Overview

URLwww.stockfootageonline.com/website.php?url=monroekuot.world/x/rbf1a11faa7xhg6z/dx/mp/cqp/?graminifolious=p&elucubrations=vmm&consciousnesses=xbr
IP 54.194.44.236 (Ireland)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-09 12:24:28 UTC
StatusLoading report..
IDS alerts0
Blocklist alert17
urlquery alerts No alerts detected
Tags None

Domain Summary (15)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-12-08 17:18:07 UTC 172.64.155.188
fonts.googleapis.com (6) 8877 2012-05-23 12:41:44 UTC 2022-12-08 17:12:12 UTC 142.250.74.106
fonts.gstatic.com (1) 0 2014-04-02 10:51:04 UTC 2022-12-08 17:14:55 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-08 17:14:01 UTC 34.117.237.239
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-12-08 17:15:52 UTC 93.184.220.29
monroekuot.world (1) 0 2022-11-26 05:44:27 UTC 2022-12-08 04:10:47 UTC 80.66.64.201 Unknown ranking
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-12-08 15:50:00 UTC 34.120.237.76
ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-12-08 17:12:01 UTC 142.250.74.131
www.stockfootageonline.com (2) 0 2015-02-20 10:17:27 UTC 2022-12-07 02:22:34 UTC 54.194.44.236 Unknown ranking
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-12-08 17:21:04 UTC 34.160.144.191
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-12-08 17:20:00 UTC 54.149.51.98
ajax.googleapis.com (1) 12905 2012-05-22 10:38:03 UTC 2022-12-08 17:15:55 UTC 142.250.74.74
r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2022-12-08 17:12:06 UTC 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2022-12-08 17:12:32 UTC 35.241.9.150
trytruetipsnews.world (58) 0 2022-12-07 17:11:08 UTC 2022-12-08 04:11:22 UTC 172.96.189.186 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-09 2 trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7 Phishing
2022-12-09 2 trytruetipsnews.world/static/lib/backDay.js Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_keto_p/dist/c-2-750px.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_keto_p/dist/c-3-750px.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_keto_p/dist/c-4-750px.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6/counter_app.js Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6/files/entertainment_STK/cs (...) Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_keto_p/dist/c-8-750px.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_keto_p/dist/c-9-750px.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_keto_p/dist/c-10-750px.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_new/dist/s-1.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_new/dist/s-2.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_new/dist/s-3.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6_new/dist/s-4.jpeg Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6/getProductCounter.js?_=167 (...) Phishing
2022-12-09 2 trytruetipsnews.world/static/diet/en/arch_celeb6/style.css?v=8 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-09 2 monroekuot.world Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 54.194.44.236
Date UQ / IDS / BL URL IP
2023-01-30 10:38:39 +0000 0 - 4 - 0 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236
2023-01-30 09:46:07 +0000 0 - 4 - 75 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236
2023-01-30 07:43:04 +0000 0 - 4 - 15 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236
2023-01-30 03:47:23 +0000 0 - 4 - 15 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236
2023-01-29 22:58:15 +0000 0 - 4 - 78 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-01-30 11:34:34 +0000 0 - 2 - 0 ocdn.ks-ekspert.pl/f99991a3834dcd9a7baab90c7a (...) 54.230.111.19
2023-01-30 11:23:24 +0000 0 - 2 - 0 cda.kyact.biz/cda/common/login.php?ccd=cbef638113 52.196.237.196
2023-01-30 11:20:42 +0000 0 - 1 - 0 cubecoded.com/Screensavers/download/Undertale (...) 35.165.166.234
2023-01-30 11:20:36 +0000 0 - 3 - 0 ocdn.ks-ekspert.pl/9f4fbb82968cc451543d8db08c (...) 54.230.111.39
2023-01-30 11:19:55 +0000 0 - 1 - 3 s3.us-east-2.amazonaws.com/ysecurelyqavictim/ (...) 52.219.110.169


Last 5 reports on domain: stockfootageonline.com
Date UQ / IDS / BL URL IP
2023-01-30 10:38:39 +0000 0 - 4 - 0 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236
2023-01-30 09:46:07 +0000 0 - 4 - 75 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236
2023-01-30 07:43:04 +0000 0 - 4 - 15 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236
2023-01-30 03:47:23 +0000 0 - 4 - 15 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236
2023-01-29 22:58:15 +0000 0 - 4 - 78 www.stockfootageonline.com/website.php?url=ge (...) 54.194.44.236


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-28 23:41:43 +0000 0 - 4 - 15 www.moposa.com/Open/LinkOut.aspx?dt=201305311 (...) 40.118.102.46
2023-01-28 23:14:07 +0000 0 - 5 - 15 genusabcdm.world/ye/xhyxbq1s1km1km76u/s/h/zbu (...) 85.192.48.45
2023-01-28 22:23:04 +0000 0 - 5 - 14 genusabcdm.world/nkc/paw1tgw1h176/k/ab/nbq/?b (...) 85.192.48.45
2023-01-28 21:30:03 +0000 0 - 4 - 17 www.kentoushi.jp/php/r.php?url=genusabcdm.wor (...) 153.121.48.60
2023-01-28 20:42:15 +0000 0 - 4 - 15 www.goabroad.com/newsletter/feature/5280/9964 (...) 167.99.215.229

JavaScript

Executed Scripts (8)

Executed Evals (2)
#1 JavaScript::Eval (size: 1616) - SHA256: a97d02df7557232147a7cdc69e9246f23760c3caacded403b7eb1a9c84d571d6
var dev = false;
loyal_customer = false;
var one_product = false;
counter_style = 'style_6';
light_counter = '0';
product_counter = 794;
product_counter_d = 0;
product_counter_h = 0;
product_counter_m = 13;
product_counter_s = 14;
timer_backColor = '#EAEAEA'
progress_bar_color = '#FF0000'
days_label = 'DAYS';
hours_label = 'HOURS';
minutes_label = 'MINUTES';
seconds_label = 'SECONDS';
progress_display = 1;
timer_display = 1;
banner_bar_display = 0;
banner_bar_bg_color = '#F44336';
product_progress_bar = 3;
product_set_scarcity_number = 20;
min_scarcity_number_drop_to = 8;
product_set_scarcity_time = 5;
progress_bar_color = '#FF0000'
timer_backColor = '#EAEAEA'
shop_progress_bar_percent = '10'
scarcity_enable_cookies = '0'
jQuery('#text_above_timer').hide();
jQuery('#text_above_timer').css('font-family', 'Lato');
jQuery('#text_above_timer').css('font-weight', 'normal');
jQuery('#text_above_timer').css('font-size', '30px');
jQuery('#text_above_timer').css('line-height', '30px');
jQuery('#text_above_timer').html("Hurry! Only <span id='scarcitynumber'></span> Discounted Bottles Left. Claim Yours Now!<div style='background:#EAEAEA' class='w3-round' id='hurrifyProgressContainer'><div class='w3-container w3-round w3-center' id='hurrifyProgress' style='height:10px;margin:7px 0;width:100%;background:#FF0000'></div></div>").css('color', '#000000');
jQuery('#text_above_timer').css('text-align', 'left');
jQuery('#h_bottom_text').css('font-size', '20px');
jQuery('#h_bottom_text').css('color', '#000000');
$("#h_bottom_text").text("Sale Ends Once The Timer Hits Zero!");
#2 JavaScript::Eval (size: 33884) - SHA256: 148c3614b5e5555f36f45f1cfe28ebd9610ad4804ce09131a1db0a2da3d81766
/**
 * Basic structure: TC_Class is the public class that is returned upon being called
 *
 * So, if you do
 *      var tc = $(".timer").TimeCircles();
 *
 * tc will contain an instance of the public TimeCircles class. It is important to
 * note that TimeCircles is not chained in the conventional way, check the
 * documentation for more info on how TimeCircles can be chained.
 *
 * After being called/created, the public TimerCircles class will then- for each element
 * within it's collection, either fetch or create an instance of the private class.
 * Each function called upon the public class will be forwarded to each instance
 * of the private classes within the relevant element collection
 **/
(function($) {

