvSCcFLQZwwBJbcbmvLautLFMR0CQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 04:13:33 GMT
age: 54411
etag: "adec3ce0b331c1ae542b07e3105ccbb7e517699a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6c2763-3047-4d8a-adab-82148ff57727.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6c2763-3047-4d8a-adab-82148ff57727.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dc62c3ca8bc387a91c7d4711b5bc2409
7a984b459227e11984faa2539569a90875a58d29
e14a0e22b58fc1f3f392b842573e3abff7b24eb66db6b351046a186acc3b2954
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6c2763-3047-4d8a-adab-82148ff57727.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7660
x-amzn-requestid: 9338abf2-1191-47da-95ff-0a201604fbc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d-sKCEDhoAMFZ4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63af5a40-433f4ba9780dbc7a485ccbe9;Sampled=0
x-amzn-remapped-date: Fri, 30 Dec 2022 21:38:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZCKSB-MwWwP2KTj7XMSHOZZcse5xmPE0JtkkBSLGnWqJdNyr-5oQzQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 21:47:16 GMT
age: 77588
etag: "7a984b459227e11984faa2539569a90875a58d29"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff91ff871-3f80-4a32-932c-b81a53066ccd.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff91ff871-3f80-4a32-932c-b81a53066ccd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4367f9a4e85a0b03fc104148023c73e6
81b2d64110d0f5853a7190be93252dac4a428b7a
ec0b378ad8bea69e474ba2fd53321467a04143b39da7f438924b0a7604fa6751
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff91ff871-3f80-4a32-932c-b81a53066ccd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8884
x-amzn-requestid: d0b8e033-5a7a-4c2c-8cee-7cd14d205e5e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d-XYNFV6IAMFoog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63af3901-1f152c56526a8cfd6aab77d1;Sampled=0
x-amzn-remapped-date: Fri, 30 Dec 2022 19:16:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -NKgGBkJUbNdMOK5TlrSwxH_I-xI6kENYZyEAPatO-GJB72OciVqbQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 03:12:06 GMT
age: 58098
etag: "81b2d64110d0f5853a7190be93252dac4a428b7a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56ecc912-7c04-44d7-a43d-91f5105e563b.jpeg
34.120.237.76200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56ecc912-7c04-44d7-a43d-91f5105e563b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9c106ab8d6891b9865ef89c4cd6c6cb
784caa00a9877cb4cc6ad9037a9676b6d3b37fd2
84440ac9326499d9ce81d6fe8b58fa4f7430f60d5624a2acf5d66f906fe6f898
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56ecc912-7c04-44d7-a43d-91f5105e563b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4560
x-amzn-requestid: 26f5e408-f9d0-46b9-90a7-5cdf29d5a27c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eB__3ETBoAMFU3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b0ad32-2b1520235d6b63862bebc2d5;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: hs_04b29c6nhQo4WrQEpVJj8bkqTsfTAv54dajHxsMIjre-g2uesvw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 21:44:29 GMT
age: 77755
etag: "784caa00a9877cb4cc6ad9037a9676b6d3b37fd2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67b75ebf-7439-4cd2-bd89-000ec5f3aab8.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67b75ebf-7439-4cd2-bd89-000ec5f3aab8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c0dc083dd00810ff8d197c5ad7fb6f7
9e1ca8f2da2a53f7941b6869684b458a3c72a96f
6abddb307b4eab72eeafc413d0eb005773e5100120c4e074f7f3baadf12fa954
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67b75ebf-7439-4cd2-bd89-000ec5f3aab8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8537
x-amzn-requestid: 4e0f7a60-ab06-4494-984d-34fcacf63ba1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d_oI7GZfIAMFkGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afba38-6a6424991c4612dd6d3888fa;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 04:27:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HVSax8zutp54N838OPZjYA6MGIF5tCK3plkg9G7R4fg9jm71_Mdcvg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 23:39:54 GMT
age: 70830
etag: "9e1ca8f2da2a53f7941b6869684b458a3c72a96f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
clksite.com/adServe/banners?tid=444974_871470_1&tagid=2
52.116.53.147301 Moved Permanently 162 B URL HTTP/2 clksite.com/adServe/banners?tid=444974_871470_1&tagid=2
IP 52.116.53.147:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=444974_871470_1&tagid=2 HTTP/1.1
Host: clksite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 01 Jan 2023 19:20:24 GMT
content-type: text/html
content-length: 162
location: https://mybettermb.com/adServe/banners?tid=444974_871470_1&tagid=2
X-Firefox-Spdy: h2
clksite.com/adServe/banners?tid=444974_871470_2&pause=5
52.116.53.147301 Moved Permanently 162 B URL HTTP/2 clksite.com/adServe/banners?tid=444974_871470_2&pause=5
IP 52.116.53.147:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=444974_871470_2&pause=5 HTTP/1.1
Host: clksite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 01 Jan 2023 19:20:24 GMT
content-type: text/html
content-length: 162
location: https://mybettermb.com/adServe/banners?tid=444974_871470_2&pause=5
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash c7c36f2ce4a9b6bf4c03c617f4930803
1a8cf78051709d6fb432946450fb265deb5c0026
972417ddf2ca778c5f78cb2c2f5518fa89e585fc8bf59f4ba3beceb83e288ac3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 19:20:24 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 07:25:43 GMT
Expires: Thu, 05 Jan 2023 07:25:42 GMT
Etag: "1a8cf78051709d6fb432946450fb265deb5c0026"
Cache-Control: max-age=302117,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 782d9caefc1ab50b-OSL
p444974.mycdn.co/banners/script/ui_tag_143-0.js
151.139.128.10200 OK 66 kB URL HTTP/2 p444974.mycdn.co/banners/script/ui_tag_143-0.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (1632)
Hash 797eb25f42a10ba24ac7c66f236ccf1f
c0f82cca4ed826633c1b062fccd247dee8172de7
b77fbc2b0a7902a4de275889bf3efc9d28df62d513ea5ef54f0e95c68b30a7f3
GET /banners/script/ui_tag_143-0.js HTTP/1.1
Host: p444974.mycdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:24 GMT
content-encoding: gzip
content-length: 66518
content-type: application/javascript
last-modified: Sun, 05 Dec 2021 08:29:13 GMT
accept-ranges: bytes
server: nginx
etag: W/"61ac7859-48cdf"
cache-control: max-age=172800
x-sp-metadata: HS256.CIjWx50GEocBCiQ3ZTc4ZjRlMy04Nzg2LTQzMTgtYjgyYi00MTM5ZjRlN2ZhODMQ+Jidy5Xt8wIaBgj4ucedBiIMOTEuOTAuNDIuMTU0KIvdATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkNDdkNDFmMzMtZWQ3Ni00OTRmLWI0NGUtOTZjZjZmNDYxMTY0GNaHBCIYCAISFGNkczI1NS5zazEuaHdjZG4ubmV0.yk47KEPmzUP7QaXoAjffBRvDWcxJZKEUA+trfiOCr0Y=
x-hw: 1672600824.cds231.sk1.hn,1672600824.cds255.sk1.c
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7ffe634a0bc12fae35af5152b41f0572
1aaf8f0e7ead4ba1fe6521136457cf88474f1bf6
20a09ccde0f7928cbc7a071200c9f75de5828de578fa930aba3b0734b5bc4c98
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1358
Cache-Control: max-age=114677
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:24 GMT
Etag: "63b0f49f-117"
Expires: Tue, 03 Jan 2023 03:11:41 GMT
Last-Modified: Sun, 01 Jan 2023 02:49:03 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7ffe634a0bc12fae35af5152b41f0572
1aaf8f0e7ead4ba1fe6521136457cf88474f1bf6
20a09ccde0f7928cbc7a071200c9f75de5828de578fa930aba3b0734b5bc4c98
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1358
Cache-Control: max-age=114677
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:24 GMT
Etag: "63b0f49f-117"
Expires: Tue, 03 Jan 2023 03:11:41 GMT
Last-Modified: Sun, 01 Jan 2023 02:49:03 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
IP 142.250.74.131:0
Hash 37cbc10a2f3f4074dc2a79c8c1fbd2d8
4c7d2c84c8d32b22b8dd78363c977869482e728a
736e63befcd8873df5f08084856ad9a3472c1f4118107dc174c9b3cc863c4f08
POST /s/gts1d4int/5EXjxzFGjgM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:24 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p444974.mycdn.co/script/rhpop_80.2-1.js
151.139.128.10200 OK 66 kB URL HTTP/2 p444974.mycdn.co/script/rhpop_80.2-1.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 09e3c9fd728bd70195df4959e1939318
48a3bf31ac94a8953fbac35fe24429627a4dfdc6
1646395d33527884fa33bee0fe7217e079a4905c2c34332e4195a144e5d8e248
GET /script/rhpop_80.2-1.js HTTP/1.1
Host: p444974.mycdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:25 GMT
content-encoding: gzip
content-length: 65719
content-type: application/javascript
last-modified: Mon, 24 Jun 2019 11:33:16 GMT
accept-ranges: bytes
server: nginx
etag: W/"5d10b4fc-2b75b"
cache-control: max-age=172800
x-sp-metadata: HS256.CInWx50GEocBCiQ4MmVjMGQ0My0zYTA1LTRiNzQtYjMwMi0wMzlkOWJlZGExZTQQ+Jidy5Xt8wIaBgj5ucedBiIMOTEuOTAuNDIuMTU0KIvdATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkOTZjN2QzYmItOGFkYi00NGMwLThiZmEtNTRhNWMyOGUwZTIyGLeBBCIYCAISFGNkczI2MC5zazEuaHdjZG4ubmV0.fOaL9khhIe+VAcjF8ORThaewY678w/IPKvNBlhN7Mb4=
x-hw: 1672600824.cds231.sk1.hn,1672600825.cds260.sk1.c
X-Firefox-Spdy: h2
p444974.mycdn.co/uicomp/styles/dist/143-0/it-ui-comp-37.css
151.139.128.10200 OK 4.3 kB URL HTTP/2 p444974.mycdn.co/uicomp/styles/dist/143-0/it-ui-comp-37.css
IP 151.139.128.10:0
File type ASCII text, with very long lines (24042), with no line terminators
Hash 0b6679d2787e40f2af3e9df77e308861
9bfdd1105489174391bb6f8b766c2ae8b99efd70
b5f486fe7d1f52e773696468c9248008b54b1567563c5529a3dbdee01a72b6ee
GET /uicomp/styles/dist/143-0/it-ui-comp-37.css HTTP/1.1
Host: p444974.mycdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:25 GMT
content-encoding: gzip
content-length: 4285
content-type: text/css
last-modified: Sun, 05 Dec 2021 13:57:51 GMT
accept-ranges: bytes
server: nginx
etag: W/"61acc55f-5dea"
cache-control: max-age=315360000
x-sp-metadata: HS256.CInWx50GEocBCiRiNzQ1MjVhZS0xOGE0LTQyZjItOGY0MC1mNDE4NDJkMzQwOGUQ+Jidy5Xt8wIaBgj5ucedBiIMOTEuOTAuNDIuMTU0KIvdATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkZWVjZjA5ZDctNjI2Mi00ODQ1LTk1ZGYtN2NiZTBkZDQzZDA4GL0hIhgIAhIUY2RzMjM3LnNrMS5od2Nkbi5uZXQ=.RzZeHj5Knc08JbCmz7sCLEDcd9dG7yK3HsLQyCLMzVI=
x-hw: 1672600825.cds231.sk1.hn,1672600825.cds237.sk1.c
X-Firefox-Spdy: h2
your-app-name.firebaseio.com/.ws?v=5
34.120.160.131101 Switching Protocols 0 B URL HTTP/1.1 your-app-name.firebaseio.com/.ws?v=5
IP 34.120.160.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.ws?v=5 HTTP/1.1
Host: your-app-name.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.lilmaaloumiat.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rBsFubAOWXqjls18m+vGaw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sun, 01 Jan 2023 19:20:25 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: c/HNxcolInkIbw6R4XgO0FSuutQ=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 606fcf39141ef88b306e57d4e668a4a7
44beb9bacadce23c8840f7aaf7684e3ca51b8f24
70590f19e047aa25431a481210a260e9a57a103f6686954b0bdbd93bf9350863
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p444974.mycdn.co/banners/bounce/bounce-tag_80.2-1.js
151.139.128.10200 OK 19 kB URL HTTP/2 p444974.mycdn.co/banners/bounce/bounce-tag_80.2-1.js
IP 151.139.128.10:0
Hash 1f6e62bb37da4ff920dc330e659982d9
746c61564b850609d8ff559991795ddbc657d120
19dfb54ccf3c2a1a4c39d864527a971ecbce9df2eeff9473b23351a2cd5a7000
GET /banners/bounce/bounce-tag_80.2-1.js HTTP/1.1
Host: p444974.mycdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:25 GMT
etag: "1561375996"
content-encoding: gzip
content-length: 17978
content-type: application/javascript
last-modified: Mon, 24 Jun 2019 11:33:16 GMT
accept-ranges: bytes
server: nginx
cache-control: max-age=172800
x-sp-metadata: HS256.CInWx50GEocBCiQxZTVhOGUwYi05YTk4LTQ0MjktYmZlYy0yMjY3ODI5ZjU2MjcQ+Jidy5Xt8wIaBgj5ucedBiIMOTEuOTAuNDIuMTU0KIvdATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkNzlmM2E4YWUtODkyZC00YjFmLWE3ZGItYmQ4NmM3MjNmMTYzGLqMASIYCAISFGNkczI0Mi5zazEuaHdjZG4ubmV0.X5mznjRngBU09pR4fYopqJU0SLU2BjrVcSbzX4EZHEQ=
x-hw: 1672600825.cds231.sk1.hn,1672600825.cds242.sk1.c
X-Firefox-Spdy: h2
mybettermb.com/adServe/banners?tid=444974_871470_3&type=footer&size=37
52.116.53.155200 OK 33 kB URL HTTP/2 mybettermb.com/adServe/banners?tid=444974_871470_3&type=footer&size=37
IP 52.116.53.155:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8ca56a14b1835cfd3c673764653ee069
fd828fa9435a0366a4fc7577c75671f50e0078a8
3718dad57c9c0bb0163c1361c66cc48829e647d0ab55cf95a5ca956775a9e7ea
GET /adServe/banners?tid=444974_871470_3&type=footer&size=37 HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lilmaaloumiat.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 19:20:24 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
p444974.mycdn.co/ext/ib/31/dpp_37__blue_english.gif
151.139.128.10200 OK 8.2 kB URL HTTP/2 p444974.mycdn.co/ext/ib/31/dpp_37__blue_english.gif
IP 151.139.128.10:0
File type GIF image data, version 89a, 728 x 90\012- data
Hash 5ae675834b6d1caf7f015a7c7323bef9
e677110b1d5906a1fa383cdb76c5ec07d263e493
13bc046f7eabb2b5b5129c7e33282272e75d764ecc94f0d292d6323887d1ecd3
GET /ext/ib/31/dpp_37__blue_english.gif HTTP/1.1
Host: p444974.mycdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:25 GMT
content-length: 8245
content-type: image/gif
last-modified: Sun, 04 Feb 2018 10:15:03 GMT
accept-ranges: bytes
server: nginx
etag: "5a76dd27-2035"
cache-control: max-age=315360000
x-sp-metadata: HS256.CInWx50GEocBCiQxMDczZTk5Ni04M2NhLTQ1OGMtOTIwYi1jNmY1NzNkNDBhNmUQ+Jidy5Xt8wIaBgj5ucedBiIMOTEuOTAuNDIuMTU0KIvdATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkMDQzM2Q2MzEtOGNkYi00MTg1LTk1NDEtMDc5Zjk0MGUxMTZlGLVAIhgIAhIUY2RzMjI4LnNrMS5od2Nkbi5uZXQ=.MaVrQ/VxIuJNkdSFn5r76faGX3XOsk+Mg2Vz2XOSfn0=
x-hw: 1672600825.cds231.sk1.hn,1672600825.cds228.sk1.c
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cb1d3417a0b0d2434a037980ea83af16
532dc1e7e5c099f8e89871fa768af1b105f21c75
8a448869432d3c3030eb75af5c36429f6c72e101c1c9bd94d50362a8b40b558d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3456
Cache-Control: max-age=141587
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Etag: "63b1558c-1d7"
Expires: Tue, 03 Jan 2023 10:40:12 GMT
Last-Modified: Sun, 01 Jan 2023 09:42:36 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0a31efc3b6c6aefb8a263a103da6a755
fa82a0344a62721657f6ae2ad8a572ce5aeaa462
e9de5e33c9237585b9ca1de7fffcf025c0bba57a0dec177c9460b43b72ff055d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0a31efc3b6c6aefb8a263a103da6a755
fa82a0344a62721657f6ae2ad8a572ce5aeaa462
e9de5e33c9237585b9ca1de7fffcf025c0bba57a0dec177c9460b43b72ff055d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0a31efc3b6c6aefb8a263a103da6a755
fa82a0344a62721657f6ae2ad8a572ce5aeaa462
e9de5e33c9237585b9ca1de7fffcf025c0bba57a0dec177c9460b43b72ff055d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0a31efc3b6c6aefb8a263a103da6a755
fa82a0344a62721657f6ae2ad8a572ce5aeaa462
e9de5e33c9237585b9ca1de7fffcf025c0bba57a0dec177c9460b43b72ff055d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/ar_AR/sdk.js
31.13.72.12200 OK 1.7 kB URL HTTP/2 connect.facebook.net/ar_AR/sdk.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1957)
Hash 844e3759a2356619d718e2f37e759c97
74ecfbf04c79f374d0580c315b1351e54ed74eed
823474fdaebd425a8e51f3ceff2b3cd483581f9e81a4a65ae66772726fc599dc
GET /ar_AR/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lilmaaloumiat.com
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 47504319cc64b61d769c423b763f0c56
etag: "e05bbd41087767ded843be1d1ca4e730"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 01 Jan 2023 19:31:20 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: hE43WaI1ZhnXGOLzfnWclw==
x-fb-debug: TOE+icLVf6IWK7UVOPJTi2jLFez1UpgufKLNKvISC0hId37JTeP1y9keuW8KO52VB1aWVelX3dAsVsReVw/zHw==
priority: u=3,i
content-length: 1685
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:25 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e6333ff3c90b3022922e4cdfc6cbe822
fa6e2d7a6d713bacc8a4de5c5e072d83700ab40b
a333b2c8f66a6458ae6b2603229ff8530bf3e55f743526d4fdc27591f7f34432
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_GB/sdk.js
31.13.72.12200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_GB/sdk.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1957)
Hash b26362dc2586d5d42f57efe2d01ea5b6
09da6fd831a91b773ea92a3b23383e623d9d9bc9
0c8ed69c524f4c16b34f114f3be3c1781c01ecbbdf3176a127a11038063e6639
GET /en_GB/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 5d1e135afac62061631af6c446ad7a88
etag: "a8231fa6d072b7be1f4c907824db8f0f"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 01 Jan 2023 19:22:38 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: smNi3CWG1dQvV+/i0B6ltg==
x-fb-debug: uCBV3eXLPUgjhHFe9Zetn9VjVJtZYdLekrpGK9v/DuEO76LFgfTKof+KqHDiHV4w0l2rB3WIgU44pHUmMA2x8Q==
priority: u=3,i
content-length: 1688
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:25 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.14200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.14:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 01 Jan 2023 17:34:02 GMT
expires: Sun, 01 Jan 2023 19:34:02 GMT
cache-control: public, max-age=7200
age: 6383
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e6333ff3c90b3022922e4cdfc6cbe822
fa6e2d7a6d713bacc8a4de5c5e072d83700ab40b
a333b2c8f66a6458ae6b2603229ff8530bf3e55f743526d4fdc27591f7f34432
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e6333ff3c90b3022922e4cdfc6cbe822
fa6e2d7a6d713bacc8a4de5c5e072d83700ab40b
a333b2c8f66a6458ae6b2603229ff8530bf3e55f743526d4fdc27591f7f34432
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e6333ff3c90b3022922e4cdfc6cbe822
fa6e2d7a6d713bacc8a4de5c5e072d83700ab40b
a333b2c8f66a6458ae6b2603229ff8530bf3e55f743526d4fdc27591f7f34432
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cb1d3417a0b0d2434a037980ea83af16
532dc1e7e5c099f8e89871fa768af1b105f21c75
8a448869432d3c3030eb75af5c36429f6c72e101c1c9bd94d50362a8b40b558d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3456
Cache-Control: max-age=141587
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Etag: "63b1558c-1d7"
Expires: Tue, 03 Jan 2023 10:40:12 GMT
Last-Modified: Sun, 01 Jan 2023 09:42:36 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3049235560413083&host=ca-host-pub-1556223355139109
142.250.74.162200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3049235560413083&host=ca-host-pub-1556223355139109
IP 142.250.74.162:0
File type ASCII text, with very long lines (4885)
Hash 143a7a9053aab2e2c9cffc6f7d4840bf
c60a9270c4bc75118ad6a779e686f665c0c81920
9e39e4d647c4f8bc0717236c4770b1f2a21f156ee1fb4ea86a28f42e5ae85aaf
GET /pagead/js/adsbygoogle.js?client=ca-pub-3049235560413083&host=ca-host-pub-1556223355139109 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lilmaaloumiat.com
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 01 Jan 2023 19:20:25 GMT
expires: Sun, 01 Jan 2023 19:20:25 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 13105939551991748296
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49452
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3049235560413083
142.250.74.162200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3049235560413083
IP 142.250.74.162:0
File type ASCII text, with very long lines (4885)
Hash 3ece4db7db7f95b36dfad2e1c9faa1f3
70c6177ba38b0a4b892a17c8e2fdc604657749c0
f296ae6b6e967457b55f1b0a6dafb02db97e54105f4be170007d8ccb99b06895
GET /pagead/js/adsbygoogle.js?client=ca-pub-3049235560413083 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lilmaaloumiat.com
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 01 Jan 2023 19:20:25 GMT
expires: Sun, 01 Jan 2023 19:20:25 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 209999979560903212
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49471
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/ar_AR/sdk.js?hash=8b830ad06f3063ff1ee4b438905ed30e
31.13.72.12200 OK 89 kB URL HTTP/2 connect.facebook.net/ar_AR/sdk.js?hash=8b830ad06f3063ff1ee4b438905ed30e
IP 31.13.72.12:0
File type ASCII text, with very long lines (18538)
Hash e8a1df4e4c2d24006d86381feef06d1e
bf64429576c67fe3088ccd194a07522cd0a34a25
e4da7559bf7efe50e517eedc4a7bf83434f76b81ca37381052b9edf9a3fccf5c
GET /ar_AR/sdk.js?hash=8b830ad06f3063ff1ee4b438905ed30e HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lilmaaloumiat.com
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: a7b3434ba9fb1c7e989e7d68cd217d44
etag: "5542e6df7974f818f42ce1f95af7e8f1"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 01 Jan 2024 17:43:31 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 6KHfTkwtJABthjgf7vBtHg==
x-fb-debug: QrIQOs7b1kgaH7fQT6U6AKHSOk8tG/BCaIB+xCuD5IqZlXe9UP+rxxDjPk5AYgoCVPC2iGs1rQWAiNqkSSr1vg==
content-length: 88737
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:25 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0a31efc3b6c6aefb8a263a103da6a755
fa82a0344a62721657f6ae2ad8a572ce5aeaa462
e9de5e33c9237585b9ca1de7fffcf025c0bba57a0dec177c9460b43b72ff055d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c44607385e54cbb67a77d8fc0d7e6d90
03614049bb70458487d802a1a7487b1b1653eef0
26072768b9b29e2a134ba7183b2ddf53fb78f2c26d4806171daefdb71aa06553
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
themes.googleusercontent.com/image?id=0BwVBOzw_-hbMMDZjM2Q4YjctMTY2OC00ZGU2LWJjZDYtODVjOGRiOThlMGQ3
172.217.21.161200 OK 43 kB URL HTTP/2 themes.googleusercontent.com/image?id=0BwVBOzw_-hbMMDZjM2Q4YjctMTY2OC00ZGU2LWJjZDYtODVjOGRiOThlMGQ3
IP 172.217.21.161:0
File type PNG image data, 1515 x 971, 8-bit/color RGBA, non-interlaced\012- data
Hash dc75080f681a339e31004ee37d2d4647
47590acd65bb947c6eb5bea020c120c45d6fbb94
dc00075a2c0bfbea04d59f8fabbd0858e4547ddc8ed8104233f3d19eb67bb8f1
GET /image?id=0BwVBOzw_-hbMMDZjM2Q4YjctMTY2OC00ZGU2LWJjZDYtODVjOGRiOThlMGQ3 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Mon, 02 Jan 2023 19:20:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 01 Jan 2023 19:20:25 GMT
server: fife
content-length: 42863
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20221207/r20190131/zrt_lookup.html
142.250.74.130200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20221207/r20190131/zrt_lookup.html
IP 142.250.74.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20221207/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Sun, 01 Jan 2023 16:37:12 GMT
expires: Sun, 15 Jan 2023 16:37:12 GMT
cache-control: public, max-age=1209600
age: 9793
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.lilmaaloumiat.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.ydLROSGdlBE.O%2Fd%3D1%2Frs%3DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA%2Fm%3D__features__
142.250.74.109200 OK 831 B URL HTTP/2 accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.lilmaaloumiat.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.ydLROSGdlBE.O%2Fd%3D1%2Frs%3DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA%2Fm%3D__features__
IP 142.250.74.109:0
Hash 00d979d98f5764db3258e3347cd6aab5
297724d2aa705c89d6fe5d62b600411742dd1233
b3a78a854596452823ca9a3e39e9b80616265b2a4b23d398500325c5390dd5f6
GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.lilmaaloumiat.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.ydLROSGdlBE.O%2Fd%3D1%2Frs%3DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 01 Jan 2023 19:20:25 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /o/cspreport, script-src 'nonce-v7h0ErRwQ3GK3CxKwsygzA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yt3.ggpht.com/WHn1IpEjYg2G7K9Fbe0lE_qdfHQWCrESJoLbhJZgh4MT2xU-uGOBZCGZsZWxdNzubeJSYjiA=s48-c-k-c0x00ffffff-no-rj
216.58.207.225200 OK 2.9 kB URL HTTP/2 yt3.ggpht.com/WHn1IpEjYg2G7K9Fbe0lE_qdfHQWCrESJoLbhJZgh4MT2xU-uGOBZCGZsZWxdNzubeJSYjiA=s48-c-k-c0x00ffffff-no-rj
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 48x48, components 3\012- data
Hash c295c64b70e5877c966025880560dc08
06b37187be86a3e27f68aefe22cb2762bba6af8b
e8afb55788f1bf4875c7edffc15463b58eeefb7d087b494c9a71125aeae530f8
GET /WHn1IpEjYg2G7K9Fbe0lE_qdfHQWCrESJoLbhJZgh4MT2xU-uGOBZCGZsZWxdNzubeJSYjiA=s48-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Mon, 02 Jan 2023 19:20:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="channels4_profile.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 01 Jan 2023 19:20:25 GMT
server: fife
content-length: 2862
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash b8166fe0679d6ccf83bc7f27cb76f6a5
7c76f9e3b7cd828fd0bd9ddb3603e0f1c8fc6f23
d0799689c53c389718f8818863c88447440e69b8837264dbe7a24e62a746e1e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p444974.mycdn.co/uicomp/styles/dist/143-0/images/footer.png
151.139.128.10200 OK 2.8 kB URL HTTP/2 p444974.mycdn.co/uicomp/styles/dist/143-0/images/footer.png
IP 151.139.128.10:0
File type PNG image data, 50 x 250, 8-bit colormap, non-interlaced\012- data
Hash 650a5d958e5c2c1451fe193ea66fad50
4ff6d300272159a4db82cfe991197449727aff19
c6a88a35a6f0c501b8ae68c05e861ee4ea145dc19a211af0fb3b16e606c58747
GET /uicomp/styles/dist/143-0/images/footer.png HTTP/1.1
Host: p444974.mycdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://p444974.mycdn.co/uicomp/styles/dist/143-0/it-ui-comp-37.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:25 GMT
content-length: 2823
content-type: image/png
last-modified: Sun, 05 Dec 2021 08:51:37 GMT
accept-ranges: bytes
server: nginx
etag: "61ac7d99-b07"
cache-control: max-age=315360000
x-sp-metadata: HS256.CInWx50GEocBCiQ4ZmQ1Y2UyYi1mZmEzLTRiMmItYjlkZS1hODJmNDhhNzQwZTEQ+Jidy5Xt8wIaBgj5ucedBiIMOTEuOTAuNDIuMTU0KIvdATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkZjk5ZThhMmEtNGVhZS00ZGI1LTlhODItZWI0NzlmOWU1MjgxGIcWIhgIAhIUY2RzMjI3LnNrMS5od2Nkbi5uZXQ=.d/3XHMt5vvGevMo0ig+EHiFqsrTfR6CM41zTktsopLo=
x-hw: 1672600825.cds231.sk1.hn,1672600825.cds227.sk1.c
X-Firefox-Spdy: h2
ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
142.250.74.163200 OK 4.3 kB URL HTTP/2 ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (2267)
Hash 3f7502705229ccec9d066c5cd75e6c31
ede1663155afaa5a5213d075e6295c6d839b05c3
2be5113d3022d1819a19f327235d287a2538a03741fc08ccd9d55cc1d78b6282
GET /accounts/o/1832714284-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Dec 2022 20:43:51 GMT
expires: Fri, 29 Dec 2023 20:43:51 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 20 Dec 2022 19:08:36 GMT
content-type: text/javascript
age: 254194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 47ca3cedb51ab9e282f8654033435e27
69b5555f030f2391bb54a9bbb346df1e26a002fe
1faba6521dffb13110c25219bb4ff94ec9f00bff3079a03f1296d91cb622f7c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maxcdn.bootstrapcdn.com/font-awesome/4.6.1/css/font-awesome.min.css
104.18.11.207200 OK 6.5 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.6.1/css/font-awesome.min.css
IP 104.18.11.207:0
File type ASCII text, with very long lines (28596)
Hash 29083e685688582212856ec558650519
157a24dc59853457e8833dda5a78e5accb4258c2
f976dcce8ae6ae88ed6a8c436600cfcdda293294109bd5e879bcb0108ebae027
GET /font-awesome/4.6.1/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 01 Jan 2023 19:20:24 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-03-10 20:26:25
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 9f906bfe8a0a96b9156c7a4ed4664168
cdn-cache: HIT
cf-cache-status: HIT
age: 21911613
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 782d9cb3a8081c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.lilmaaloumiat.com/favicon.ico
142.250.74.147200 OK 412 B URL HTTP/2 www.lilmaaloumiat.com/favicon.ico
IP 142.250.74.147:0
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: www.lilmaaloumiat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file
Cookie: rhid_c=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Sun, 01 Jan 2023 19:20:25 GMT
date: Sun, 01 Jan 2023 19:20:25 GMT
cache-control: private, max-age=86400
last-modified: Mon, 28 Nov 2022 10:16:38 GMT
etag: W/"159cbb76da21771b81f6d16f9e0f455a916bbe2126e8dd32d678f6c283aa7226"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8a028d35443d3f18a9b8780c90508480