    var useWindow = window;

    // From //developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/keys
    if (!Object.keys) {
        Object.keys = (function() {
            'use strict';
            var hasOwnProperty = Object.prototype.hasOwnProperty,
                hasDontEnumBug = !({
                    toString: null
                }).propertyIsEnumerable('toString'),
                dontEnums = [
                    'toString',
                    'toLocaleString',
                    'valueOf',
                    'hasOwnProperty',
                    'isPrototypeOf',
                    'propertyIsEnumerable',
                    'constructor'
                ],
                dontEnumsLength = dontEnums.length;

            return function(obj) {
                if (typeof obj !== 'object' && (typeof obj !== 'function' || obj === null)) {
                    throw new TypeError('Object.keys called on non-object');
                }

                var result = [],
                    prop, i;

                for (prop in obj) {
                    if (hasOwnProperty.call(obj, prop)) {
                        result.push(prop);
                    }
                }

                if (hasDontEnumBug) {
                    for (i = 0; i < dontEnumsLength; i++) {
                        if (hasOwnProperty.call(obj, dontEnums[i])) {
                            result.push(dontEnums[i]);
                        }
                    }
                }
                return result;
            };
        }());
    }

    // Used to disable some features on IE8
    var limited_mode = false;
    var tick_duration = 200; // in ms

    var debug = (location.hash === "#debug");

    function debug_log(msg) {
        if (debug) {
            console.log(msg);
        }
    }

    var allUnits = ["Days", "Hours", "Minutes", "Seconds"];
    var nextUnits = {
        Seconds: "Minutes",
        Minutes: "Hours",
        Hours: "Days",
        Days: "Years"
    };
    var secondsIn = {
        Seconds: 1,
        Minutes: 60,
        Hours: 3600,
        Days: 86400,
        Months: 2678400,
        Years: 31536000
    };

    /**
     * Converts hex color code into object containing integer values for the r,g,b use
     * This function (hexToRgb) originates from:
     * //stackoverflow.com/questions/5623838/rgb-to-hex-and-hex-to-rgb
     * @param {string} hex color code
     */
    function hexToRgb(hex) {
        // Expand shorthand form (e.g. "03F") to full form (e.g. "0033FF")
        var shorthandRegex = /^#?([a-f\d])([a-f\d])([a-f\d])$/i;
        hex = hex.replace(shorthandRegex, function(m, r, g, b) {
            return r + r + g + g + b + b;
        });

        var result = /^#?([a-f\d]{2})([a-f\d]{2})([a-f\d]{2})$/i.exec(hex);
        return result ? {
            r: parseInt(result[1], 16),
            g: parseInt(result[2], 16),
            b: parseInt(result[3], 16)
        } : null;
    }

    function isCanvasSupported() {
        var elem = document.createElement('canvas');
        return !!(elem.getContext && elem.getContext('2d'));
    }

    /**
     * Function s4() and guid() originate from:
     * //stackoverflow.com/questions/105034/how-to-create-a-guid-uuid-in-javascript
     */
    function s4() {
        return Math.floor((1 + Math.random()) * 0x10000)
            .toString(16)
            .substring(1);
    }

    /**
     * Creates a unique id
     * @returns {String}
     */
    function guid() {
        return s4() + s4() + '-' + s4() + '-' + s4() + '-' +
            s4() + '-' + s4() + s4() + s4();
    }

    /**
     * Array.prototype.indexOf fallback for IE8
     * @param {Mixed} mixed
     * @returns {Number}
     */
    if (!Array.prototype.indexOf) {
        Array.prototype.indexOf = function(elt /*, from*/ ) {
            var len = this.length >>> 0;

            var from = Number(arguments[1]) || 0;
            from = (from < 0) ? Math.ceil(from) : Math.floor(from);
            if (from < 0)
                from += len;

            for (; from < len; from++) {
                if (from in this &&
                    this[from] === elt)
                    return from;
            }
            return -1;
        };
    }

    function parse_date(str) {
        var match = str.match(/^[0-9]{4}-[0-9]{2}-[0-9]{2}\s[0-9]{1,2}:[0-9]{2}:[0-9]{2}$/);
        if (match !== null && match.length > 0) {
            var parts = str.split(" ");
            var date = parts[0].split("-");
            var time = parts[1].split(":");
            return new Date(date[0], date[1] - 1, date[2], time[0], time[1], time[2]);
        }
        // Fallback for different date formats
        var d = Date.parse(str);
        if (!isNaN(d))
            return d;
        d = Date.parse(str.replace(/-/g, '/').replace('T', ' '));
        if (!isNaN(d))
            return d;
        // Cant find anything
        return new Date();
    }

    function parse_times(diff, old_diff, total_duration, units, floor) {
        var raw_time = {};
        var raw_old_time = {};
        var time = {};
        var pct = {};
        var old_pct = {};
        var old_time = {};

        var greater_unit = null;
        for (var i = 0; i < units.length; i++) {
            var unit = units[i];
            var maxUnits;

            if (greater_unit === null) {
                maxUnits = total_duration / secondsIn[unit];
            } else {
                maxUnits = secondsIn[greater_unit] / secondsIn[unit];
            }

            var curUnits = (diff / secondsIn[unit]);
            var oldUnits = (old_diff / secondsIn[unit]);

            if (floor) {
                if (curUnits > 0) curUnits = Math.floor(curUnits);
                else curUnits = Math.ceil(curUnits);
                if (oldUnits > 0) oldUnits = Math.floor(oldUnits);
                else oldUnits = Math.ceil(oldUnits);
            }

            if (unit !== "Days") {
                curUnits = curUnits % maxUnits;
                oldUnits = oldUnits % maxUnits;
            }