0e44636955b2a89cec3df965a40cbbc000ac6e99
083fae584916154c4d25f9d22be5bec92283298e20918c0ea01c264bc40f25dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 11c6e9d0b83935b52c5dc565e8537ea1
288ca6d758af5aaa8dfbd27e414ec79c04361dab
ce5d50df2403c50c4804f62bb43577d4ae019fe0949f9241d76f303c0c6b8225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=www.lilmaaloumiat.com
142.250.74.34200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.lilmaaloumiat.com
IP 142.250.74.34:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.lilmaaloumiat.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 01 Jan 2023 19:20:26 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=www.lilmaaloumiat.com&callback=_gfp_s_&client=ca-pub-3049235560413083&gpid_exp=1
216.58.207.194200 OK 255 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www.lilmaaloumiat.com&callback=_gfp_s_&client=ca-pub-3049235560413083&gpid_exp=1
IP 216.58.207.194:0
File type ASCII text, with very long lines (401), with no line terminators
Hash 254a10f3d554af852e588927be06dc58
d49170f865873a2cbdd00ef80e60b4a02fb04d3d
2f8311146be619b25f1bb58a51de66bbec0b8ca4bc5e84ffa9c824b1d95575fc
GET /gampad/cookie.js?domain=www.lilmaaloumiat.com&callback=_gfp_s_&client=ca-pub-3049235560413083&gpid_exp=1 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 01 Jan 2023 19:20:26 GMT
server: cafe
cache-control: private
content-length: 255
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=www.lilmaaloumiat.com
142.250.74.2200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.lilmaaloumiat.com
IP 142.250.74.2:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.lilmaaloumiat.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 01 Jan 2023 19:20:26 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 8a028d35443d3f18a9b8780c90508480
0e44636955b2a89cec3df965a40cbbc000ac6e99
083fae584916154c4d25f9d22be5bec92283298e20918c0ea01c264bc40f25dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 11c6e9d0b83935b52c5dc565e8537ea1
288ca6d758af5aaa8dfbd27e414ec79c04361dab
ce5d50df2403c50c4804f62bb43577d4ae019fe0949f9241d76f303c0c6b8225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blogger.googleusercontent.com/img/a/AVvXsEiRp1ZweESLkLg1W4YJu9cvl1Ct5PNG4hCAq8CA95zF4OASX4eWutv3KxO45-pGncIsCfY-yfNtGiKpoQqoLq5RY5WaS0-wkFiXuZTrrccbUi8cCi7H3YBtaIoxgFVDnKZ19Nwluxof0EInhc5VbmxW3F2Y-0x1lRQxBWlN-qBmkl4CX3--W00MzV2Kew=w600-h600-p-k-no-nu
172.217.21.161200 OK 55 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiRp1ZweESLkLg1W4YJu9cvl1Ct5PNG4hCAq8CA95zF4OASX4eWutv3KxO45-pGncIsCfY-yfNtGiKpoQqoLq5RY5WaS0-wkFiXuZTrrccbUi8cCi7H3YBtaIoxgFVDnKZ19Nwluxof0EInhc5VbmxW3F2Y-0x1lRQxBWlN-qBmkl4CX3--W00MzV2Kew=w600-h600-p-k-no-nu
IP 172.217.21.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 480x360, components 3\012- data
Hash aba47cd2eb063b3d103cd4c4371650b1
a8a8f6718b95286301b5101a482faa9c33f0abd5
0ddee9360afcf2e3e6692f72b495ce0083e75aa922ee2b5dd51339f18acf2c7f
GET /img/a/AVvXsEiRp1ZweESLkLg1W4YJu9cvl1Ct5PNG4hCAq8CA95zF4OASX4eWutv3KxO45-pGncIsCfY-yfNtGiKpoQqoLq5RY5WaS0-wkFiXuZTrrccbUi8cCi7H3YBtaIoxgFVDnKZ19Nwluxof0EInhc5VbmxW3F2Y-0x1lRQxBWlN-qBmkl4CX3--W00MzV2Kew=w600-h600-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vcf"
expires: Mon, 02 Jan 2023 19:20:26 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="hqdefault.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 01 Jan 2023 19:20:26 GMT
server: fife
content-length: 54842
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhHd6PNI5IlQy1ZLRj-GlToSPt7NOoAR0Tm366KccEtD-YdXzL0uSV81JH4iLY3MFFsULUcK1YFO_TgqHdtYDxZlgMBAJRLV1Dfyj1nyHkF_lF5xQ2m4i8quW5BOVah0fie9-33fKEH_85xK1sMnf0vN3UEqnxA3HfZ3Al4gH2fGZApgqfW09SqbpqHGA=w600-h600-p-k-no-nu
172.217.21.161200 OK 88 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhHd6PNI5IlQy1ZLRj-GlToSPt7NOoAR0Tm366KccEtD-YdXzL0uSV81JH4iLY3MFFsULUcK1YFO_TgqHdtYDxZlgMBAJRLV1Dfyj1nyHkF_lF5xQ2m4i8quW5BOVah0fie9-33fKEH_85xK1sMnf0vN3UEqnxA3HfZ3Al4gH2fGZApgqfW09SqbpqHGA=w600-h600-p-k-no-nu
IP 172.217.21.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 600x600, components 3\012- data
Hash 74dd66c34b18328354817c0e2e446759
71c9e366ddb523cba15ea2e424bfe408a20fcbd1
2c318a326f664583c1698e89c46b25ef0f93251ba59a16b91b29f028d018cba0
GET /img/a/AVvXsEhHd6PNI5IlQy1ZLRj-GlToSPt7NOoAR0Tm366KccEtD-YdXzL0uSV81JH4iLY3MFFsULUcK1YFO_TgqHdtYDxZlgMBAJRLV1Dfyj1nyHkF_lF5xQ2m4i8quW5BOVah0fie9-33fKEH_85xK1sMnf0vN3UEqnxA3HfZ3Al4gH2fGZApgqfW09SqbpqHGA=w600-h600-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vc3"
expires: Mon, 02 Jan 2023 19:20:26 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="maxresdefault.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 01 Jan 2023 19:20:26 GMT
server: fife
content-length: 88200
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhkPVDWtE5UjdnKNXCAsz4CKOLM6PYpsg-0Na9hDFybK4Nd7ez_DDrB-TkWW0irTDyPVycvJZJxTQc2f0P9cFaz3XVftrurZlobLJgibbyRqnh3Fi4pw5Zzc6LCm4m-rKMc3IM754Lkq6h3ggWgQFuL4QPnDVuHKvYZPJ97K1Lbqdu-Ct8N8cpmHGxFEw=w600-h600-p-k-no-nu
172.217.21.161200 OK 113 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhkPVDWtE5UjdnKNXCAsz4CKOLM6PYpsg-0Na9hDFybK4Nd7ez_DDrB-TkWW0irTDyPVycvJZJxTQc2f0P9cFaz3XVftrurZlobLJgibbyRqnh3Fi4pw5Zzc6LCm4m-rKMc3IM754Lkq6h3ggWgQFuL4QPnDVuHKvYZPJ97K1Lbqdu-Ct8N8cpmHGxFEw=w600-h600-p-k-no-nu
IP 172.217.21.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 600x600, components 3\012- data
Size 113 kB (113315 bytes)
Hash d9f482d1e5536972c3afd6d73a3e2ed2
ed57fdced327dd1a7cfe0a0c5d951dbf2f83df2c
60d67cd82ef28f5b5e8572335314e188dd76ddfed3030f0f28d8f6d1abed1cfd
GET /img/a/AVvXsEhkPVDWtE5UjdnKNXCAsz4CKOLM6PYpsg-0Na9hDFybK4Nd7ez_DDrB-TkWW0irTDyPVycvJZJxTQc2f0P9cFaz3XVftrurZlobLJgibbyRqnh3Fi4pw5Zzc6LCm4m-rKMc3IM754Lkq6h3ggWgQFuL4QPnDVuHKvYZPJ97K1Lbqdu-Ct8N8cpmHGxFEw=w600-h600-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vc5"
expires: Mon, 02 Jan 2023 19:20:26 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="maxresdefault (1).jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 01 Jan 2023 19:20:26 GMT
server: fife
content-length: 113315
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20221207&st=env
142.250.74.162200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20221207&st=env
IP 142.250.74.162:0
File type JSON data\012- , ASCII text, with very long lines (14582), with no line terminators
Hash eb1bdd244c3a1358a09d394cebdbb9e8
5dcf6b3c871a917348c27a90983517867620a000
3813bff08fc995493d8be80dbad4d11e4d67af03f15e96a181ecbd5c2ee94723
GET /getconfig/sodar?sv=200&tid=gda&tv=r20221207&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lilmaaloumiat.com
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Sun, 01 Jan 2023 19:20:26 GMT
server: cafe
content-length: 11006
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 1a6063deeaaba41654f42035a52f8950
5fe695fc995d1a24d47f99699b1bed7b1e66ec79
5f1e6e51fbb1cdd51c40f84931d505b9084583b39c8bde6ea7b65bf18f860a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
216.58.211.1200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP 216.58.211.1:0
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Sun, 01 Jan 2023 19:20:26 GMT
expires: Sun, 01 Jan 2023 19:20:26 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
216.58.211.1200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP 216.58.211.1:0
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 01 Jan 2023 17:40:54 GMT
expires: Mon, 01 Jan 2024 17:40:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 5972
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y9/l/1,cross/SaZAU1gItMB.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 836 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y9/l/1,cross/SaZAU1gItMB.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (725)
Hash 21d4ae07d1d2ac0ff86e1a1b1de391b7
efac1ce7bea594d588ffa87eae85bfc9534d72a6
ab31b7bca7950df67ac5e8c2f4b4e9816798bed5746172d1bbe18f2c9340af82
GET /rsrc.php/v3/y9/l/1,cross/SaZAU1gItMB.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 30 Dec 2023 21:34:23 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: IdSuB9HSrA/4bhobHeORtw==
x-fb-debug: 9Y3Fjpywfo7YPTrNqi8YPkm1Yq1Ct4facA7GcnhLJt+uhuAkguJSnuVlH0Q8BHDzlAyF7nMjyfNd8qNtarHt5g==
content-length: 836
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/Fs66-ooFjHN.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 85 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/Fs66-ooFjHN.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (18622)
Hash 33aa1a2f8dcf2e0f1313b420cbdd6783
1b0da05e75a3fc9c2b529b01b529dd4bab20a401
c5f074386e4d39c9850c012cd539aa1f5a56b109344cec9863d4edc331e34366
GET /rsrc.php/v3/y6/r/Fs66-ooFjHN.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 27 Dec 2023 21:15:27 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: M6oaL43PLg8TE7Qgy91ngw==
x-fb-debug: ZLXzuVk9Bkenc3R4zzjLYkO8Wu6wrMThAFJlhqDcqY7pTO5ObMppik+zvpibcS1KxdoGI7jvbNUJwyu+H8W8ug==
content-length: 85051
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e8326de7cdbef497ef24a5fc88d2cc22
4fa91e91effcae3dc71545222ab483f65f5402ff
d4cf5c4c5b2adb5bbbd7e4cb620b2e39d0257b798f12823c10d8bebfb1f1cd45
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 19:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (1984)
Hash 9286a42c6635bf94761964f1b129c0de
21d966c8e5833bec35fd039f80e6f7e47185743a
da4067af50abaeaa27b4dfc7f3accf1346f13d9fd9d3821222bc820378c7ed00
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 29 Dec 2023 13:47:37 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: koakLGY1v5R2GWTxsSnA3g==
x-fb-debug: X1DwjT/W+lXQIOXoZgxGO60rtitg/Bqekw1pZhtvpwaqzKiIINhdHHNijSzGP+6v/Kb9O3z98Y3UqTe9kVfe6g==
priority: u=3,i
content-length: 1615
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5542)
Hash 1ad15afc034f310427c81b0759603a2b
e5efd1d029dccf5fa8128c84aadb6544a4ab60e0
fedf63f655f9eef24c517c3d6762fb07b142213ba623d4a0b06614fb5d9754bd
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 27 Dec 2023 02:03:10 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: GtFa/ANPMQQnyBsHWWA6Kw==
x-fb-debug: 03omrPytNZHYWoBH3usGlQt1W0e7CzAK88io1Zy2v2+GGixauzQRzXT1NCBjf3iogfm8ny9ZNmALg2YKoUNIIg==
priority: u=3,i
content-length: 12334
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.lilmaaloumiat.com/feeds/posts/summary?max-results=10&alt=json-in-script&start-index=1&callback=jQuery1110036197979224821053_1672600815740&_=1672600815742
142.250.74.147200 OK 6.5 kB URL HTTP/2 www.lilmaaloumiat.com/feeds/posts/summary?max-results=10&alt=json-in-script&start-index=1&callback=jQuery1110036197979224821053_1672600815740&_=1672600815742
IP 142.250.74.147:0
File type Unicode text, UTF-8 text, with very long lines (22341)
Hash d1d595f9f188c7ea838329b6c71179ae
a839788c69cf3f3953866da82a8092349f55243a
41183c1bba24219da929a809bf31b00a22689e2d4be7bb8dca922839d1e70c97
GET /feeds/posts/summary?max-results=10&alt=json-in-script&start-index=1&callback=jQuery1110036197979224821053_1672600815740&_=1672600815742 HTTP/1.1
Host: www.lilmaaloumiat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/p/blog-page.html??&&url=_www.mediafire.com/file/d3lx03ndmio0txr/%D8%B9%D9%84%D9%85+%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA.rar/file
Cookie: rhid_c=0; _ga=GA1.2.2095573342.1672600818; _gid=GA1.2.1744027433.1672600818; _gat_gtag_UA_150293817_1=1; __gads=ID=7425562990d91ebc-22c99076e4da00a0:T=1672600826:RT=1672600826:S=ALNI_Masxk_FQQx7FO0CG6CSVtJ2G43Iuw; __gpi=UID=00000b9be8d7898e:T=1672600826:RT=1672600826:S=ALNI_MZO81FUhi0BzCmrs2VZE-M_iDDitQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"b3e344a76b7311871d36198397ad13332005a7053b3fbc9eed477dc726e6f84e"
date: Sun, 01 Jan 2023 19:20:26 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 01 Jan 2023 19:20:27 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Mon, 28 Nov 2022 10:16:38 GMT
content-encoding: gzip
content-length: 6491
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 293 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (327)
Hash 2f913d812811ef7e6fca30334c5972e2
d17caaa167443dc08696c672380f237e0db3fb02
ee8918a2f5d163099104b70f79065abc8fd309e69add57170546f2706956eef8
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 29 Dec 2023 17:31:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: L5E9gSgR735vyjAzTFly4g==
x-fb-debug: LFzj3N7JgCbilCC70EZ2DFc4kSBeJDY5gohLixqt89FJ3uUNf0Py9987R0js/xduiQlz0XzKFsGMNs3jw9qwEQ==
content-length: 293
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yZ/r/0cKQbVrk19s.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 6.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yZ/r/0cKQbVrk19s.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (10595)
Hash abc01c5cb9e1f65a8184bd3fa28ae5df
9483687c254802204e18d50976e413162fa21481
482ebf05a0d3aaa255cf9fe29ae7016d2f0efcf0a88d5e31da31c9ad2f14a9e8
GET /rsrc.php/v3/yZ/r/0cKQbVrk19s.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 30 Dec 2023 16:25:01 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: q8AcXLnh9lqBhL0/oorl3w==
x-fb-debug: ftEqI4W2ysAuHpvp0ppmFLwTmADGKYXaNQvFhds4lo2nqyxYJckLg5D3/T9bPChn+VhPTJb942kTp3tP4eUtXg==
priority: u=3,i
content-length: 6166
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yf/r/uftvpBOwAM5.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yf/r/uftvpBOwAM5.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5828)
Hash eef8af5be8755e2c304dfeca97c6c8b9
c712189796acf6eb6fcceaffe551b25efd475a14
c3e1914f40e29bafe042cbd8f9f2bd58a257523c0ef86764eb91a18ed2980c42
GET /rsrc.php/v3/yf/r/uftvpBOwAM5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 26 Dec 2023 19:18:08 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 7vivW+h1XiwwTf7Kl8bIuQ==
x-fb-debug: 8pfSxC5U6NAiH4+6ENlZdHXUB1qwWfSTk3YcRxvq1ma1hGl3qvVLIpt9AKSVEm+6Cle2RuwgeLCPOsEtthJ++g==
content-length: 5272
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yL/r/PlsnJC666Fj.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 6.8 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yL/r/PlsnJC666Fj.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type C source, ASCII text, with very long lines (7780)
Hash 855b9a9b80d4c186253eba4e0d14b18d
9af34af716b9116d91c7e2012f35cc756afdfbd3
39f68beab2325364f3a27998ec9692c7275ae0fb6d979fc3730bf881b65975ce
GET /rsrc.php/v3/yL/r/PlsnJC666Fj.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 30 Dec 2023 10:01:56 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: hVuam4DUwYYlPrpODRSxjQ==
x-fb-debug: kb9Gt4rhA3p3u5PYUqH9ngWwDSudkef5Oa14blr/C7Qt5S2Ksc0HT0laE6y7BVT/RVd8+jzzpA8pH3epwPGPsQ==
priority: u=3,i
content-length: 6772
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3ii6o4/yY/l/ar_AR/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 7.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3ii6o4/yY/l/ar_AR/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (2905)
Hash 258cf61d69407160b8dcad714b7ebc8b
cc60e0543d6d15a9ece2f6914f8e035a7fcd450f
3f5eaa0ae70a573a97949ad10159f7fffd6c79c55b52f32dead16ec80570d6ae
GET /rsrc.php/v3ii6o4/yY/l/ar_AR/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 29 Dec 2023 02:42:58 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: JYz2HWlAcWC43K1xS368iw==
x-fb-debug: aFwfB7nifVkO4Mn014h773Xda8/0fuUTvNjY2BKTfqSy8KHByN3CUrWVcBAX/fW0fo0Nip7shufzJAXlo5CuXA==
content-length: 7133
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iCHM4/yL/l/ar_AR/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 24 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iCHM4/yL/l/ar_AR/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (43337)
Hash 37e007f64dd3d390e87caa6a457971d7
b5cd7cd6bb3914409730abe19b44d6ecb24423db
f36bb4254ae2901e9252a8fcc72ca24406c27941d40c4d7db0b131d45c460036
GET /rsrc.php/v3iCHM4/yL/l/ar_AR/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 27 Dec 2023 19:55:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: N+AH9k3T05DofKpqRXlx1w==
x-fb-debug: KSabwT2EXLYuJ/1xYSlDqTOmWgfTF/OfhvJaGDwNBqvP7Qvkv07GKmtTgqabPklomVgaKRlRSGSPQ+ywQLacNg==
content-length: 23670
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4057)
Hash 7cb89797cea2a84b948dfae53d0c90d4
312bdda4ae1efe3ab71fb0aec473ddc725627f5b
9093dc3e084b6a216b34c7a603eae5a93f793dc5b0a606ccb0da051d5aa12cd4
GET /rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 28 Dec 2023 23:55:56 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: fLiXl86iqEuUjfrlPQyQ1A==
x-fb-debug: fjafl28JJ/j7wLeRsIj57zeC6mnZEhT31MUnZmM/ihfkH3NndTQg8z53wGfoSQUikX9zxYgduTSPQaZfIY/HxA==
priority: u=3,i
content-length: 7199
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/aframe
142.250.74.132200 OK 512 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP 142.250.74.132:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 6a263cf024b1c8907112538bbe46bc31
2f74e94be30730c6b3e852d5218a65ce70516e20
1e146bf8de2a787bd9a368f7286f22b224697eb551a4928290fa121012f49491
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sun, 01 Jan 2023 19:20:26 GMT
date: Sun, 01 Jan 2023 19:20:26 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-edY1dR1AOEoB-0wa2DajrQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 512
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yM/l/1,cross/6FI0k4lDYh5.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 5.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yM/l/1,cross/6FI0k4lDYh5.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4434)
Hash 50ffa3fec3928c2b3cbd912fcc7817fb
4a14be39118262e7468a63e8d6298e6adbbb9123
6cf1969a8d614cbe07fab28567bd239c8ea6fc27b8e192185a270b08cd1a0af7
GET /rsrc.php/v3/yM/l/1,cross/6FI0k4lDYh5.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 01 Jan 2024 19:20:26 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: UP+j/sOSjCs8vZEvzHgX+w==
x-fb-debug: VHQ5/5hNx5OavLiBLfoPurLmJDh/9InYiP2Yj8kVMnuvyxoWnfFWdFE4/KtVNBm0FEKPSMYNcPXIij/ICCDEbQ==
content-length: 5407
priority: u=3,i
x-fb-trip-id: 1904183273
date: Sun, 01 Jan 2023 19:20:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.162200 OK 3.6 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP 142.250.74.162:0
File type ASCII text, with very long lines (2557)
Hash 8fcc1a166c742accd96d4565cf0fa6f8
ee1ebb81eb0638220f40dbae09e967f17b24b995
1f5133968c24fc88f665d1b9a5e0af41e39b3997be897fbcd492ae8e4cea2fca
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 01 Jan 2023 19:20:25 GMT
expires: Sun, 01 Jan 2023 19:20:25 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 320454245829847649
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49490
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
scontent-lhr8-1.xx.fbcdn.net/v/t15.5256-10/275659945_946709116036020_3394920982549551414_n.jpg?stp=dst-jpg_s350x350&_nc_cat=110&ccb=1-7&_nc_sid=08861d&_nc_ohc=9_FjG2Yj9MQAX9qJDG7&_nc_ht=scontent-lhr8-1.xx&oh=00_AfA_Paq3GyVdu_SlI4BtznHDdFdoiyOmNdyqtmohZAzTUw&oe=63B70BE9
157.240.221.16200 OK 21 kB URL HTTP/2 scontent-lhr8-1.xx.fbcdn.net/v/t15.5256-10/275659945_946709116036020_3394920982549551414_n.jpg?stp=dst-jpg_s350x350&_nc_cat=110&ccb=1-7&_nc_sid=08861d&_nc_ohc=9_FjG2Yj9MQAX9qJDG7&_nc_ht=scontent-lhr8-1.xx&oh=00_AfA_Paq3GyVdu_SlI4BtznHDdFdoiyOmNdyqtmohZAzTUw&oe=63B70BE9
IP 157.240.221.16:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x197, components 3\012- data
Hash 2ac5953c3fe8be05a6ab48984aaafc62
ca0a5451c99894ea3ab1a9e23765018b09f8a56a
cd6f7ade1fdad65990b0e8def8e6becc004824092739eeee2b41e04d81532c33
GET /v/t15.5256-10/275659945_946709116036020_3394920982549551414_n.jpg?stp=dst-jpg_s350x350&_nc_cat=110&ccb=1-7&_nc_sid=08861d&_nc_ohc=9_FjG2Yj9MQAX9qJDG7&_nc_ht=scontent-lhr8-1.xx&oh=00_AfA_Paq3GyVdu_SlI4BtznHDdFdoiyOmNdyqtmohZAzTUw&oe=63B70BE9 HTTP/1.1
Host: scontent-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Sat, 19 Mar 2022 22:23:15 GMT
x-haystack-needlechecksum: 897184803
x-needle-checksum: 1449453127
content-type: image/jpeg
content-digest: adler32=3396349391
content-length: 21168
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1679558926
date: Sun, 01 Jan 2023 19:20:29 GMT
x-fb-edge-debug: CrHDfx5C2dkGE8m1-GDDvnxg9uML3iVHxGip-JD3Q_v3IWMNroBv_CMdMuU3ZABa3oWpjP6EBQXjRdWGAsKXdBRdCN5Xzmn91hvZENyDDCE
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-lhr8-1.xx.fbcdn.net/v/t39.30808-1/271762252_461861635471218_6485517947069061005_n.jpg?stp=cp0_dst-jpg_p50x50&_nc_cat=100&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=YgYj1FaXfzUAX91eVtf&_nc_ht=scontent-lhr8-1.xx&oh=00_AfDl9LD5Y6zb37H8fvqqoHDcZOb0GT2GBFE6zwe5e35S6A&oe=63B6AF44
157.240.221.16200 OK 2.0 kB URL HTTP/2 scontent-lhr8-1.xx.fbcdn.net/v/t39.30808-1/271762252_461861635471218_6485517947069061005_n.jpg?stp=cp0_dst-jpg_p50x50&_nc_cat=100&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=YgYj1FaXfzUAX91eVtf&_nc_ht=scontent-lhr8-1.xx&oh=00_AfDl9LD5Y6zb37H8fvqqoHDcZOb0GT2GBFE6zwe5e35S6A&oe=63B6AF44
IP 157.240.221.16:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 3fcd752fdf305036970bf3768e4f153b
5efd3404491a43ca90c90bb879e1a7ff14a4272d
5dbfc8ff878612102783d99287ee761c0043fb3cf0e0b7bc87f4f510d9bf7565
GET /v/t39.30808-1/271762252_461861635471218_6485517947069061005_n.jpg?stp=cp0_dst-jpg_p50x50&_nc_cat=100&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=YgYj1FaXfzUAX91eVtf&_nc_ht=scontent-lhr8-1.xx&oh=00_AfDl9LD5Y6zb37H8fvqqoHDcZOb0GT2GBFE6zwe5e35S6A&oe=63B6AF44 HTTP/1.1
Host: scontent-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 12 Jan 2022 17:33:17 GMT
x-haystack-needlechecksum: 3715103004
x-needle-checksum: 3821577346
content-type: image/jpeg
content-digest: adler32=2041833027
content-length: 2006
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1679558926
date: Sun, 01 Jan 2023 19:20:29 GMT
x-fb-edge-debug: oV_VBcW8CFiX6JTZdGdqVlgQV_GQcVKFzvWP9DEsLSH0GpIH5vNY9nGRGoUi1uVFV1-G2Y_8ksXi7qftZGM-5VySuHelj16R9-2r6b59-HU
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-lhr8-1.xx.fbcdn.net/v/t15.5256-10/271555541_1322341088263397_1631436043675398047_n.jpg?stp=dst-jpg_s350x350&_nc_cat=108&ccb=1-7&_nc_sid=08861d&_nc_ohc=U9KPW2d4PpwAX9Mk-A6&_nc_ht=scontent-lhr8-1.xx&oh=00_AfA9MRGQdj1h_21kMgfQQ35vk7a4LFHHl9BYA1w23CV7lg&oe=63B738BB
157.240.221.16200 OK 20 kB URL HTTP/2 scontent-lhr8-1.xx.fbcdn.net/v/t15.5256-10/271555541_1322341088263397_1631436043675398047_n.jpg?stp=dst-jpg_s350x350&_nc_cat=108&ccb=1-7&_nc_sid=08861d&_nc_ohc=U9KPW2d4PpwAX9Mk-A6&_nc_ht=scontent-lhr8-1.xx&oh=00_AfA9MRGQdj1h_21kMgfQQ35vk7a4LFHHl9BYA1w23CV7lg&oe=63B738BB
IP 157.240.221.16:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x196, components 3\012- data
Hash d7c34315bf390a7c1f5ecacf9c16acae
b56462b66f260fcca3033188cfda441e9a1d9a76
ef1aa62215ba0f53834e9496b47835bfa74d79af282c4591c34090953a88d358
GET /v/t15.5256-10/271555541_1322341088263397_1631436043675398047_n.jpg?stp=dst-jpg_s350x350&_nc_cat=108&ccb=1-7&_nc_sid=08861d&_nc_ohc=U9KPW2d4PpwAX9Mk-A6&_nc_ht=scontent-lhr8-1.xx&oh=00_AfA9MRGQdj1h_21kMgfQQ35vk7a4LFHHl9BYA1w23CV7lg&oe=63B738BB HTTP/1.1
Host: scontent-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 12 Jan 2022 21:34:00 GMT
x-haystack-needlechecksum: 1696089231
x-needle-checksum: 3281580227
content-type: image/jpeg
content-digest: adler32=3707475174
content-length: 19655
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1679558926
date: Sun, 01 Jan 2023 19:20:29 GMT
x-fb-edge-debug: 5qBqVsh1kyLD1BTPl94VTokNpzfC4dmOaeWDB_VQdkdeDlk91TzYRRwsakH0tPuMdOKIZUOFUACbyE9uPlwztUA8vS_z2fllT5pmU3NZTyI
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-lhr8-1.xx.fbcdn.net/v/t15.5256-10/268420123_689237142484189_7786814595682007435_n.jpg?stp=dst-jpg_s350x350&_nc_cat=108&ccb=1-7&_nc_sid=08861d&_nc_ohc=d2ME7x37ZEMAX-zpec1&_nc_ht=scontent-lhr8-1.xx&oh=00_AfAH97poax-rYFSBze-U2sfdtjNYrF8VwUIHCcGI9PTy8Q&oe=63B73B6A
157.240.221.16200 OK 27 kB URL HTTP/2 scontent-lhr8-1.xx.fbcdn.net/v/t15.5256-10/268420123_689237142484189_7786814595682007435_n.jpg?stp=dst-jpg_s350x350&_nc_cat=108&ccb=1-7&_nc_sid=08861d&_nc_ohc=d2ME7x37ZEMAX-zpec1&_nc_ht=scontent-lhr8-1.xx&oh=00_AfAH97poax-rYFSBze-U2sfdtjNYrF8VwUIHCcGI9PTy8Q&oe=63B73B6A
IP 157.240.221.16:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x197, components 3\012- data
Hash 1c0600f45243c3dde59b27fdb5d0a49f
4c76e90c7cfeda5a0eade23d40d27121a2ebb396
7f1eb7fc98f54338dedde9eabec3855df6d7c500c8986980f0ff3eac494eaf43
GET /v/t15.5256-10/268420123_689237142484189_7786814595682007435_n.jpg?stp=dst-jpg_s350x350&_nc_cat=108&ccb=1-7&_nc_sid=08861d&_nc_ohc=d2ME7x37ZEMAX-zpec1&_nc_ht=scontent-lhr8-1.xx&oh=00_AfAH97poax-rYFSBze-U2sfdtjNYrF8VwUIHCcGI9PTy8Q&oe=63B73B6A HTTP/1.1
Host: scontent-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Thu, 20 Jan 2022 11:25:35 GMT
x-haystack-needlechecksum: 1044785286
x-needle-checksum: 620709045
content-type: image/jpeg
content-length: 27047
content-digest: adler32=1531929303
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1679558926
date: Sun, 01 Jan 2023 19:20:29 GMT
x-fb-edge-debug: 2MHvQ1vXkdWsgqemQdfbuIjgLeQ35XNOMyavbLD_c6lHTc3wDw_J_XoYrsW0SOEs6e6hciWuoHfMC3OsbHF7AyAWK_0x1EyxPs_1HMleHMU
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-lhr8-1.xx.fbcdn.net/v/t15.5256-10/276230543_533988451473590_8256445069622831431_n.jpg?stp=dst-jpg_s350x350&_nc_cat=108&ccb=1-7&_nc_sid=08861d&_nc_ohc=_2DjaZtVCDYAX87lYhB&_nc_ht=scontent-lhr8-1.xx&oh=00_AfCEpIioFMTIMbwRE7_onBv6v8hlmeYha2IGm1ciRnhiZw&oe=63B62398
157.240.221.16200 OK 16 kB URL HTTP/2 scontent-lhr8-1.xx.fbcdn.net/v/t15.5256-10/276230543_533988451473590_8256445069622831431_n.jpg?stp=dst-jpg_s350x350&_nc_cat=108&ccb=1-7&_nc_sid=08861d&_nc_ohc=_2DjaZtVCDYAX87lYhB&_nc_ht=scontent-lhr8-1.xx&oh=00_AfCEpIioFMTIMbwRE7_onBv6v8hlmeYha2IGm1ciRnhiZw&oe=63B62398
IP 157.240.221.16:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x197, components 3\012- data
Hash ec58fc6cf4e28d6f579ccfa7b8ce92a8
12604be4e19a042ea2f27e9198320d491061ef44
b9b2a9211eedec279ca48b8351b581ec71af5d3899cc5c455599774bb2077e7c
GET /v/t15.5256-10/276230543_533988451473590_8256445069622831431_n.jpg?stp=dst-jpg_s350x350&_nc_cat=108&ccb=1-7&_nc_sid=08861d&_nc_ohc=_2DjaZtVCDYAX87lYhB&_nc_ht=scontent-lhr8-1.xx&oh=00_AfCEpIioFMTIMbwRE7_onBv6v8hlmeYha2IGm1ciRnhiZw&oe=63B62398 HTTP/1.1
Host: scontent-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 23 Mar 2022 21:42:58 GMT
x-haystack-needlechecksum: 2840036162
x-needle-checksum: 237755619
content-type: image/jpeg
content-digest: adler32=2549610855
content-length: 16449
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1679558926
date: Sun, 01 Jan 2023 19:20:29 GMT
x-fb-edge-debug: KKo4mpygLc_0a6bybAQEuAw3sKSpVcaWBnVuCZg0WqyVSGaXqLW6t7I93RWd1SLZmkeJ3qMtRJBOqrsikTBFRvQO90i3C1V9a3_gW6vU7J8
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-lhr8-2.xx.fbcdn.net/v/t15.5256-10/269770972_1567430886970403_7824302184921427733_n.jpg?stp=dst-jpg_s350x350&_nc_cat=104&ccb=1-7&_nc_sid=08861d&_nc_ohc=po9FbI_YUmUAX-65mpL&_nc_ht=scontent-lhr8-2.xx&oh=00_AfBvFJSHY3vrlJKA5JOJVC8gCNtUIkxS8Wt_tiAaNxWuNQ&oe=63B77950
157.240.214.11200 OK 18 kB URL HTTP/2 scontent-lhr8-2.xx.fbcdn.net/v/t15.5256-10/269770972_1567430886970403_7824302184921427733_n.jpg?stp=dst-jpg_s350x350&_nc_cat=104&ccb=1-7&_nc_sid=08861d&_nc_ohc=po9FbI_YUmUAX-65mpL&_nc_ht=scontent-lhr8-2.xx&oh=00_AfBvFJSHY3vrlJKA5JOJVC8gCNtUIkxS8Wt_tiAaNxWuNQ&oe=63B77950
IP 157.240.214.11:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x197, components 3\012- data
Hash 922b19455323de9223378e3d9da9e25e
31ee786ac7a9ffcf75e021e579a0e0c75417bdaf
454d7c88e0b3103611bf8d497325b635bef2ffb0e839e6f576da820dc419078e
GET /v/t15.5256-10/269770972_1567430886970403_7824302184921427733_n.jpg?stp=dst-jpg_s350x350&_nc_cat=104&ccb=1-7&_nc_sid=08861d&_nc_ohc=po9FbI_YUmUAX-65mpL&_nc_ht=scontent-lhr8-2.xx&oh=00_AfBvFJSHY3vrlJKA5JOJVC8gCNtUIkxS8Wt_tiAaNxWuNQ&oe=63B77950 HTTP/1.1
Host: scontent-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 02 Mar 2022 06:37:58 GMT
x-haystack-needlechecksum: 3612445753
x-needle-checksum: 2650353755
content-type: image/jpeg
content-digest: adler32=2300303015
content-length: 18414
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1679558926
date: Sun, 01 Jan 2023 19:20:29 GMT