            raw_time[unit] = curUnits;
            time[unit] = Math.abs(curUnits);
            raw_old_time[unit] = oldUnits;
            old_time[unit] = Math.abs(oldUnits);
            pct[unit] = Math.abs(curUnits) / maxUnits;
            old_pct[unit] = Math.abs(oldUnits) / maxUnits;

            greater_unit = unit;
        }

        return {
            raw_time: raw_time,
            raw_old_time: raw_old_time,
            time: time,
            old_time: old_time,
            pct: pct,
            old_pct: old_pct
        };
    }

    var TC_Instance_List = {};

    function updateUsedWindow() {
        if (typeof useWindow.TC_Instance_List !== "undefined") {
            TC_Instance_List = useWindow.TC_Instance_List;
        } else {
            useWindow.TC_Instance_List = TC_Instance_List;
        }
        initializeAnimationFrameHandler(useWindow);
    };

    function initializeAnimationFrameHandler(w) {
        var vendors = ['webkit', 'moz'];
        for (var x = 0; x < vendors.length && !w.requestAnimationFrame; ++x) {
            w.requestAnimationFrame = w[vendors[x] + 'RequestAnimationFrame'];
            w.cancelAnimationFrame = w[vendors[x] + 'CancelAnimationFrame'];
        }

        if (!w.requestAnimationFrame || !w.cancelAnimationFrame) {
            w.requestAnimationFrame = function(callback, element, instance) {
                if (typeof instance === "undefined")
                    instance = {
                        data: {
                            last_frame: 0
                        }
                    };
                var currTime = new Date().getTime();
                var timeToCall = Math.max(0, 16 - (currTime - instance.data.last_frame));
                var id = w.setTimeout(function() {
                    callback(currTime + timeToCall);
                }, timeToCall);
                instance.data.last_frame = currTime + timeToCall;
                return id;
            };
            w.cancelAnimationFrame = function(id) {
                clearTimeout(id);
            };
        }
    };


    var TC_Instance = function(element, options) {
        this.element = element;
        this.container;
        this.listeners = null;
        this.data = {
            paused: false,
            last_frame: 0,
            animation_frame: null,
            interval_fallback: null,
            timer: false,
            total_duration: null,
            prev_time: null,
            drawn_units: [],
            text_elements: {
                Days: null,
                Hours: null,
                Minutes: null,
                Seconds: null
            },
            attributes: {
                canvas: null,
                context: null,
                item_size: null,
                line_width: null,
                radius: null,
                outer_radius: null
            },
            state: {
                fading: {
                    Days: false,
                    Hours: false,
                    Minutes: false,
                    Seconds: false
                }
            }
        };

        this.config = null;
        this.setOptions(options);
        this.initialize();
    };

    TC_Instance.prototype.clearListeners = function() {
        this.listeners = {
            all: [],
            visible: []
        };
    };

    TC_Instance.prototype.addTime = function(seconds_to_add) {
        if (this.data.attributes.ref_date instanceof Date) {
            var d = this.data.attributes.ref_date;
            d.setSeconds(d.getSeconds() + seconds_to_add);
        } else if (!isNaN(this.data.attributes.ref_date)) {
            this.data.attributes.ref_date += (seconds_to_add * 1000);
        }
    };

    TC_Instance.prototype.initialize = function(clear_listeners) {
        // Initialize drawn units
        this.data.drawn_units = [];
        for (var i = 0; i < Object.keys(this.config.time).length; i++) {
            var unit = Object.keys(this.config.time)[i];
            if (this.config.time[unit].show) {
                this.data.drawn_units.push(unit);
            }
        }

        // Avoid stacking
        $(this.element).children('div.time_circles').remove();

        if (typeof clear_listeners === "undefined")
            clear_listeners = true;
        if (clear_listeners || this.listeners === null) {
            this.clearListeners();
        }
        this.container = $("<div>");
        this.container.addClass('time_circles');
        if (this.config.light == 1 || this.config.light == true)
            this.container.addClass('light');
        this.container.appendTo(this.element);

        // Determine the needed width and height of TimeCircles
        var height = this.element.offsetHeight;
        var width = this.element.offsetWidth;
        if (height === 0)
            height = $(this.element).height();
        if (width === 0)
            width = $(this.element).width();
        if (height === 0 && width > 0)
            height = width / this.data.drawn_units.length;
        else if (width === 0 && height > 0)
            width = height * this.data.drawn_units.length;

        // Create our canvas and set it to the appropriate size
        var canvasElement = document.createElement('canvas');
        canvasElement.width = width;
        canvasElement.height = height;

        // Add canvas elements
        this.data.attributes.canvas = $(canvasElement);
        this.data.attributes.canvas.appendTo(this.container);

        // Check if the browser has browser support
        var canvasSupported = isCanvasSupported();
        // If the browser doesn't have browser support, check if explorer canvas is loaded
        // (A javascript library that adds canvas support to browsers that don't have it)
        if (!canvasSupported && typeof G_vmlCanvasManager !== "undefined") {
            G_vmlCanvasManager.initElement(canvasElement);
            limited_mode = true;
            canvasSupported = true;
        }
        if (canvasSupported) {
            this.data.attributes.context = canvasElement.getContext('2d');
        }

        this.data.attributes.item_size = Math.min(width / this.data.drawn_units.length, height);
        this.data.attributes.line_width = this.data.attributes.item_size * this.config.fg_width;
        this.data.attributes.radius = ((this.data.attributes.item_size * 0.8) - this.data.attributes.line_width) / 2;
        this.data.attributes.outer_radius = this.data.attributes.radius + 0.5 * Math.max(this.data.attributes.line_width, this.data.attributes.line_width * this.config.bg_width);

        // Prepare Time Elements
        var i = 0;
        for (var key in this.data.text_elements) {
            if (!this.config.time[key].show)
                continue;

            var textElement = $("<div>");
            textElement.addClass('textDiv_' + key);
            textElement.css("top", Math.round(0.35 * this.data.attributes.item_size));
            textElement.css("left", Math.round(i++ * this.data.attributes.item_size));
            textElement.css("width", this.data.attributes.item_size);
            textElement.appendTo(this.container);

            var headerElement = $("<h4>");
            headerElement.text(this.config.time[key].text); // Options
            headerElement.css("font-size", Math.round(this.config.text_size * this.data.attributes.item_size));
            headerElement.css("line-height", Math.round(this.config.text_size * this.data.attributes.item_size) + "px");
            headerElement.appendTo(textElement);

            var numberElement = $("<span>");
            numberElement.css("font-size", Math.round(3 * this.config.text_size * this.data.attributes.item_size));
            numberElement.css("line-height", Math.round(this.config.text_size * this.data.attributes.item_size) + "px");
            numberElement.appendTo(textElement);

            this.data.text_elements[key] = numberElement;
        }

        this.start();
        if (!this.config.start) {
            this.data.paused = true;
        }

        // Set up interval fallback
        var _this = this;
        this.data.interval_fallback = useWindow.setInterval(function() {
            _this.update.call(_this, true);
        }, 100);
    };