x-fb-edge-debug: 8ZlsKlmEP4p_6SITcTyJfdLYzG0nK-L2u-jIU5771x3rXsxkjswokN0MTRTZrwcDvavcFkA6hc0WOvxLvSn-1BRszyncbpnz_KBV5SBJfsU
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/272012801_240142378303053_5536158592652081952_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=2DFqngxmEM0AX_RdED6&_nc_ht=video-lhr8-2.xx&oh=00_AfCreO8zyrDsiorcYbcFMpV430cYyDuCDcO-H2JSxKAC9A&oe=63B201E9&bytestart=0&byteend=906
157.240.214.18200 OK 907 B URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/272012801_240142378303053_5536158592652081952_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=2DFqngxmEM0AX_RdED6&_nc_ht=video-lhr8-2.xx&oh=00_AfCreO8zyrDsiorcYbcFMpV430cYyDuCDcO-H2JSxKAC9A&oe=63B201E9&bytestart=0&byteend=906
IP 157.240.214.18:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash 202999ca4317a984ab7fb828a6d6c2da
6070d5754f70501e8f6f6740182153cf3db82a22
2d754047f9ed0c514abf077a906fe44cc83faebb8cdbe7889366f06373b7005d
GET /v/t42.1790-2/272012801_240142378303053_5536158592652081952_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=2DFqngxmEM0AX_RdED6&_nc_ht=video-lhr8-2.xx&oh=00_AfCreO8zyrDsiorcYbcFMpV430cYyDuCDcO-H2JSxKAC9A&oe=63B201E9&bytestart=0&byteend=906 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Thu, 20 Jan 2022 11:26:43 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 524491901
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=524491901
content-length: 907
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: EXPTnKKvFStC4_E5Up_YZT_m7Xfb4YWg0wcRxtPNniWpO5V0exQJ7QQHpc0aqpFLF8_fllkq4URDlGcU7KweY9pf6nkWbvwZ9ch14t-Gqds
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/272012801_240142378303053_5536158592652081952_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=2DFqngxmEM0AX_RdED6&_nc_ht=video-lhr8-2.xx&oh=00_AfCreO8zyrDsiorcYbcFMpV430cYyDuCDcO-H2JSxKAC9A&oe=63B201E9&bytestart=2499&byteend=19142
157.240.214.18200 OK 17 kB URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/272012801_240142378303053_5536158592652081952_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=2DFqngxmEM0AX_RdED6&_nc_ht=video-lhr8-2.xx&oh=00_AfCreO8zyrDsiorcYbcFMpV430cYyDuCDcO-H2JSxKAC9A&oe=63B201E9&bytestart=2499&byteend=19142
IP 157.240.214.18:0
File type Maple something\012- data
Hash 9b2b62552d12116b5b42de3cf25fb976
d64198cfea9731af1d9a2a6a235f104810533186
ab1473f2f2bb368db0335c138ced03d9a84fe447fd19563c2c017bcb8e68d466
GET /v/t42.1790-2/272012801_240142378303053_5536158592652081952_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=2DFqngxmEM0AX_RdED6&_nc_ht=video-lhr8-2.xx&oh=00_AfCreO8zyrDsiorcYbcFMpV430cYyDuCDcO-H2JSxKAC9A&oe=63B201E9&bytestart=2499&byteend=19142 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Thu, 20 Jan 2022 11:26:43 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 524491901
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=524491901
content-length: 16644
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/272012801_240142378303053_5536158592652081952_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=2DFqngxmEM0AX_RdED6&_nc_ht=video-lhr8-2.xx&oh=00_AfCreO8zyrDsiorcYbcFMpV430cYyDuCDcO-H2JSxKAC9A&oe=63B201E9&bytestart=907&byteend=2498
157.240.214.18200 OK 1.6 kB URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/272012801_240142378303053_5536158592652081952_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=2DFqngxmEM0AX_RdED6&_nc_ht=video-lhr8-2.xx&oh=00_AfCreO8zyrDsiorcYbcFMpV430cYyDuCDcO-H2JSxKAC9A&oe=63B201E9&bytestart=907&byteend=2498
IP 157.240.214.18:0
Hash c0d024a2d066d0ed169e7c3663c16584
a052eb52101712bcc368ecea8b516a4cbe2a37fb
39f2ad01d67607fcdbc44d3ea5c1fa9e3501f048eeff9220c956a6dcd17bf813
GET /v/t42.1790-2/272012801_240142378303053_5536158592652081952_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=2DFqngxmEM0AX_RdED6&_nc_ht=video-lhr8-2.xx&oh=00_AfCreO8zyrDsiorcYbcFMpV430cYyDuCDcO-H2JSxKAC9A&oe=63B201E9&bytestart=907&byteend=2498 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Thu, 20 Jan 2022 11:26:43 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 524491901
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=524491901
content-length: 1592
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/318500522_1195664824690504_8898340453423586635_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=BYhy6rbV234AX8TwEhX&_nc_ht=video-lhr8-2.xx&oh=00_AfCRWlsJ-KyHoVSrRCKEEv_rRIopoMYVopvP0uPdMKXSRA&oe=63B739F1&bytestart=0&byteend=856
157.240.214.18200 OK 857 B URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/318500522_1195664824690504_8898340453423586635_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=BYhy6rbV234AX8TwEhX&_nc_ht=video-lhr8-2.xx&oh=00_AfCRWlsJ-KyHoVSrRCKEEv_rRIopoMYVopvP0uPdMKXSRA&oe=63B739F1&bytestart=0&byteend=856
IP 157.240.214.18:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash 461c73234fe83c2626f579a1fa840a1f
6c62a63f6e827d5f402020cfd5bf4bc514eec5c6
983e9dbf19a92b55c6d7aee77935a83d4327532693a56c7ebf7c678889c2fd3c
GET /v/t39.25447-2/318500522_1195664824690504_8898340453423586635_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=BYhy6rbV234AX8TwEhX&_nc_ht=video-lhr8-2.xx&oh=00_AfCRWlsJ-KyHoVSrRCKEEv_rRIopoMYVopvP0uPdMKXSRA&oe=63B739F1&bytestart=0&byteend=856 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 07 Dec 2022 10:25:25 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 955554415
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=955554415
content-length: 857
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: FHnwEPitlokQj57gE75ZjBAle2EBVFkh6MknZX3g34SWtuC1HYLXiAvWEf7CP4tYgkUlERh34MUwqf_Ue1YrTl5Uxt1yVC7TvAo3BoY0J54
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/318500522_1195664824690504_8898340453423586635_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=BYhy6rbV234AX8TwEhX&_nc_ht=video-lhr8-2.xx&oh=00_AfCRWlsJ-KyHoVSrRCKEEv_rRIopoMYVopvP0uPdMKXSRA&oe=63B739F1&bytestart=857&byteend=1512
157.240.214.18200 OK 656 B URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/318500522_1195664824690504_8898340453423586635_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=BYhy6rbV234AX8TwEhX&_nc_ht=video-lhr8-2.xx&oh=00_AfCRWlsJ-KyHoVSrRCKEEv_rRIopoMYVopvP0uPdMKXSRA&oe=63B739F1&bytestart=857&byteend=1512
IP 157.240.214.18:0
Hash 86602ce28336fd752cd82b31bc64d5d9
9ad6ef866841ebcbed8fe8b7cbdef8dabc82c36e
692ea97ffbffc6dc0c4859b23e81268d8a8ef10b060642f17db4ca1ebdf5adc2
GET /v/t39.25447-2/318500522_1195664824690504_8898340453423586635_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=BYhy6rbV234AX8TwEhX&_nc_ht=video-lhr8-2.xx&oh=00_AfCRWlsJ-KyHoVSrRCKEEv_rRIopoMYVopvP0uPdMKXSRA&oe=63B739F1&bytestart=857&byteend=1512 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 07 Dec 2022 10:25:25 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 955554415
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=955554415
content-length: 656
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/271574158_1856315751229207_8990909142510206663_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=gVcIzpKJEdMAX8GOxeM&_nc_ht=video-lhr8-2.xx&oh=00_AfAwqOb79VsaLnzRKHOQmYqF27Rm5uY_koZ98JDN5BwvrA&oe=63B1FA41&bytestart=908&byteend=2079
157.240.214.18200 OK 1.2 kB URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/271574158_1856315751229207_8990909142510206663_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=gVcIzpKJEdMAX8GOxeM&_nc_ht=video-lhr8-2.xx&oh=00_AfAwqOb79VsaLnzRKHOQmYqF27Rm5uY_koZ98JDN5BwvrA&oe=63B1FA41&bytestart=908&byteend=2079
IP 157.240.214.18:0
Hash b4ee248c80f141259cd0f0c79d0c781a
a35420a2cda01a2d1f04ccbc8ab2553986702616
ea5397a87d8b48f3f1d17427b40e9b7a98c2fb74b5c4035a36201bc633174d7b
GET /v/t42.1790-2/271574158_1856315751229207_8990909142510206663_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=gVcIzpKJEdMAX8GOxeM&_nc_ht=video-lhr8-2.xx&oh=00_AfAwqOb79VsaLnzRKHOQmYqF27Rm5uY_koZ98JDN5BwvrA&oe=63B1FA41&bytestart=908&byteend=2079 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Jan 2022 21:34:40 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 1011631862
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1011631862
content-length: 1172
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: zD-EfAFfUMIP7NYk0cGIAg1CbhCtWgM4XHWRx1p3_arGG5ct07U0DshoTzV-mgveCem24WNjgW5OWVNCdjnBZj3lYNjN4dJtM8K1Tch7hLc
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/v9.0/plugins/page.php?adapt_container_width=true&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1648b09e14ac6%26domain%3Dwww.lilmaaloumiat.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.lilmaaloumiat.com%252Ff38d66ecd47c5%26relation%3Dparent.parent&container_width=340&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Flilmaaloumiat&locale=ar_AR&sdk=joey&show_facepile=false&small_header=false&tabs=timeline&width=
31.13.72.36200 OK 18 kB URL HTTP/2 www.facebook.com/v9.0/plugins/page.php?adapt_container_width=true&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1648b09e14ac6%26domain%3Dwww.lilmaaloumiat.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.lilmaaloumiat.com%252Ff38d66ecd47c5%26relation%3Dparent.parent&container_width=340&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Flilmaaloumiat&locale=ar_AR&sdk=joey&show_facepile=false&small_header=false&tabs=timeline&width=
IP 31.13.72.36:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (22201)
Hash 44c27ca710d8705b3da6c01426343b40
a67d67963b249b5b13b7ba7641fd2d760250957e
47c95583e40dd93e3786522b03e570a8ffa9650a127fceba868de65007d2be89
GET /v9.0/plugins/page.php?adapt_container_width=true&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1648b09e14ac6%26domain%3Dwww.lilmaaloumiat.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.lilmaaloumiat.com%252Ff38d66ecd47c5%26relation%3Dparent.parent&container_width=340&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Flilmaaloumiat&locale=ar_AR&sdk=joey&show_facepile=false&small_header=false&tabs=timeline&width= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v9.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: JOZXe49TXVZqdQ9ZHGWIhorxmXJMvMvJA0H3KB3xq3qP28kREseounEBqEmuxP6c0TQvVet/pluG/ystvXm5sA==
date: Sun, 01 Jan 2023 19:20:26 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/318500522_1195664824690504_8898340453423586635_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=BYhy6rbV234AX8TwEhX&_nc_ht=video-lhr8-2.xx&oh=00_AfCRWlsJ-KyHoVSrRCKEEv_rRIopoMYVopvP0uPdMKXSRA&oe=63B739F1&bytestart=1513&byteend=159123
157.240.214.18200 OK 158 kB URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/318500522_1195664824690504_8898340453423586635_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=BYhy6rbV234AX8TwEhX&_nc_ht=video-lhr8-2.xx&oh=00_AfCRWlsJ-KyHoVSrRCKEEv_rRIopoMYVopvP0uPdMKXSRA&oe=63B739F1&bytestart=1513&byteend=159123
IP 157.240.214.18:0
Size 158 kB (157611 bytes)
Hash ed41d3cef5b82763b2f5735f5f8d8b1b
30cf35f0312e0af0b38c99f059ffa8398a788ec7
1d940a812b72a4aaa19855948a7f740bfccf56244211a2845f64eb3105ca48e8
GET /v/t39.25447-2/318500522_1195664824690504_8898340453423586635_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=BYhy6rbV234AX8TwEhX&_nc_ht=video-lhr8-2.xx&oh=00_AfCRWlsJ-KyHoVSrRCKEEv_rRIopoMYVopvP0uPdMKXSRA&oe=63B739F1&bytestart=1513&byteend=159123 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 07 Dec 2022 10:25:25 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 955554415
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=955554415
content-length: 157611
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/275000260_540827517256689_5292483405514620249_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=ZnlFZdZ0-9IAX_M0IpO&_nc_ht=video-lhr8-1.xx&oh=00_AfAl4P7LJWh9KK5bO9unPKDKOkoAOm_dsiSE3gF7XZ3QGQ&oe=63B1FDA3&bytestart=2387&byteend=18978
157.240.221.10200 OK 17 kB URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/275000260_540827517256689_5292483405514620249_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=ZnlFZdZ0-9IAX_M0IpO&_nc_ht=video-lhr8-1.xx&oh=00_AfAl4P7LJWh9KK5bO9unPKDKOkoAOm_dsiSE3gF7XZ3QGQ&oe=63B1FDA3&bytestart=2387&byteend=18978
IP 157.240.221.10:0
File type Maple something\012- data
Hash 36b7344b2fafd6da50f7f60084f4dc90
0adb8e2a0988891d861f892f4cc0a456020d69b4
baaa5b808fcd44d0cab1883af72a3951ae9e84386c54d816f0336f8851faca39
GET /v/t42.1790-2/275000260_540827517256689_5292483405514620249_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=ZnlFZdZ0-9IAX_M0IpO&_nc_ht=video-lhr8-1.xx&oh=00_AfAl4P7LJWh9KK5bO9unPKDKOkoAOm_dsiSE3gF7XZ3QGQ&oe=63B1FDA3&bytestart=2387&byteend=18978 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 02 Mar 2022 06:40:31 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2629325003
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2629325003
content-length: 16592
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/276987202_468346731658765_3375401146801530047_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=d7qNSm4bHPMAX8Rz2OP&_nc_ht=video-lhr8-2.xx&oh=00_AfDjXTEugNyXQnE17-knzjyS4h-XP6fi2lZ3GV5Omom6TA&oe=63B201D6&bytestart=0&byteend=906
157.240.214.18200 OK 907 B URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/276987202_468346731658765_3375401146801530047_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=d7qNSm4bHPMAX8Rz2OP&_nc_ht=video-lhr8-2.xx&oh=00_AfDjXTEugNyXQnE17-knzjyS4h-XP6fi2lZ3GV5Omom6TA&oe=63B201D6&bytestart=0&byteend=906
IP 157.240.214.18:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash 0cd691f760b12e44b9c57a0d26d5f6d7
366181ed22af342de2836572568085d45cb36c18
16ee9e80530bb3fa068331a7a4a723665140b02f88e4abcb36008ba3b7c8a435
GET /v/t42.1790-2/276987202_468346731658765_3375401146801530047_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=d7qNSm4bHPMAX8Rz2OP&_nc_ht=video-lhr8-2.xx&oh=00_AfDjXTEugNyXQnE17-knzjyS4h-XP6fi2lZ3GV5Omom6TA&oe=63B201D6&bytestart=0&byteend=906 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Sat, 19 Mar 2022 22:24:10 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 711883648
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=711883648