    TC_Instance.prototype.update = function(nodraw) {
        if (typeof nodraw === "undefined") {
            nodraw = false;
        } else if (nodraw && this.data.paused) {
            return;
        }

        if (limited_mode) {
            //Per unit clearing doesn't work in IE8 using explorer canvas, so do it in one time. The downside is that radial fade cant be used
            this.data.attributes.context.clearRect(0, 0, this.data.attributes.canvas[0].width, this.data.attributes.canvas[0].hright);
        }
        var diff, old_diff;

        var prevDate = this.data.prev_time;
        var curDate = new Date();
        this.data.prev_time = curDate;

        if (prevDate === null)
            prevDate = curDate;

        // If not counting past zero, and time < 0, then simply draw the zero point once, and call stop
        if (!this.config.count_past_zero) {
            if (curDate > this.data.attributes.ref_date) {
                for (var i = 0; i < this.data.drawn_units.length; i++) {
                    var key = this.data.drawn_units[i];

                    // Set the text value
                    this.data.text_elements[key].text("0");
                    var x = (i * this.data.attributes.item_size) + (this.data.attributes.item_size / 2);
                    var y = this.data.attributes.item_size / 2;
                    var color = this.config.time[key].color;
                    this.drawArc(x, y, color, 0);
                }
                this.stop();
                return;
            }
        }

        // Compare current time with reference
        diff = (this.data.attributes.ref_date - curDate) / 1000;
        old_diff = (this.data.attributes.ref_date - prevDate) / 1000;

        var floor = this.config.animation !== "smooth";

        var visible_times = parse_times(diff, old_diff, this.data.total_duration, this.data.drawn_units, floor);
        var all_times = parse_times(diff, old_diff, secondsIn["Years"], allUnits, floor);

        var i = 0;
        var j = 0;
        var lastKey = null;

        var cur_shown = this.data.drawn_units.slice();
        for (var i in allUnits) {
            var key = allUnits[i];

            // Notify (all) listeners
            if (Math.floor(all_times.raw_time[key]) !== Math.floor(all_times.raw_old_time[key])) {
                this.notifyListeners(key, Math.floor(all_times.time[key]), Math.floor(diff), "all");
            }

            if (cur_shown.indexOf(key) < 0)
                continue;

            // Notify (visible) listeners
            if (Math.floor(visible_times.raw_time[key]) !== Math.floor(visible_times.raw_old_time[key])) {
                this.notifyListeners(key, Math.floor(visible_times.time[key]), Math.floor(diff), "visible");
            }

            if (!nodraw) {
                // Set the text value
                this.data.text_elements[key].text(Math.floor(Math.abs(visible_times.time[key])));

                var x = (j * this.data.attributes.item_size) + (this.data.attributes.item_size / 2);
                var y = this.data.attributes.item_size / 2;
                var color = this.config.time[key].color;

                if (this.config.animation === "smooth") {
                    if (lastKey !== null && !limited_mode) {
                        if (Math.floor(visible_times.time[lastKey]) > Math.floor(visible_times.old_time[lastKey])) {
                            this.radialFade(x, y, color, 1, key);
                            this.data.state.fading[key] = true;
                        } else if (Math.floor(visible_times.time[lastKey]) < Math.floor(visible_times.old_time[lastKey])) {
                            this.radialFade(x, y, color, 0, key);
                            this.data.state.fading[key] = true;
                        }
                    }
                    if (!this.data.state.fading[key]) {
                        this.drawArc(x, y, color, visible_times.pct[key]);
                    }
                } else {
                    this.animateArc(x, y, color, visible_times.pct[key], visible_times.old_pct[key], (new Date()).getTime() + tick_duration);
                }
            }
            lastKey = key;
            j++;
        }

        // Dont request another update if we should be paused
        if (this.data.paused || nodraw) {
            return;
        }

        // We need this for our next frame either way
        var _this = this;
        var update = function() {
            _this.update.call(_this);
        };

        // Either call next update immediately, or in a second
        if (this.config.animation === "smooth") {
            // Smooth animation, Queue up the next frame
            this.data.animation_frame = useWindow.requestAnimationFrame(update, _this.element, _this);
        } else {
            // Tick animation, Don't queue until very slightly after the next second happens
            var delay = (diff % 1) * 1000;
            if (delay < 0)
                delay = 1000 + delay;
            delay += 50;

            _this.data.animation_frame = useWindow.setTimeout(function() {
                _this.data.animation_frame = useWindow.requestAnimationFrame(update, _this.element, _this);
            }, delay);
        }
    };

    TC_Instance.prototype.animateArc = function(x, y, color, target_pct, cur_pct, animation_end) {
        if (this.data.attributes.context === null)
            return;

        var diff = cur_pct - target_pct;
        if (Math.abs(diff) > 0.5) {
            if (target_pct === 0) {
                this.radialFade(x, y, color, 1);
            } else {
                this.radialFade(x, y, color, 0);
            }
        } else {
            var progress = (tick_duration - (animation_end - (new Date()).getTime())) / tick_duration;
            if (progress > 1)
                progress = 1;

            var pct = (cur_pct * (1 - progress)) + (target_pct * progress);
            this.drawArc(x, y, color, pct);

            //var show_pct =
            if (progress >= 1)
                return;
            var _this = this;
            useWindow.requestAnimationFrame(function() {
                _this.animateArc(x, y, color, target_pct, cur_pct, animation_end);
            }, this.element);
        }
    };

    TC_Instance.prototype.drawArc = function(x, y, color, pct) {
        if (this.data.attributes.context === null)
            return;

        var clear_radius = Math.max(this.data.attributes.outer_radius, this.data.attributes.item_size / 2);
        if (!limited_mode) {
            this.data.attributes.context.clearRect(
                x - clear_radius,
                y - clear_radius,
                clear_radius * 2,
                clear_radius * 2
            );
        }

        if (this.config.use_background) {
            this.data.attributes.context.beginPath();
            this.data.attributes.context.arc(x, y, this.data.attributes.radius, 0, 2 * Math.PI, false);
            this.data.attributes.context.lineWidth = this.data.attributes.line_width * this.config.bg_width;

            // line color
            this.data.attributes.context.strokeStyle = this.config.circle_bg_color;
            this.data.attributes.context.stroke();
        }

        // Direction
        var startAngle, endAngle, counterClockwise;
        var defaultOffset = (-0.5 * Math.PI);
        var fullCircle = 2 * Math.PI;
        startAngle = defaultOffset + (this.config.start_angle / 360 * fullCircle);
        var offset = (2 * pct * Math.PI);

        if (this.config.direction === "Both") {
            counterClockwise = false;
            startAngle -= (offset / 2);
            endAngle = startAngle + offset;
        } else {
            if (this.config.direction === "Clockwise") {
                counterClockwise = false;
                endAngle = startAngle + offset;
            } else {
                counterClockwise = true;
                endAngle = startAngle - offset;
            }
        }

        this.data.attributes.context.beginPath();
        this.data.attributes.context.arc(x, y, this.data.attributes.radius, startAngle, endAngle, counterClockwise);
        this.data.attributes.context.lineWidth = this.data.attributes.line_width;

        // line color
        this.data.attributes.context.strokeStyle = color;
        this.data.attributes.context.stroke();
    };

    TC_Instance.prototype.radialFade = function(x, y, color, from, key) {
        // TODO: Make fade_time option
        var rgb = hexToRgb(color);
        var _this = this; // We have a few inner scopes here that will need access to our instance

        var step = 0.2 * ((from === 1) ? -1 : 1);
        var i;
        for (i = 0; from <= 1 && from >= 0; i++) {
            // Create inner scope so our variables are not changed by the time the Timeout triggers
            (function() {
                var delay = 50 * i;
                var rgba = "rgba(" + rgb.r + ", " + rgb.g + ", " + rgb.b + ", " + (Math.round(from * 10) / 10) + ")";
                useWindow.setTimeout(function() {
                    _this.drawArc(x, y, rgba, 1);
                }, delay);
            }());
            from += step;
        }
        if (typeof key !== undefined) {
            useWindow.setTimeout(function() {
                _this.data.state.fading[key] = false;
            }, 50 * i);
        }
    };

    TC_Instance.prototype.timeLeft = function() {
        if (this.data.paused && typeof this.data.timer === "number") {
            return this.data.timer;
        }
        var now = new Date();
        return ((this.data.attributes.ref_date - now) / 1000);
    };

    TC_Instance.prototype.start = function() {
        useWindow.cancelAnimationFrame(this.data.animation_frame);
        useWindow.clearTimeout(this.data.animation_frame)

        // Check if a date was passed in html attribute or jquery data
        var attr_data_date = $(this.element).data('date');
        if (typeof attr_data_date === "undefined") {
            attr_data_date = $(this.element).attr('data-date');
        }
        if (typeof attr_data_date === "string") {
            this.data.attributes.ref_date = parse_date(attr_data_date);
        }
        // Check if this is an unpause of a timer
        else if (typeof this.data.timer === "number") {
            if (this.data.paused) {
                this.data.attributes.ref_date = (new Date()).getTime() + (this.data.timer * 1000);
            }
        } else {
            // Try to get data-timer
            var attr_data_timer = $(this.element).data('timer');
            if (typeof attr_data_timer === "undefined") {
                attr_data_timer = $(this.element).attr('data-timer');
            }
            if (typeof attr_data_timer === "string") {
                attr_data_timer = parseFloat(attr_data_timer);
            }
            if (typeof attr_data_timer === "number") {
                this.data.timer = attr_data_timer;
                this.data.attributes.ref_date = (new Date()).getTime() + (attr_data_timer * 1000);
            } else {
                // data-timer and data-date were both not set
                // use config date
                this.data.attributes.ref_date = this.config.ref_date;
            }
        }

        // Start running
        this.data.paused = false;
        this.update.call(this);
    };

    TC_Instance.prototype.restart = function() {
        this.data.timer = false;
        this.start();
    };

    TC_Instance.prototype.stop = function() {
        if (typeof this.data.timer === "number") {
            this.data.timer = this.timeLeft(this);
        }
        // Stop running
        this.data.paused = true;
        useWindow.cancelAnimationFrame(this.data.animation_frame);
    };

    TC_Instance.prototype.destroy = function() {
        this.clearListeners();
        this.stop();
        useWindow.clearInterval(this.data.interval_fallback);
        this.data.interval_fallback = null;

        this.container.remove();
        $(this.element).removeAttr('data-tc-id');
        $(this.element).removeData('tc-id');
    };

    TC_Instance.prototype.setOptions = function(options) {
        if (this.config === null) {
            this.default_options.ref_date = new Date();
            this.config = $.extend(true, {}, this.default_options);
        }
        $.extend(true, this.config, options);

        // Use window.top if use_top_frame is true
        if (this.config.use_top_frame) {
            useWindow = window.top;
        } else {
            useWindow = window;
        }
        updateUsedWindow();

        this.data.total_duration = this.config.total_duration;
        if (typeof this.data.total_duration === "string") {
            if (typeof secondsIn[this.data.total_duration] !== "undefined") {
                // If set to Years, Months, Days, Hours or Minutes, fetch the secondsIn value for that
                this.data.total_duration = secondsIn[this.data.total_duration];
            } else if (this.data.total_duration === "Auto") {
                // If set to auto, total_duration is the size of 1 unit, of the unit type bigger than the largest shown
                for (var i = 0; i < Object.keys(this.config.time).length; i++) {
                    var unit = Object.keys(this.config.time)[i];
                    if (this.config.time[unit].show) {
                        this.data.total_duration = secondsIn[nextUnits[unit]];
                        break;
                    }
                }
            } else {
                // If it's a string, but neither of the above, user screwed up.
                this.data.total_duration = secondsIn["Years"];
                console.error("Valid values for TimeCircles config.total_duration are either numeric, or (string) Years, Months, Days, Hours, Minutes, Auto");
            }
        }
    };

    TC_Instance.prototype.addListener = function(f, context, type) {
        if (typeof f !== "function")
            return;
        if (typeof type === "undefined")
            type = "visible";
        this.listeners[type].push({
            func: f,
            scope: context
        });
    };

    TC_Instance.prototype.notifyListeners = function(unit, value, total, type) {
        for (var i = 0; i < this.listeners[type].length; i++) {
            var listener = this.listeners[type][i];
            listener.func.apply(listener.scope, [unit, value, total]);
        }
    };

    TC_Instance.prototype.default_options = {
        ref_date: new Date(),
        start: true,
        animation: "smooth",
        count_past_zero: true,
        circle_bg_color: "#60686F",
        use_background: true,
        fg_width: 0.1,
        bg_width: 1.2,
        text_size: 0.07,
        total_duration: "Auto",
        direction: "Clockwise",
        use_top_frame: false,
        start_angle: 0,
        time: {
            Days: {
                show: true,
                text: "Days",
                color: "#FC6"
            },
            Hours: {
                show: true,
                text: "Hours",
                color: "#9CF"
            },
            Minutes: {
                show: true,
                text: "Minutes",
                color: "#BFB"
            },
            Seconds: {
                show: true,
                text: "Seconds",
                color: "#F99"
            }
        }
    };

    // Time circle class
    var TC_Class = function(elements, options) {
        this.elements = elements;
        this.options = options;
        this.foreach();
    };