content-length: 907
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: PoVEBhSiyqVAmXBVxnOHAsQDgVB9xz3TfDgMRddiVh3umc8xhSFzmVLLa7zhNdkCooDu3dICcIwEqqcFtAtSCicZeCQsBmNuyF-pGRXWRnU
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/276987202_468346731658765_3375401146801530047_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=d7qNSm4bHPMAX8Rz2OP&_nc_ht=video-lhr8-2.xx&oh=00_AfDjXTEugNyXQnE17-knzjyS4h-XP6fi2lZ3GV5Omom6TA&oe=63B201D6&bytestart=2079&byteend=18733
157.240.214.18200 OK 17 kB URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/276987202_468346731658765_3375401146801530047_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=d7qNSm4bHPMAX8Rz2OP&_nc_ht=video-lhr8-2.xx&oh=00_AfDjXTEugNyXQnE17-knzjyS4h-XP6fi2lZ3GV5Omom6TA&oe=63B201D6&bytestart=2079&byteend=18733
IP 157.240.214.18:0
File type Maple something\012- data
Hash 9102ad6feef72fb8d91aebd91a3544f8
2133b1caed8c1885a5ed9fd9b9dc9b65661c7d29
f9ecb32f4215dc13c712593611a60cedf2ac309465028078b0da87443f2e6409
GET /v/t42.1790-2/276987202_468346731658765_3375401146801530047_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=d7qNSm4bHPMAX8Rz2OP&_nc_ht=video-lhr8-2.xx&oh=00_AfDjXTEugNyXQnE17-knzjyS4h-XP6fi2lZ3GV5Omom6TA&oe=63B201D6&bytestart=2079&byteend=18733 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Sat, 19 Mar 2022 22:24:10 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 711883648
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=711883648
content-length: 16655
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/276987202_468346731658765_3375401146801530047_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=d7qNSm4bHPMAX8Rz2OP&_nc_ht=video-lhr8-2.xx&oh=00_AfDjXTEugNyXQnE17-knzjyS4h-XP6fi2lZ3GV5Omom6TA&oe=63B201D6&bytestart=907&byteend=2078
157.240.214.18200 OK 1.2 kB URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/276987202_468346731658765_3375401146801530047_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=d7qNSm4bHPMAX8Rz2OP&_nc_ht=video-lhr8-2.xx&oh=00_AfDjXTEugNyXQnE17-knzjyS4h-XP6fi2lZ3GV5Omom6TA&oe=63B201D6&bytestart=907&byteend=2078
IP 157.240.214.18:0
Hash 2cea325f5615c8c1cb814d72866e68b7
a3ab477f528436ca6e309914ca596bb5c87708d7
4680ec4570ab922ef035ac56a71f297db408e7b2b779d77d1e7aa01811d94c9b
GET /v/t42.1790-2/276987202_468346731658765_3375401146801530047_n.mp4?_nc_cat=105&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=d7qNSm4bHPMAX8Rz2OP&_nc_ht=video-lhr8-2.xx&oh=00_AfDjXTEugNyXQnE17-knzjyS4h-XP6fi2lZ3GV5Omom6TA&oe=63B201D6&bytestart=907&byteend=2078 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Sat, 19 Mar 2022 22:24:10 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 711883648
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=711883648
content-length: 1172
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/320420612_147687414700974_6923603576806995654_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=MvX4lYqgy50AX_pkJte&_nc_ht=video-lhr8-1.xx&oh=00_AfBhLnm-vy4OUzOesztHSivXDAnd2GuTQ_NL-0Bu66abBA&oe=63B75B86&bytestart=0&byteend=964
157.240.221.10200 OK 965 B URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/320420612_147687414700974_6923603576806995654_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=MvX4lYqgy50AX_pkJte&_nc_ht=video-lhr8-1.xx&oh=00_AfBhLnm-vy4OUzOesztHSivXDAnd2GuTQ_NL-0Bu66abBA&oe=63B75B86&bytestart=0&byteend=964
IP 157.240.221.10:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash 42c7b33614daa8321935ce7c0f495932
fdbe7a193151e63459ee6a474fa92867c1a37f71
285e327d88d7a463fd76076e1d8805d18872721e97f5251ae724aa0df98c9c6f
GET /v/t39.25447-2/320420612_147687414700974_6923603576806995654_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=MvX4lYqgy50AX_pkJte&_nc_ht=video-lhr8-1.xx&oh=00_AfBhLnm-vy4OUzOesztHSivXDAnd2GuTQ_NL-0Bu66abBA&oe=63B75B86&bytestart=0&byteend=964 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Fri, 16 Dec 2022 12:26:38 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 3886728857
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3886728857
content-length: 965
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: kcJI7txgP0cJdK1f8iovSug3pX-zHu6b67dDl6iss4j5igxhYOeinXn00Y1M5-6nQFPZmLCq3hEJtsWk4_VizAgiVErCEcznmAPz-OLejuc
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/320420612_147687414700974_6923603576806995654_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=MvX4lYqgy50AX_pkJte&_nc_ht=video-lhr8-1.xx&oh=00_AfBhLnm-vy4OUzOesztHSivXDAnd2GuTQ_NL-0Bu66abBA&oe=63B75B86&bytestart=965&byteend=2124
157.240.221.10200 OK 1.2 kB URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/320420612_147687414700974_6923603576806995654_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=MvX4lYqgy50AX_pkJte&_nc_ht=video-lhr8-1.xx&oh=00_AfBhLnm-vy4OUzOesztHSivXDAnd2GuTQ_NL-0Bu66abBA&oe=63B75B86&bytestart=965&byteend=2124
IP 157.240.221.10:0
Hash a0a8419820523cc6db424b046d6bea95
5f96736d5038a623c0c5e594a9fa740cca4785a0
ec12236aa2b72b15008d50729296d3ae90071ab4087e4ec161a99c66aa7e8f8e
GET /v/t39.25447-2/320420612_147687414700974_6923603576806995654_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=MvX4lYqgy50AX_pkJte&_nc_ht=video-lhr8-1.xx&oh=00_AfBhLnm-vy4OUzOesztHSivXDAnd2GuTQ_NL-0Bu66abBA&oe=63B75B86&bytestart=965&byteend=2124 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Fri, 16 Dec 2022 12:26:38 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 3886728857
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3886728857
content-length: 1160
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311811338_3362919720658722_3255166589900326795_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=PhQDyyrPQnkAX_YfJeW&_nc_ht=video-lhr8-1.xx&oh=00_AfAt3zGTMXNcJ-DN8CvHiY6hSIwezQRNu6P6FwzV9MvjNw&oe=63B5EFB1&bytestart=0&byteend=965
157.240.221.10200 OK 966 B URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311811338_3362919720658722_3255166589900326795_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=PhQDyyrPQnkAX_YfJeW&_nc_ht=video-lhr8-1.xx&oh=00_AfAt3zGTMXNcJ-DN8CvHiY6hSIwezQRNu6P6FwzV9MvjNw&oe=63B5EFB1&bytestart=0&byteend=965
IP 157.240.221.10:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash fc0eeca93f9d1bd1f69ea6856f1396bf
1b18bcd5a1f3636d058f041747c98ab14d2b7837
4162ca9b523c2c4e4ce003eb2b997b4fd5e114321a81e40226f71ccd1e62d210
GET /v/t39.25447-2/311811338_3362919720658722_3255166589900326795_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=PhQDyyrPQnkAX_YfJeW&_nc_ht=video-lhr8-1.xx&oh=00_AfAt3zGTMXNcJ-DN8CvHiY6hSIwezQRNu6P6FwzV9MvjNw&oe=63B5EFB1&bytestart=0&byteend=965 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Fri, 14 Oct 2022 19:33:18 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2194211579
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2194211579
content-length: 966
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: B1WPhfBg0TjLsl9sLT3_BShXel9dG7kXm6Wd3-gFj_9RB1njiGd3XXvJrcMTF-vJcWPw9vjoYIxEI0_CsKLcNWHdjtdglOSVhUcPdAq3jrc
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/320420612_147687414700974_6923603576806995654_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=MvX4lYqgy50AX_pkJte&_nc_ht=video-lhr8-1.xx&oh=00_AfBhLnm-vy4OUzOesztHSivXDAnd2GuTQ_NL-0Bu66abBA&oe=63B75B86&bytestart=2125&byteend=110243
157.240.221.10200 OK 108 kB URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/320420612_147687414700974_6923603576806995654_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=MvX4lYqgy50AX_pkJte&_nc_ht=video-lhr8-1.xx&oh=00_AfBhLnm-vy4OUzOesztHSivXDAnd2GuTQ_NL-0Bu66abBA&oe=63B75B86&bytestart=2125&byteend=110243
IP 157.240.221.10:0
Size 108 kB (108119 bytes)
Hash ce4335a0d4f46f86abb4e0343bdc1378
849f9c5b2ad66b2eaf3199ff2fe4aa7726e652c0
257879755b946d724577d16edf0b19df7f5f30a1e1a10e5b7461adad875e5dca
GET /v/t39.25447-2/320420612_147687414700974_6923603576806995654_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=MvX4lYqgy50AX_pkJte&_nc_ht=video-lhr8-1.xx&oh=00_AfBhLnm-vy4OUzOesztHSivXDAnd2GuTQ_NL-0Bu66abBA&oe=63B75B86&bytestart=2125&byteend=110243 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Fri, 16 Dec 2022 12:26:38 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 3886728857
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3886728857
content-length: 108119
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311811338_3362919720658722_3255166589900326795_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=PhQDyyrPQnkAX_YfJeW&_nc_ht=video-lhr8-1.xx&oh=00_AfAt3zGTMXNcJ-DN8CvHiY6hSIwezQRNu6P6FwzV9MvjNw&oe=63B5EFB1&bytestart=966&byteend=2113
157.240.221.10200 OK 1.1 kB URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311811338_3362919720658722_3255166589900326795_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=PhQDyyrPQnkAX_YfJeW&_nc_ht=video-lhr8-1.xx&oh=00_AfAt3zGTMXNcJ-DN8CvHiY6hSIwezQRNu6P6FwzV9MvjNw&oe=63B5EFB1&bytestart=966&byteend=2113
IP 157.240.221.10:0
Hash 34e252f7d7eae49c1fffbee975487c89
87784bfd6c2ecf2b7f9e7af33206010a6c0d9287
0b26488be3b9c719368cafddef8982527dba989da57e92a42956a6676a630625
GET /v/t39.25447-2/311811338_3362919720658722_3255166589900326795_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=PhQDyyrPQnkAX_YfJeW&_nc_ht=video-lhr8-1.xx&oh=00_AfAt3zGTMXNcJ-DN8CvHiY6hSIwezQRNu6P6FwzV9MvjNw&oe=63B5EFB1&bytestart=966&byteend=2113 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Fri, 14 Oct 2022 19:33:18 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2194211579
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2194211579
content-length: 1148
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/320659300_1380464482487565_2500778052563854171_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=zgZJEkSesTEAX8haPPx&_nc_ht=video-lhr8-2.xx&oh=00_AfDWs0SSohUJTyiJpQBlcb3ZlRCl76P_vP0478XfIozD_w&oe=63B6F180&bytestart=0&byteend=964
157.240.214.18200 OK 965 B URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/320659300_1380464482487565_2500778052563854171_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=zgZJEkSesTEAX8haPPx&_nc_ht=video-lhr8-2.xx&oh=00_AfDWs0SSohUJTyiJpQBlcb3ZlRCl76P_vP0478XfIozD_w&oe=63B6F180&bytestart=0&byteend=964
IP 157.240.214.18:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash f53b4ad0bda52692676657b49f3aa83a
90a2809e70fc417de6d2cfd497022ebaee69fa3b
9b25937d82cbdc88ebf129f962979f3d140e6140b2f1c87d0751a97e1c8197ec
GET /v/t39.25447-2/320659300_1380464482487565_2500778052563854171_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=zgZJEkSesTEAX8haPPx&_nc_ht=video-lhr8-2.xx&oh=00_AfDWs0SSohUJTyiJpQBlcb3ZlRCl76P_vP0478XfIozD_w&oe=63B6F180&bytestart=0&byteend=964 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Mon, 19 Dec 2022 22:55:06 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 3429302216
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3429302216
content-length: 965
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: KviQcc2hZvIYFFTLpiJGVMo4TjyoAJTDP4e3jbCQImNolZCyw-1yxXJdZbKVj-hGdFn1FgKU8jWv2u3a6Jh4Hl8XJuQlsJReR85Kd-nG6Hc
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/320659300_1380464482487565_2500778052563854171_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=zgZJEkSesTEAX8haPPx&_nc_ht=video-lhr8-2.xx&oh=00_AfDWs0SSohUJTyiJpQBlcb3ZlRCl76P_vP0478XfIozD_w&oe=63B6F180&bytestart=965&byteend=3384
157.240.214.18200 OK 2.4 kB URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/320659300_1380464482487565_2500778052563854171_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=zgZJEkSesTEAX8haPPx&_nc_ht=video-lhr8-2.xx&oh=00_AfDWs0SSohUJTyiJpQBlcb3ZlRCl76P_vP0478XfIozD_w&oe=63B6F180&bytestart=965&byteend=3384
IP 157.240.214.18:0
Hash bd29b60cf93bb79ecd39dba5d405b009
ac683f207629a4f11e84f1ded3b1d2ea09a3b4db
cd9b14d89b0d843fbb195b0ee74d25c945b50433a21dcf613bf3cecc583633f8
GET /v/t39.25447-2/320659300_1380464482487565_2500778052563854171_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=zgZJEkSesTEAX8haPPx&_nc_ht=video-lhr8-2.xx&oh=00_AfDWs0SSohUJTyiJpQBlcb3ZlRCl76P_vP0478XfIozD_w&oe=63B6F180&bytestart=965&byteend=3384 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Mon, 19 Dec 2022 22:55:06 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 3429302216
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3429302216
content-length: 2420
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/271574158_1856315751229207_8990909142510206663_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=gVcIzpKJEdMAX8GOxeM&_nc_ht=video-lhr8-2.xx&oh=00_AfAwqOb79VsaLnzRKHOQmYqF27Rm5uY_koZ98JDN5BwvrA&oe=63B1FA41&bytestart=2080&byteend=18859
157.240.214.18200 OK 3.3 kB URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/271574158_1856315751229207_8990909142510206663_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=gVcIzpKJEdMAX8GOxeM&_nc_ht=video-lhr8-2.xx&oh=00_AfAwqOb79VsaLnzRKHOQmYqF27Rm5uY_koZ98JDN5BwvrA&oe=63B1FA41&bytestart=2080&byteend=18859
IP 157.240.214.18:0
Hash 4c92c84899c199ea3a65ae7b3a9ae8c5
a013e9b60b283f73cbd57d3957c4c9218171d1ab
f2cf3d6ff670ed44b559f652ed3bfb563f3cf65be15deb8f9332273f72caca9c
GET /v/t42.1790-2/271574158_1856315751229207_8990909142510206663_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=gVcIzpKJEdMAX8GOxeM&_nc_ht=video-lhr8-2.xx&oh=00_AfAwqOb79VsaLnzRKHOQmYqF27Rm5uY_koZ98JDN5BwvrA&oe=63B1FA41&bytestart=2080&byteend=18859 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Jan 2022 21:34:40 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 1011631862
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1011631862
content-length: 16780
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/276958217_1575567389495139_7066773873527635154_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=wp6CLqJtrFoAX_LZ08N&_nc_ht=video-lhr8-1.xx&oh=00_AfA_-xMBo8dW984aBvfkVSN1yRKHvWMUfGNuBvCipBggNQ&oe=63B201A4&bytestart=0&byteend=906
157.240.221.10200 OK 907 B URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/276958217_1575567389495139_7066773873527635154_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=wp6CLqJtrFoAX_LZ08N&_nc_ht=video-lhr8-1.xx&oh=00_AfA_-xMBo8dW984aBvfkVSN1yRKHvWMUfGNuBvCipBggNQ&oe=63B201A4&bytestart=0&byteend=906