    TC_Class.prototype.getInstance = function(element) {
        var instance;

        var cur_id = $(element).data("tc-id");
        if (typeof cur_id === "undefined") {
            cur_id = guid();
            $(element).attr("data-tc-id", cur_id);
        }
        if (typeof TC_Instance_List[cur_id] === "undefined") {
            var options = this.options;
            var element_options = $(element).data('options');
            if (typeof element_options === "string") {
                element_options = JSON.parse(element_options);
            }
            if (typeof element_options === "object") {
                options = $.extend(true, {}, this.options, element_options);
            }
            instance = new TC_Instance(element, options);
            TC_Instance_List[cur_id] = instance;
        } else {
            instance = TC_Instance_List[cur_id];
            if (typeof this.options !== "undefined") {
                instance.setOptions(this.options);
            }
        }
        return instance;
    };

    TC_Class.prototype.addTime = function(seconds_to_add) {
        this.foreach(function(instance) {
            instance.addTime(seconds_to_add);
        });
    };

    TC_Class.prototype.foreach = function(callback) {
        var _this = this;
        this.elements.each(function() {
            var instance = _this.getInstance(this);
            if (typeof callback === "function") {
                callback(instance);
            }
        });
        return this;
    };

    TC_Class.prototype.start = function() {
        this.foreach(function(instance) {
            instance.start();
        });
        return this;
    };

    TC_Class.prototype.stop = function() {
        this.foreach(function(instance) {
            instance.stop();
        });
        return this;
    };

    TC_Class.prototype.restart = function() {
        this.foreach(function(instance) {
            instance.restart();
        });
        return this;
    };

    TC_Class.prototype.rebuild = function() {
        this.foreach(function(instance) {
            instance.initialize(false);
        });
        return this;
    };

    TC_Class.prototype.getTime = function() {
        return this.getInstance(this.elements[0]).timeLeft();
    };

    TC_Class.prototype.addListener = function(f, type) {
        if (typeof type === "undefined")
            type = "visible";
        var _this = this;
        this.foreach(function(instance) {
            instance.addListener(f, _this.elements, type);
        });
        return this;
    };

    TC_Class.prototype.destroy = function() {
        this.foreach(function(instance) {
            instance.destroy();
        });
        return this;
    };

    TC_Class.prototype.end = function() {
        return this.elements;
    };

    $.fn.TimeCircles = function(options) {
        return new TC_Class(this, options);
    };
}(jQuery));

Executed Writes (1)
#1 JavaScript::Write (size: 25) - SHA256: a03434f8b4ecc070e009b969fb4fec177f40bfbb2534259da34807a02d6155f8
Friday, December 09, 2022


HTTP Transactions (99)


Request Response
                                        
                                            GET /website.php?url=https://monroekuot.world/x/rbf1a11faa7xhg6z/dx/mp/cqp/?graminifolious=p&elucubrations=vmm&consciousnesses=xbr HTTP/1.1 
Host: www.stockfootageonline.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         54.194.44.236
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 09 Dec 2022 12:14:38 GMT
Server: Apache/2.2.22 (Ubuntu)
Location: https://www.stockfootageonline.com/website.php?url=https://monroekuot.world/x/rbf1a11faa7xhg6z/dx/mp/cqp/%3fgraminifolious=p&elucubrations=vmm&consciousnesses=xbr
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 346
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   346
Md5:    39160525a819ca0b3778902d164bccf0
Sha1:   52d6656465a3b0441494f6196ef6410da54a574b
Sha256: dfee210ede61e17bdc574f69705c3960151cc27f1995e010a9d8df9e41e98249
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3317
Expires: Fri, 09 Dec 2022 13:19:34 GMT
Date: Fri, 09 Dec 2022 12:24:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9802
Expires: Fri, 09 Dec 2022 15:07:39 GMT
Date: Fri, 09 Dec 2022 12:24:17 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 12:07:50 GMT
age: 987
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4263
Expires: Fri, 09 Dec 2022 13:35:20 GMT
Date: Fri, 09 Dec 2022 12:24:17 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: tYJkZUvRUb0iRmsVB7AQ6OAimqGL6rNY0JfalbnQBWj+KPd9HLvDBYeDJ3cmPXLxYcQ5TQZQRA/syNLA3mL67A==
x-amz-request-id: S12000ZME92HEFM7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 11:48:19 GMT
age: 2158
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 09 Dec 2022 12:24:17 GMT
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 12:24:17 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 09:58:34 GMT
Expires: Tue, 13 Dec 2022 09:58:33 GMT
Etag: "8b921b7593980bbaa3b19f2ba3545b08163956ed"
Cache-Control: max-age=336255,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776db7854b530b4d-OSL

                                        
                                            GET /website.php?url=https://monroekuot.world/x/rbf1a11faa7xhg6z/dx/mp/cqp/%3fgraminifolious=p&elucubrations=vmm&consciousnesses=xbr HTTP/1.1 
Host: www.stockfootageonline.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         54.194.44.236
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Fri, 09 Dec 2022 12:14:38 GMT
Server: Apache/2.2.22 (Ubuntu)
X-Powered-By: PHP/5.3.10-1ubuntu3.19
Location: https://monroekuot.world/x/rbf1a11faa7xhg6z/dx/mp/cqp/?graminifolious=p&www.stockfootageonline.com/=1
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 12:07:45 GMT
age: 992
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4E1003E07EC3AE43557FC7A13166143D8D836280B63F7E8E67A15E8CF97C45E9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21589
Expires: Fri, 09 Dec 2022 18:24:06 GMT
Date: Fri, 09 Dec 2022 12:24:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1315
Cache-Control: max-age=162272
Date: Fri, 09 Dec 2022 12:24:18 GMT
Etag: "6392faaf-1d7"
Expires: Sun, 11 Dec 2022 09:28:50 GMT
Last-Modified: Fri, 09 Dec 2022 09:06:55 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /x/rbf1a11faa7xhg6z/dx/mp/cqp/?graminifolious=p&www.stockfootageonline.com/=1 HTTP/1.1 
Host: monroekuot.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         80.66.64.201
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 09 Dec 2022 12:24:18 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://trytruetipsnews.world/hit.php?a=1nor&c=d&s=11176


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: tVMGu/DUelAeiFt3AsCRGQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.149.51.98
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sp1YXi29iuhzTE2KSe6qpCRD8mk=

                                        
                                            GET /hit.php?a=1nor&c=d&s=11176 HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         172.96.189.186
HTTP/2 303 See Other
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 0
location: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
set-cookie: UUID=U2474-85-6843-429837-234964; expires=Sat, 10 Dec 2022 12:24:18 GMT; path=/ _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4883
Expires: Fri, 09 Dec 2022 13:45:42 GMT
Date: Fri, 09 Dec 2022 12:24:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4883
Expires: Fri, 09 Dec 2022 13:45:42 GMT
Date: Fri, 09 Dec 2022 12:24:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4883
Expires: Fri, 09 Dec 2022 13:45:42 GMT
Date: Fri, 09 Dec 2022 12:24:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4883
Expires: Fri, 09 Dec 2022 13:45:42 GMT
Date: Fri, 09 Dec 2022 12:24:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4883
Expires: Fri, 09 Dec 2022 13:45:42 GMT
Date: Fri, 09 Dec 2022 12:24:19 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7960
x-amzn-requestid: beadd240-39d0-407d-a890-6a095657cac3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEd8HC0oAMFUag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb459-44d4f63c62f58684782ef14a;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kTEbkncBnAJmQE8cdAqvDtejiwaetpRBsVcpLXy1h52lO4iUkzmOGA==
via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 16:28:48 GMT
age: 71731
etag: "cfb1e5bcab2148a777889680e6e36b9d7e8917ec"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7960
Md5:    eb00a2a503a690cee3e4dd729b5bc9bd
Sha1:   cfb1e5bcab2148a777889680e6e36b9d7e8917ec
Sha256: 7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:41:46 GMT
age: 31353
etag: "7558222788f06623ddae6e883413e38e1146281e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7897
Md5:    8c3214044657f3b876d1f1848bca5684
Sha1:   7558222788f06623ddae6e883413e38e1146281e
Sha256: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H067kZXU_djWxbWO34bYMqa0xZ-WF9ntEBhZ-kV_TDoJFXQL_J1hqQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:34:27 GMT
age: 31792
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6578
Md5:    8546542f00ea29ef4df6ab8d3c7c2164
Sha1:   5c8ffe91490006a9890188b53f875568c2b6bd8f
Sha256: 7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5169
x-amzn-requestid: 277a1b04-4e19-4313-8aac-5f9ab9076305
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEdkFGrIAMFvHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb456-5b21edd57297665012d536cc;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Xi-bshsYa4LlKbJgAt0h-lPnB_5uQbqln5JGBRE8io2Fp1y41cS9xg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 04:08:48 GMT
age: 29731
etag: "ebb97e5b97f394e8c67098f55581d5329ce819a2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5169
Md5:    06514ce96ae21cb01f526a5febdcbeb4
Sha1:   ebb97e5b97f394e8c67098f55581d5329ce819a2
Sha256: 4099a2fb6ddc4feaa30f357a180d64aeb7c9fc73f115fc762d5fe5c221d2e89e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7557
x-amzn-requestid: 400d1465-ecbf-4d95-8aa8-4dce5dca0716
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctluwGo4oAMFhTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee991-6dba29ae7065d5347a1a420d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:04:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Lazl-stakC-31gMuQ2WzH9uFkIb0g7HaaM3xkwSFdFJMWKTaKqrBEQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 12:33:10 GMT
age: 85869
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7557
Md5:    5de5d319f43d9c9c641419d96655541f
Sha1:   cde4c7fa0145d3645af17e34c83c63c08f76a076
Sha256: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7Dp35PIr_WYUI1bBa21AvmCMEPi0d3jnhuS8eEk3Q3CXRcGWAnkD8g==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 17:01:04 GMT
age: 69795
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5188
Md5:    fba9a3854df65740512f96efe7442e58
Sha1:   8fbff7725c842d70e047c635a725723a9dc9c55a
Sha256: 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
                                        
                                            GET /intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7 HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 47316
x-powered-by: ARR/2.5(1bf37c79c)
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (320)
Size:   47316
Md5:    5911e9d8313d30c6927c579ef266566f
Sha1:   74eb754e6120dbf73ca331382029f41764df93b2
Sha256: b918edb22f5584da185075da8d7154ff807957143f6000d4b6242e7b290596f5

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/lib/backDay.js HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 3812
last-modified: Tue, 16 Aug 2022 14:11:33 GMT
etag: "62fba595-ee4"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   3812
Md5:    cd128ccd697bbdbe51ef7fc613afc3d9
Sha1:   328f4e11869cb85335d47f2941484e3d89432728
Sha256: a289400acd54ae6fd6f6792d1c1753c023daadae0485e928339bba249c36a025

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/mobile-logo.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 8633
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-21b9"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 246x119, components 3\012- data
Size:   8633
Md5:    d40c1cb77ba8f2aa41fac2ab1b61ff65
Sha1:   5a719ffabd32de166b1f5883dc0c8c80a5df8b89
Sha256: 824405e56bc8ce92b17497686df245dec0e7d4fd4624e84bb3bb6316ae991194
                                        
                                            GET /static/diet/en/arch_celeb6_keto_p/dist/c-1-750px.png HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 8967
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-2307"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 750 x 98, 8-bit colormap, non-interlaced\012- data
Size:   8967
Md5:    5c87d9113bdacbf04f4e660bf4f7f8f8
Sha1:   d8978c0c767799389b8df92398a6e73938b94a51
Sha256: b4dde1ac421def0c68641a50c506a4bc0821c5242be31eab7da4a488104519a4
                                        
                                            GET /static/diet/en/arch_celeb6_keto_p/dist/c-2-750px.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 48428
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-bd2c"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x400, components 3\012- data
Size:   48428
Md5:    75a34b41fa2c6402ac7d644067d46422
Sha1:   9ab5054caa4497314aed35ca3fc4e11751d5ec90
Sha256: 3f6f01cad214ff31b4f0ddd47c2785b3e42bbebaa967137cfefdfe9610591017

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6_keto_p/dist/c-3-750px.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 60459
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-ec2b"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x478, components 3\012- data
Size:   60459
Md5:    206f3d97973bfd3b4d42d27e6062a51f
Sha1:   4c083b68f84d1a80ab2be36cd2598b9647efe316
Sha256: 31cb49d5ec6d69d6b79b12989659794eba1079a2d6a76c0401df35884f91bea6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6_keto_p/dist/c-4-750px.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 58468
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-e464"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x464, components 3\012- data
Size:   58468
Md5:    79eb31886de695d83d9775332bdbb765
Sha1:   3348f9dde8934d84b7d424544193d367f0d26f21
Sha256: 62bc1ac0919a2cfd97fcac15f25d963570141f87884ac87e028231830ee0edf8

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7/theme_2tuw61.css?CID=44d208f2 HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 21
set-cookie: _view=true; expires=Sat, 10 Dec 2022 12:24:19 GMT; path=/
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   21
Md5:    18344450471966e26d48e47bf2171ee3
Sha1:   aac149a94aa35965e088a6a63c428d6056275ab2
Sha256: 4e0f2cb203e4cbd5c7433d348c079f8e08f305de9b8fc88ae19ff4c57974962f
                                        
                                            GET /static/diet/en/arch_celeb6/counter_app.js HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 15012
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-3aa4"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   15012
Md5:    16de5be56adcf32c74d7069fdaf2b4aa
Sha1:   6d3a108adcf4c1b235d8b8499d83feac40ff8fd3
Sha256: 35f66526b3d4b45f17974fe426db6ba4dd618026f649c43efd7093e492f3d576

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/css/jquery-1.js HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 95921
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-176b1"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32047)
Size:   95921
Md5:    da339b96f76fac65a1d0262e83dac3cc
Sha1:   bfd07d3f7ecf8ebc441bb3b36ca5ddb1a7535f9b
Sha256: f8c0f5afde87341004934473533ad7239a20b687b6f08ee8a85cc2db73086f45