IP 157.240.221.10:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash 83a1471d10810660d8bdd05124dd9054
b553f8b7a0e446152bb6ebd52ea564f7712228df
7c036f5c0dde44519c69e2f7139ec87f878d147e401768df35f45c15cc4879b8
GET /v/t42.1790-2/276958217_1575567389495139_7066773873527635154_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=wp6CLqJtrFoAX_LZ08N&_nc_ht=video-lhr8-1.xx&oh=00_AfA_-xMBo8dW984aBvfkVSN1yRKHvWMUfGNuBvCipBggNQ&oe=63B201A4&bytestart=0&byteend=906 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 23 Mar 2022 21:44:51 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 1234534456
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1234534456
content-length: 907
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: gaPByPIAyAzvAezDezI8hBVEPfKvwJLc123eeIez7tnbDuJ2-FWHevVnK553Uk4887esF8fUaCqTJgZoBeVptkNL8byR9cfwHdlL3eojLWg
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/276958217_1575567389495139_7066773873527635154_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=wp6CLqJtrFoAX_LZ08N&_nc_ht=video-lhr8-1.xx&oh=00_AfA_-xMBo8dW984aBvfkVSN1yRKHvWMUfGNuBvCipBggNQ&oe=63B201A4&bytestart=3363&byteend=19993
157.240.221.10200 OK 17 kB URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/276958217_1575567389495139_7066773873527635154_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=wp6CLqJtrFoAX_LZ08N&_nc_ht=video-lhr8-1.xx&oh=00_AfA_-xMBo8dW984aBvfkVSN1yRKHvWMUfGNuBvCipBggNQ&oe=63B201A4&bytestart=3363&byteend=19993
IP 157.240.221.10:0
File type Maple something\012- data
Hash 23c4b9bbba0af4d3973b2daef85c1f5d
2f1fec706a654411e65bc2f87ee55f311736c848
dacc608713a85f105900899c0ad6462643522a93a8fbf3beccc4fd88475c7043
GET /v/t42.1790-2/276958217_1575567389495139_7066773873527635154_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=wp6CLqJtrFoAX_LZ08N&_nc_ht=video-lhr8-1.xx&oh=00_AfA_-xMBo8dW984aBvfkVSN1yRKHvWMUfGNuBvCipBggNQ&oe=63B201A4&bytestart=3363&byteend=19993 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 23 Mar 2022 21:44:51 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 1234534456
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1234534456
content-length: 16631
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/276958217_1575567389495139_7066773873527635154_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=wp6CLqJtrFoAX_LZ08N&_nc_ht=video-lhr8-1.xx&oh=00_AfA_-xMBo8dW984aBvfkVSN1yRKHvWMUfGNuBvCipBggNQ&oe=63B201A4&bytestart=907&byteend=3362
157.240.221.10200 OK 2.5 kB URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/276958217_1575567389495139_7066773873527635154_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=wp6CLqJtrFoAX_LZ08N&_nc_ht=video-lhr8-1.xx&oh=00_AfA_-xMBo8dW984aBvfkVSN1yRKHvWMUfGNuBvCipBggNQ&oe=63B201A4&bytestart=907&byteend=3362
IP 157.240.221.10:0
Hash 67ee156e14054d457393fb0d08105665
df3d8a91b60e6d5c531ef0421fab87193274cb5c
f4a4f3ee85e99eb0c209cda4465cfba8c2f1d86f95ad5e3eecbd638843dabe31
GET /v/t42.1790-2/276958217_1575567389495139_7066773873527635154_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=wp6CLqJtrFoAX_LZ08N&_nc_ht=video-lhr8-1.xx&oh=00_AfA_-xMBo8dW984aBvfkVSN1yRKHvWMUfGNuBvCipBggNQ&oe=63B201A4&bytestart=907&byteend=3362 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 23 Mar 2022 21:44:51 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 1234534456
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1234534456
content-length: 2456
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311820421_1142804729969695_6725684795689264609_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=HG-2O5DqvwwAX_yv0vL&_nc_ht=video-lhr8-1.xx&oh=00_AfC6CEwhpo7z5vcRsTgQnx-BUlagY_ovvTZPhCtUk0_BMw&oe=63B6F462&bytestart=0&byteend=964
157.240.221.10200 OK 965 B URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311820421_1142804729969695_6725684795689264609_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=HG-2O5DqvwwAX_yv0vL&_nc_ht=video-lhr8-1.xx&oh=00_AfC6CEwhpo7z5vcRsTgQnx-BUlagY_ovvTZPhCtUk0_BMw&oe=63B6F462&bytestart=0&byteend=964
IP 157.240.221.10:0
File type ISO Media, MP4 Base Media v5 \012- data
Hash 5d48b6e7646dbc8f78c5b849e45851be
18c038ab9281f7b01a602f106da5dc29c75b7fe5
181a87bb70cc6c4823bb0d39eeb2a010e0a7ea2ac562a51a178444fae5deb6d1
GET /v/t39.25447-2/311820421_1142804729969695_6725684795689264609_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=HG-2O5DqvwwAX_yv0vL&_nc_ht=video-lhr8-1.xx&oh=00_AfC6CEwhpo7z5vcRsTgQnx-BUlagY_ovvTZPhCtUk0_BMw&oe=63B6F462&bytestart=0&byteend=964 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Fri, 14 Oct 2022 20:42:46 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 957100464
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=957100464
content-length: 965
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: C_IAg_ci0oXIV1p1DO0cx1RjBhr4j1THt8KDS0iulZ1QIlDJzn383PpZrzn8F5Jd_o6fGM5vITQWCwmHfROjBmtMauD_DJX19rRNYTVSNoY
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311820421_1142804729969695_6725684795689264609_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=HG-2O5DqvwwAX_yv0vL&_nc_ht=video-lhr8-1.xx&oh=00_AfC6CEwhpo7z5vcRsTgQnx-BUlagY_ovvTZPhCtUk0_BMw&oe=63B6F462&bytestart=965&byteend=2544
157.240.221.10200 OK 1.6 kB URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311820421_1142804729969695_6725684795689264609_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=HG-2O5DqvwwAX_yv0vL&_nc_ht=video-lhr8-1.xx&oh=00_AfC6CEwhpo7z5vcRsTgQnx-BUlagY_ovvTZPhCtUk0_BMw&oe=63B6F462&bytestart=965&byteend=2544
IP 157.240.221.10:0
Hash 07bda026526b2ddb7192c35588bda44b
3523efc9c6c127f08f72e4b6e605e6c62f11f672
07c778214547a65e8b05913f5e36f391952d7d24c9c58f9524395c255b3e3bbf
GET /v/t39.25447-2/311820421_1142804729969695_6725684795689264609_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=HG-2O5DqvwwAX_yv0vL&_nc_ht=video-lhr8-1.xx&oh=00_AfC6CEwhpo7z5vcRsTgQnx-BUlagY_ovvTZPhCtUk0_BMw&oe=63B6F462&bytestart=965&byteend=2544 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Fri, 14 Oct 2022 20:42:46 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 957100464
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=957100464
content-length: 1580
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-lhr8-1.xx.fbcdn.net/v/t39.2093-6/272156349_969696920642442_1128658261752893057_n.srt?_nc_cat=111&ccb=1-7&_nc_sid=8d539b&_nc_ohc=q9g5M_PUsv8AX9b8CWf&_nc_ht=scontent-lhr8-1.xx&oh=00_AfCTqFKA3XleuyAxQunWvQiAj_P2Da6qWm4RK4SM_zH0aA&oe=63B67331
157.240.221.16200 OK 4.3 kB URL HTTP/2 scontent-lhr8-1.xx.fbcdn.net/v/t39.2093-6/272156349_969696920642442_1128658261752893057_n.srt?_nc_cat=111&ccb=1-7&_nc_sid=8d539b&_nc_ohc=q9g5M_PUsv8AX9b8CWf&_nc_ht=scontent-lhr8-1.xx&oh=00_AfCTqFKA3XleuyAxQunWvQiAj_P2Da6qWm4RK4SM_zH0aA&oe=63B67331
IP 157.240.221.16:0
Hash aa23c57d23bc3052c8b77f9cb7f908fe
58ba5eef4cf0e46f7ab0ce4705d4c36f1625db43
6d408d9a840423971932793af451526605ba575366f37de86470257820e5ff75
GET /v/t39.2093-6/272156349_969696920642442_1128658261752893057_n.srt?_nc_cat=111&ccb=1-7&_nc_sid=8d539b&_nc_ohc=q9g5M_PUsv8AX9b8CWf&_nc_ht=scontent-lhr8-1.xx&oh=00_AfCTqFKA3XleuyAxQunWvQiAj_P2Da6qWm4RK4SM_zH0aA&oe=63B67331 HTTP/1.1
Host: scontent-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Thu, 20 Jan 2022 11:26:53 GMT
content-type: text/srt
x-haystack-needlechecksum: 4042423761
x-needle-checksum: 3172391776
content-length: 4299
content-digest: adler32=3172391776
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1679558926
date: Sun, 01 Jan 2023 19:20:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: -jqp7SnCBFfJqvjpJNfXTdWYCph599Ri1UMoXJ136e3xs-kkFx-9-HQwmFpGiewTsWNWE6M1exNaXRV_NtytfDk0enxIE9kMx_3c1CVCYxU
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-lhr8-1.xx.fbcdn.net/v/t39.2093-6/275954299_284347873847191_1057485981137551166_n.srt?_nc_cat=107&ccb=1-7&_nc_sid=8d539b&_nc_ohc=4oBOWWp10FUAX_8fP_M&_nc_ht=scontent-lhr8-1.xx&oh=00_AfBPGryafstnmB5t62p1E84yVWAv9qmNqL349u3zibNnHQ&oe=63B721D2
157.240.221.16200 OK 4.9 kB URL HTTP/2 scontent-lhr8-1.xx.fbcdn.net/v/t39.2093-6/275954299_284347873847191_1057485981137551166_n.srt?_nc_cat=107&ccb=1-7&_nc_sid=8d539b&_nc_ohc=4oBOWWp10FUAX_8fP_M&_nc_ht=scontent-lhr8-1.xx&oh=00_AfBPGryafstnmB5t62p1E84yVWAv9qmNqL349u3zibNnHQ&oe=63B721D2
IP 157.240.221.16:0
Hash 4efc81407928d077f0302a1b43c9601b
1cc3a2397a2004a8620991a9da590bf12b7f6480
7e128ba5e88c19f97a6b103b990300dec03e3c5f42ec32756ce998377d4ea466
GET /v/t39.2093-6/275954299_284347873847191_1057485981137551166_n.srt?_nc_cat=107&ccb=1-7&_nc_sid=8d539b&_nc_ohc=4oBOWWp10FUAX_8fP_M&_nc_ht=scontent-lhr8-1.xx&oh=00_AfBPGryafstnmB5t62p1E84yVWAv9qmNqL349u3zibNnHQ&oe=63B721D2 HTTP/1.1
Host: scontent-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Sat, 19 Mar 2022 22:24:15 GMT
content-type: text/srt
x-haystack-needlechecksum: 3082194316
x-needle-checksum: 3023582867
content-length: 4851
content-digest: adler32=3023582867
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1679558926
date: Sun, 01 Jan 2023 19:20:29 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: BIBj27Z53ZFgQx1MMyF-TpGrJNzu0HW5_qyKH-N_4GxSW6d4uMe92a3CLIiJ8fmmv1258bXVQzNYJWmY7G39mE5GaADdQYG0ZzVqhtV7qnU
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/320659300_1380464482487565_2500778052563854171_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=zgZJEkSesTEAX8haPPx&_nc_ht=video-lhr8-2.xx&oh=00_AfDWs0SSohUJTyiJpQBlcb3ZlRCl76P_vP0478XfIozD_w&oe=63B6F180&bytestart=3385&byteend=208037
157.240.214.18200 OK 205 kB URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t39.25447-2/320659300_1380464482487565_2500778052563854171_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=zgZJEkSesTEAX8haPPx&_nc_ht=video-lhr8-2.xx&oh=00_AfDWs0SSohUJTyiJpQBlcb3ZlRCl76P_vP0478XfIozD_w&oe=63B6F180&bytestart=3385&byteend=208037
IP 157.240.214.18:0
Size 205 kB (204653 bytes)
Hash f70726629b75a415e59abf64b9c27472
86123dd001a34a8d1eb2d7158ae1c20b1c2e79b5
16b25bba3bf595250bfa70d92f61fe8d8a039708d7d301a6259b1d8ff693c6a8
GET /v/t39.25447-2/320659300_1380464482487565_2500778052563854171_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=zgZJEkSesTEAX8haPPx&_nc_ht=video-lhr8-2.xx&oh=00_AfDWs0SSohUJTyiJpQBlcb3ZlRCl76P_vP0478XfIozD_w&oe=63B6F180&bytestart=3385&byteend=208037 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Mon, 19 Dec 2022 22:55:06 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 3429302216
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3429302216
content-length: 204653
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: seDGBdb7yZ3bksgAryiL921G0Sk8AERnggdhuJKRR986prwUuEwGKPxBXjs3XqCGkbP6ByTJ4bzmItpma3p8dibZxRbIPTPZSYPe2pStp-A
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311820421_1142804729969695_6725684795689264609_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=HG-2O5DqvwwAX_yv0vL&_nc_ht=video-lhr8-1.xx&oh=00_AfC6CEwhpo7z5vcRsTgQnx-BUlagY_ovvTZPhCtUk0_BMw&oe=63B6F462&bytestart=2545&byteend=187163
157.240.221.10200 OK 185 kB URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311820421_1142804729969695_6725684795689264609_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=HG-2O5DqvwwAX_yv0vL&_nc_ht=video-lhr8-1.xx&oh=00_AfC6CEwhpo7z5vcRsTgQnx-BUlagY_ovvTZPhCtUk0_BMw&oe=63B6F462&bytestart=2545&byteend=187163
IP 157.240.221.10:0
Size 185 kB (184619 bytes)
Hash 372a11b11a433dd52217cee371460a7d
7de659cc88ea51e5bd2b7703d8c6dd8248dfd326
a4b46276add7df54bfde449cdbf41a6342b0bd944196cb6b4e2deec05037e017
GET /v/t39.25447-2/311820421_1142804729969695_6725684795689264609_n.mp4?_nc_cat=108&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=HG-2O5DqvwwAX_yv0vL&_nc_ht=video-lhr8-1.xx&oh=00_AfC6CEwhpo7z5vcRsTgQnx-BUlagY_ovvTZPhCtUk0_BMw&oe=63B6F462&bytestart=2545&byteend=187163 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Fri, 14 Oct 2022 20:42:46 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 957100464
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=957100464
content-length: 184619
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311811338_3362919720658722_3255166589900326795_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=PhQDyyrPQnkAX_YfJeW&_nc_ht=video-lhr8-1.xx&oh=00_AfAt3zGTMXNcJ-DN8CvHiY6hSIwezQRNu6P6FwzV9MvjNw&oe=63B5EFB1&bytestart=2114&byteend=310237
157.240.221.10200 OK 308 kB URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t39.25447-2/311811338_3362919720658722_3255166589900326795_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=PhQDyyrPQnkAX_YfJeW&_nc_ht=video-lhr8-1.xx&oh=00_AfAt3zGTMXNcJ-DN8CvHiY6hSIwezQRNu6P6FwzV9MvjNw&oe=63B5EFB1&bytestart=2114&byteend=310237
IP 157.240.221.10:0
Size 308 kB (308124 bytes)
Hash 74efcb66f247d34dc5e3ddd2304745c5
ca65e091d61020955f38254d8b5ff6019801a290
c6e9c1facb36add951a97ac7bce58e56632b3b66659fcdc3d61c4fa7f86295cf
GET /v/t39.25447-2/311811338_3362919720658722_3255166589900326795_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=PhQDyyrPQnkAX_YfJeW&_nc_ht=video-lhr8-1.xx&oh=00_AfAt3zGTMXNcJ-DN8CvHiY6hSIwezQRNu6P6FwzV9MvjNw&oe=63B5EFB1&bytestart=2114&byteend=310237 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Fri, 14 Oct 2022 19:33:18 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2194211579
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2194211579
content-length: 308124
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mybettermb.com/adServe/banners?tid=444974_871472_0
52.116.53.155200 OK 0 B URL HTTP/2 mybettermb.com/adServe/banners?tid=444974_871472_0
IP 52.116.53.155:0
Analyzer Verdict Alert fortinet Phishing
GET /adServe/banners?tid=444974_871472_0 HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lilmaaloumiat.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 19:20:24 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
mybettermb.com/adServe/banners/findBanner?num=1&keyword=%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20%D8%A7%D9%84%D9%85%D8%B7%D9%84%D9%88%D8%A8%20%D8%AE%D9%84%D8%A7%D9%84%20%D8%AB%D9%88%D8%A7%D9%86%D9%8A%2C%20%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA%3A%20%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20&tid=444974_871472_0&type=js&ar=b&ts=c&ito=https%3A%2F%2Fp444974.mycdn.co&bs=37&referrer=https%3A%2F%2Fwww.lilmaaloumiat.com%2Fp%2Fblog-page.html%3F%3F%26%26url%3D_www.mediafire.com%2Ffile%2Fd3lx03ndmio0txr%2F%25D8%25B9%25D9%2584%25D9%2585%2B%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA.rar%2Ffile&ap=cmp%3DBANNER%26evp%3DHFz5zNIIs96fzq49jFkHXcQzYObQGwwUOT3TtbRhtKvabJ0w2GKOzLWI-xMpOASO%26sjv%3D143.1%26ctid%3D0%26th%3D939%26tw%3D1280%26inco%3D0%26tip%3D%25D8%25AC%25D8%25A7%25D8%25B1%25D9%258A%2520%25D8%25AA%25D8%25AD%25D9%2588%25D9%258A%25D9%2584%25D9%2583%25D9%2585%2520%25D8%25A5%25D9%2584%25D9%2589%2520%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B7%2520%25D8%25A7%25D9%2584%25D9%2585%25D8%25B7%25D9%2584%25D9%2588%25D8%25A8%2520%25D8%25AE%25D9%2584%25D8%25A7%25D9%2584%2520%25D8%25AB%25D9%2588%25D8%25A7%25D9%2586%25D9%258A%2520-%2520%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA&pid=444974&popeye=bXg9bnVsbCZteT1udWxsJmN4PW51bGwmY3k9bnVsbCZ3PTEyODAmaD05MzkmYz0xJnM9MSZ0PTEmaT0wJm89MCZzb19mYj0tMSZzb19nbz0tMSZzb19ncD0tMSZzb190dz0tMSZzcD0wMDAwMDAwMDAwMDAxMDAwMDAwMDAwMCZtbV9tbj0wJm1tX2FzPTAmbW1fYWQ9MCZtbV9tdD0wJm1tX3NjPTAmbW1fc2RjPTAmbmNycz0xNg%3D%3D&olive=1&callback=ITCncxtfkzed2
52.116.53.155200 OK 0 B URL HTTP/2 mybettermb.com/adServe/banners/findBanner?num=1&keyword=%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20%D8%A7%D9%84%D9%85%D8%B7%D9%84%D9%88%D8%A8%20%D8%AE%D9%84%D8%A7%D9%84%20%D8%AB%D9%88%D8%A7%D9%86%D9%8A%2C%20%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA%3A%20%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20&tid=444974_871472_0&type=js&ar=b&ts=c&ito=https%3A%2F%2Fp444974.mycdn.co&bs=37&referrer=https%3A%2F%2Fwww.lilmaaloumiat.com%2Fp%2Fblog-page.html%3F%3F%26%26url%3D_www.mediafire.com%2Ffile%2Fd3lx03ndmio0txr%2F%25D8%25B9%25D9%2584%25D9%2585%2B%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA.rar%2Ffile&ap=cmp%3DBANNER%26evp%3DHFz5zNIIs96fzq49jFkHXcQzYObQGwwUOT3TtbRhtKvabJ0w2GKOzLWI-xMpOASO%26sjv%3D143.1%26ctid%3D0%26th%3D939%26tw%3D1280%26inco%3D0%26tip%3D%25D8%25AC%25D8%25A7%25D8%25B1%25D9%258A%2520%25D8%25AA%25D8%25AD%25D9%2588%25D9%258A%25D9%2584%25D9%2583%25D9%2585%2520%25D8%25A5%25D9%2584%25D9%2589%2520%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B7%2520%25D8%25A7%25D9%2584%25D9%2585%25D8%25B7%25D9%2584%25D9%2588%25D8%25A8%2520%25D8%25AE%25D9%2584%25D8%25A7%25D9%2584%2520%25D8%25AB%25D9%2588%25D8%25A7%25D9%2586%25D9%258A%2520-%2520%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA&pid=444974&popeye=bXg9bnVsbCZteT1udWxsJmN4PW51bGwmY3k9bnVsbCZ3PTEyODAmaD05MzkmYz0xJnM9MSZ0PTEmaT0wJm89MCZzb19mYj0tMSZzb19nbz0tMSZzb19ncD0tMSZzb190dz0tMSZzcD0wMDAwMDAwMDAwMDAxMDAwMDAwMDAwMCZtbV9tbj0wJm1tX2FzPTAmbW1fYWQ9MCZtbV9tdD0wJm1tX3NjPTAmbW1fc2RjPTAmbmNycz0xNg%3D%3D&olive=1&callback=ITCncxtfkzed2
IP 52.116.53.155:0
GET /adServe/banners/findBanner?num=1&keyword=%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20%D8%A7%D9%84%D9%85%D8%B7%D9%84%D9%88%D8%A8%20%D8%AE%D9%84%D8%A7%D9%84%20%D8%AB%D9%88%D8%A7%D9%86%D9%8A%2C%20%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA%3A%20%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20&tid=444974_871472_0&type=js&ar=b&ts=c&ito=https%3A%2F%2Fp444974.mycdn.co&bs=37&referrer=https%3A%2F%2Fwww.lilmaaloumiat.com%2Fp%2Fblog-page.html%3F%3F%26%26url%3D_www.mediafire.com%2Ffile%2Fd3lx03ndmio0txr%2F%25D8%25B9%25D9%2584%25D9%2585%2B%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA.rar%2Ffile&ap=cmp%3DBANNER%26evp%3DHFz5zNIIs96fzq49jFkHXcQzYObQGwwUOT3TtbRhtKvabJ0w2GKOzLWI-xMpOASO%26sjv%3D143.1%26ctid%3D0%26th%3D939%26tw%3D1280%26inco%3D0%26tip%3D%25D8%25AC%25D8%25A7%25D8%25B1%25D9%258A%2520%25D8%25AA%25D8%25AD%25D9%2588%25D9%258A%25D9%2584%25D9%2583%25D9%2585%2520%25D8%25A5%25D9%2584%25D9%2589%2520%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B7%2520%25D8%25A7%25D9%2584%25D9%2585%25D8%25B7%25D9%2584%25D9%2588%25D8%25A8%2520%25D8%25AE%25D9%2584%25D8%25A7%25D9%2584%2520%25D8%25AB%25D9%2588%25D8%25A7%25D9%2586%25D9%258A%2520-%2520%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA&pid=444974&popeye=bXg9bnVsbCZteT1udWxsJmN4PW51bGwmY3k9bnVsbCZ3PTEyODAmaD05MzkmYz0xJnM9MSZ0PTEmaT0wJm89MCZzb19mYj0tMSZzb19nbz0tMSZzb19ncD0tMSZzb190dz0tMSZzcD0wMDAwMDAwMDAwMDAxMDAwMDAwMDAwMCZtbV9tbj0wJm1tX2FzPTAmbW1fYWQ9MCZtbV9tdD0wJm1tX3NjPTAmbW1fc2RjPTAmbmNycz0xNg%3D%3D&olive=1&callback=ITCncxtfkzed2 HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 19:20:25 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: rhid=82634283775; Max-Age=15552000; Expires=Fri, 30-Jun-2023 19:20:25 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
capdata=310532s.1_1672600825; Max-Age=86400; Expires=Mon, 02-Jan-2023 19:20:25 GMT; Domain=mybettermb.com; Path=/adServe; SameSite=None; secure;
content-encoding: gzip
X-Firefox-Spdy: h2
video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/275000260_540827517256689_5292483405514620249_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=ZnlFZdZ0-9IAX_M0IpO&_nc_ht=video-lhr8-1.xx&oh=00_AfAl4P7LJWh9KK5bO9unPKDKOkoAOm_dsiSE3gF7XZ3QGQ&oe=63B1FDA3&bytestart=783&byteend=2386
157.240.221.10200 OK 0 B URL HTTP/2 video-lhr8-1.xx.fbcdn.net/v/t42.1790-2/275000260_540827517256689_5292483405514620249_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=ZnlFZdZ0-9IAX_M0IpO&_nc_ht=video-lhr8-1.xx&oh=00_AfAl4P7LJWh9KK5bO9unPKDKOkoAOm_dsiSE3gF7XZ3QGQ&oe=63B1FDA3&bytestart=783&byteend=2386
IP 157.240.221.10:0
GET /v/t42.1790-2/275000260_540827517256689_5292483405514620249_n.mp4?_nc_cat=109&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=ZnlFZdZ0-9IAX_M0IpO&_nc_ht=video-lhr8-1.xx&oh=00_AfAl4P7LJWh9KK5bO9unPKDKOkoAOm_dsiSE3gF7XZ3QGQ&oe=63B1FDA3&bytestart=783&byteend=2386 HTTP/1.1
Host: video-lhr8-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 02 Mar 2022 06:40:31 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2629325003
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=2629325003
content-length: 1604
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mybettermb.com/adServe/banners?tid=444974_871470_1&tagid=2
52.116.53.155200 OK 0 B URL HTTP/2 mybettermb.com/adServe/banners?tid=444974_871470_1&tagid=2
IP 52.116.53.155:0
GET /adServe/banners?tid=444974_871470_1&tagid=2 HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lilmaaloumiat.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 19:20:24 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
mybettermb.com/adServe/banners?tid=444974_871470_2&pause=5
52.116.53.155200 OK 0 B URL HTTP/2 mybettermb.com/adServe/banners?tid=444974_871470_2&pause=5
IP 52.116.53.155:0
GET /adServe/banners?tid=444974_871470_2&pause=5 HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lilmaaloumiat.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 19:20:24 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Cairo:400,600,700
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Cairo:400,600,700
IP 142.250.74.106:0
GET /css?family=Cairo:400,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 01 Jan 2023 19:20:25 GMT
date: Sun, 01 Jan 2023 19:20:25 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mybettermb.com/adServe/banners/findBanner?num=1&keyword=%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20%D8%A7%D9%84%D9%85%D8%B7%D9%84%D9%88%D8%A8%20%D8%AE%D9%84%D8%A7%D9%84%20%D8%AB%D9%88%D8%A7%D9%86%D9%8A%2C%20%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA%3A%20%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20&tid=444974_871470_3&type=js&ar=b&ts=c&ito=https%3A%2F%2Fp444974.mycdn.co&bs=37&referrer=https%3A%2F%2Fwww.lilmaaloumiat.com%2Fp%2Fblog-page.html%3F%3F%26%26url%3D_www.mediafire.com%2Ffile%2Fd3lx03ndmio0txr%2F%25D8%25B9%25D9%2584%25D9%2585%2B%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA.rar%2Ffile&ap=cmp%3DFOOTER%26evp%3DHFz5zNIIs96fzq49jFkHXcQzYObQGwwUOT3TtbRhtKvabJ0w2GKOzAkYc1JkxjgS%26sjv%3D143.1%26ctid%3D0%26th%3D939%26tw%3D1280%26inco%3D0%26tip%3D%25D8%25AC%25D8%25A7%25D8%25B1%25D9%258A%2520%25D8%25AA%25D8%25AD%25D9%2588%25D9%258A%25D9%2584%25D9%2583%25D9%2585%2520%25D8%25A5%25D9%2584%25D9%2589%2520%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B7%2520%25D8%25A7%25D9%2584%25D9%2585%25D8%25B7%25D9%2584%25D9%2588%25D8%25A8%2520%25D8%25AE%25D9%2584%25D8%25A7%25D9%2584%2520%25D8%25AB%25D9%2588%25D8%25A7%25D9%2586%25D9%258A%2520-%2520%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA&pid=444974&popeye=bXg9bnVsbCZteT1udWxsJmN4PW51bGwmY3k9bnVsbCZ3PTEyODAmaD05MzkmYz0xJnM9MSZ0PTEmaT0wJm89MCZzb19mYj0tMSZzb19nbz0tMSZzb19ncD0tMSZzb190dz0tMSZzcD0wMDAwMDAwMDAwMDAxMDAwMDAwMDAwMCZtbV9tbj0wJm1tX2FzPTAmbW1fYWQ9MCZtbV9tdD0wJm1tX3NjPTAmbW1fc2RjPTAmbmNycz0xNg%3D%3D&olive=1&callback=ITCyyav89aob
52.116.53.155200 OK 0 B URL HTTP/2 mybettermb.com/adServe/banners/findBanner?num=1&keyword=%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20%D8%A7%D9%84%D9%85%D8%B7%D9%84%D9%88%D8%A8%20%D8%AE%D9%84%D8%A7%D9%84%20%D8%AB%D9%88%D8%A7%D9%86%D9%8A%2C%20%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA%3A%20%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20&tid=444974_871470_3&type=js&ar=b&ts=c&ito=https%3A%2F%2Fp444974.mycdn.co&bs=37&referrer=https%3A%2F%2Fwww.lilmaaloumiat.com%2Fp%2Fblog-page.html%3F%3F%26%26url%3D_www.mediafire.com%2Ffile%2Fd3lx03ndmio0txr%2F%25D8%25B9%25D9%2584%25D9%2585%2B%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA.rar%2Ffile&ap=cmp%3DFOOTER%26evp%3DHFz5zNIIs96fzq49jFkHXcQzYObQGwwUOT3TtbRhtKvabJ0w2GKOzAkYc1JkxjgS%26sjv%3D143.1%26ctid%3D0%26th%3D939%26tw%3D1280%26inco%3D0%26tip%3D%25D8%25AC%25D8%25A7%25D8%25B1%25D9%258A%2520%25D8%25AA%25D8%25AD%25D9%2588%25D9%258A%25D9%2584%25D9%2583%25D9%2585%2520%25D8%25A5%25D9%2584%25D9%2589%2520%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B7%2520%25D8%25A7%25D9%2584%25D9%2585%25D8%25B7%25D9%2584%25D9%2588%25D8%25A8%2520%25D8%25AE%25D9%2584%25D8%25A7%25D9%2584%2520%25D8%25AB%25D9%2588%25D8%25A7%25D9%2586%25D9%258A%2520-%2520%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA&pid=444974&popeye=bXg9bnVsbCZteT1udWxsJmN4PW51bGwmY3k9bnVsbCZ3PTEyODAmaD05MzkmYz0xJnM9MSZ0PTEmaT0wJm89MCZzb19mYj0tMSZzb19nbz0tMSZzb19ncD0tMSZzb190dz0tMSZzcD0wMDAwMDAwMDAwMDAxMDAwMDAwMDAwMCZtbV9tbj0wJm1tX2FzPTAmbW1fYWQ9MCZtbV9tdD0wJm1tX3NjPTAmbW1fc2RjPTAmbmNycz0xNg%3D%3D&olive=1&callback=ITCyyav89aob
IP 52.116.53.155:0
GET /adServe/banners/findBanner?num=1&keyword=%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20%D8%A7%D9%84%D9%85%D8%B7%D9%84%D9%88%D8%A8%20%D8%AE%D9%84%D8%A7%D9%84%20%D8%AB%D9%88%D8%A7%D9%86%D9%8A%2C%20%D9%84%D9%84%D9%85%D8%B9%D9%84%D9%88%D9%85%D9%8A%D8%A7%D8%AA%3A%20%D8%AC%D8%A7%D8%B1%D9%8A%20%D8%AA%D8%AD%D9%88%D9%8A%D9%84%D9%83%D9%85%20%D8%A5%D9%84%D9%89%20%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B7%20&tid=444974_871470_3&type=js&ar=b&ts=c&ito=https%3A%2F%2Fp444974.mycdn.co&bs=37&referrer=https%3A%2F%2Fwww.lilmaaloumiat.com%2Fp%2Fblog-page.html%3F%3F%26%26url%3D_www.mediafire.com%2Ffile%2Fd3lx03ndmio0txr%2F%25D8%25B9%25D9%2584%25D9%2585%2B%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA.rar%2Ffile&ap=cmp%3DFOOTER%26evp%3DHFz5zNIIs96fzq49jFkHXcQzYObQGwwUOT3TtbRhtKvabJ0w2GKOzAkYc1JkxjgS%26sjv%3D143.1%26ctid%3D0%26th%3D939%26tw%3D1280%26inco%3D0%26tip%3D%25D8%25AC%25D8%25A7%25D8%25B1%25D9%258A%2520%25D8%25AA%25D8%25AD%25D9%2588%25D9%258A%25D9%2584%25D9%2583%25D9%2585%2520%25D8%25A5%25D9%2584%25D9%2589%2520%25D8%25A7%25D9%2584%25D8%25B1%25D8%25A7%25D8%25A8%25D8%25B7%2520%25D8%25A7%25D9%2584%25D9%2585%25D8%25B7%25D9%2584%25D9%2588%25D8%25A8%2520%25D8%25AE%25D9%2584%25D8%25A7%25D9%2584%2520%25D8%25AB%25D9%2588%25D8%25A7%25D9%2586%25D9%258A%2520-%2520%25D9%2584%25D9%2584%25D9%2585%25D8%25B9%25D9%2584%25D9%2588%25D9%2585%25D9%258A%25D8%25A7%25D8%25AA&pid=444974&popeye=bXg9bnVsbCZteT1udWxsJmN4PW51bGwmY3k9bnVsbCZ3PTEyODAmaD05MzkmYz0xJnM9MSZ0PTEmaT0wJm89MCZzb19mYj0tMSZzb19nbz0tMSZzb19ncD0tMSZzb190dz0tMSZzcD0wMDAwMDAwMDAwMDAxMDAwMDAwMDAwMCZtbV9tbj0wJm1tX2FzPTAmbW1fYWQ9MCZtbV9tdD0wJm1tX3NjPTAmbW1fc2RjPTAmbmNycz0xNg%3D%3D&olive=1&callback=ITCyyav89aob HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lilmaaloumiat.com/
Cookie: capdata=310532s.1_1672600825; rhid=82634283775
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 19:20:25 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: rhid=82634283775; Max-Age=15552000; Expires=Fri, 30-Jun-2023 19:20:25 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
capdata=310532s.2_1672600825; Max-Age=86400; Expires=Mon, 02-Jan-2023 19:20:25 GMT; Domain=mybettermb.com; Path=/adServe; SameSite=None; secure;
content-encoding: gzip
X-Firefox-Spdy: h2
video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/271574158_1856315751229207_8990909142510206663_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=gVcIzpKJEdMAX8GOxeM&_nc_ht=video-lhr8-2.xx&oh=00_AfAwqOb79VsaLnzRKHOQmYqF27Rm5uY_koZ98JDN5BwvrA&oe=63B1FA41&bytestart=0&byteend=907
157.240.214.18200 OK 0 B URL HTTP/2 video-lhr8-2.xx.fbcdn.net/v/t42.1790-2/271574158_1856315751229207_8990909142510206663_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=gVcIzpKJEdMAX8GOxeM&_nc_ht=video-lhr8-2.xx&oh=00_AfAwqOb79VsaLnzRKHOQmYqF27Rm5uY_koZ98JDN5BwvrA&oe=63B1FA41&bytestart=0&byteend=907
IP 157.240.214.18:0
GET /v/t42.1790-2/271574158_1856315751229207_8990909142510206663_n.mp4?_nc_cat=102&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=gVcIzpKJEdMAX8GOxeM&_nc_ht=video-lhr8-2.xx&oh=00_AfAwqOb79VsaLnzRKHOQmYqF27Rm5uY_koZ98JDN5BwvrA&oe=63B1FA41&bytestart=0&byteend=907 HTTP/1.1
Host: video-lhr8-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 12 Jan 2022 21:34:40 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 1011631862
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=1011631862
content-length: 908
accept-ranges: bytes
x-fb-trip-id: 207616858
date: Sun, 01 Jan 2023 19:20:29 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2