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/productimage/keto-complete/complete-1.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 119576
last-modified: Mon, 28 Mar 2022 08:42:25 GMT
etag: "624174f1-1d318"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x499, components 3\012- data
Size:   119576
Md5:    b563b6042c1d5e37ac02093f2bfe4f00
Sha1:   e9682e77d770fd89bf902c743d82449d57978f18
Sha256: 5ba2079a0affd45ae23f1e700cd213aa33ed9c14c74dbf8fb659fae34ffdf9c7
                                        
                                            GET /static/productimage/keto-complete/complete-2.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 151342
last-modified: Mon, 28 Mar 2022 08:42:25 GMT
etag: "624174f1-24f2e"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x364, components 3\012- data
Size:   151342
Md5:    24ba2100e8cd9724dd3ff8b94db1b000
Sha1:   393340b353971bca9e303797525ac2da132c5137
Sha256: 9cb78e19252cc137c47bc18a5458f241c3cfd190835b2840bedd8f997680f668
                                        
                                            GET /static/diet/en/arch_celeb6_keto_p/img/c-7.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 46151
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-b447"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 778x130, components 3\012- data
Size:   46151
Md5:    991a012248fe5710a2afb09857395121
Sha1:   e179796142f9ad8e7930be6ed7deaaf3f58584b1
Sha256: 58d6600f1d0c60d37ab6ff5735d65a6eebc730781177820776ed3c733a0c6d6e
                                        
                                            GET /static/diet/en/arch_celeb6_keto_p/dist/c-8-750px.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 35625
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-8b29"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x325, components 3\012- data
Size:   35625
Md5:    99cbfd6000d0d88051eb1337152db07f
Sha1:   e0a1b2eea23b955c879d83424fce4c98c1d9cd0e
Sha256: 738f5c37363b6a8c3fd91d2141ee6e9231cfc2084f76a96fcb98b999c79128b2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6_keto_p/dist/c-9-750px.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 33896
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-8468"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x325, components 3\012- data
Size:   33896
Md5:    99bbb0bc6b42e30cfafccb0651fb74ca
Sha1:   6d6cdcbbc40dc3dc78abe8fd8c5ca2fb8c34c254
Sha256: 15743fb9dc165b5cc9a9ce12394338967102b1b44257e5ae3e5709c07af55131

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6_keto_p/dist/c-10-750px.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 46615
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-b617"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x325, components 3\012- data
Size:   46615
Md5:    a2dfe8276c3da42b2130298858a8d6fa
Sha1:   b3e7b77b7781c54b47b30a28694d12ffaf791ff1
Sha256: 6c36c45838472d799c4a11863766472f04a532118ff2f5b87bdba8cf71906de6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/productimage/keto-complete/keto-complete.png HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 51123
last-modified: Mon, 28 Mar 2022 08:42:25 GMT
etag: "624174f1-c7b3"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 561, 8-bit colormap, non-interlaced\012- data
Size:   51123
Md5:    f11ceaf7c30e1c121719b3d67113eceb
Sha1:   3d973877e29420f9eb542b2ddaead883fe2304e5
Sha256: 8d75966169ae427823349bec5ed8fb557278191ca57284b561ef5e85d1075942
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/btn.png HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 2618
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-a3a"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 492 x 102, 4-bit colormap, non-interlaced\012- data
Size:   2618
Md5:    2030462b8e67d6d831e40786743424d7
Sha1:   5c4532defff7122ca93d8f346956f1d481b03042
Sha256: d5a22c4bfda1f7b5194ee24fc1db5eea3abac22e395097f244e58bfb037c7951
                                        
                                            GET /static/diet/en/arch_celeb6_new/dist/s-1.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 41808
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-a350"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x668, components 3\012- data
Size:   41808
Md5:    f0ac28d935ef9f8e3e5ac349c505ad57
Sha1:   b409a1b6a8afcc2a2be065ab2bf00c32b2b41747
Sha256: f7cca732b099f38b8e400975be7eaea1cc4b2d9f22e94b380c58248347c11aba

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6_new/dist/s-2.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 62205
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-f2fd"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 736x736, components 3\012- data
Size:   62205
Md5:    1e3ee063add328de6b5f606a83331361
Sha1:   3828ccfea41aed6dab0c6e2474a09f63f1be714d
Sha256: 1dfd0f9b35aef59eed378bd20bd51cd405773d141b4d8aa44dc04448f5f5309a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6_new/dist/s-3.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 33645
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-836d"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x549, components 3\012- data
Size:   33645
Md5:    fcbae26cef7baa9e1aadc1403ad7c08b
Sha1:   c3b265fde6d75d3a7834505a96b49747e504e980
Sha256: 61d7b22b4b7ae095a84f86b33700a6785891e22abf231cb83846f601df14ffcb

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6_new/dist/s-4.jpeg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 40860
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-9f9c"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x553, components 3\012- data
Size:   40860
Md5:    6e53e8998c46784f476d0941b88285b4
Sha1:   25f9e1f8010678b38b70f397e7d73bd6cc9655b6
Sha256: 0593bd4265f50fb83251ada483f31b3989dd1b6c793100c6a80c49621f5f157a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/image_1_.png HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 39095
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-98b7"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 321 x 93, 8-bit/color RGBA, non-interlaced\012- data
Size:   39095
Md5:    eb68b487c7ba6ca1b6196bb950b8b226
Sha1:   5b1994b36255ac348c84aa22ad5287a1108cd43f
Sha256: 6b2709b105b4f12a1334757ba60c25b79f9133e9c6926dbb743c3c2d65dfefd0
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/offer.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 15160
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-3b38"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x97, components 3\012- data
Size:   15160
Md5:    c3104778ff786f76de3c837699042b14
Sha1:   d43784d7b465c2536b6be5ddc967614c120dbe3e
Sha256: 3802169c613bf4bf6439219904e23d01c9c22e7c67d27ad58d0ccad291ecbb25
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/checkmark-green-sm.png HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 406
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-196"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 18 x 20, 8-bit colormap, non-interlaced\012- data
Size:   406
Md5:    e481441f85b8bcb6812120ed3f852415
Sha1:   6a1ff528bfd88d599ae1c1b4193a38f86f5ade25
Sha256: de04c71f33976101b4cf2cdfc9fa6c1e270f937d6ec1b33eccea3d1e1c53fc22
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/btn-v2.png HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 6748
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-1a5c"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 529 x 102, 8-bit colormap, non-interlaced\012- data
Size:   6748
Md5:    fa6dbd36232f942a48bed25b5a15e18a
Sha1:   b711635b384556dff685a42dabcef09b2f70d3ba
Sha256: 2d2331dc14d50b70da550be1a28dbf47a53bb549ca9ba6134e2bb1c277772e9f
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/lewis.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1150
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-47e"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1150
Md5:    e1c17c3fe39f8f9b1baef3fed2ea5af1
Sha1:   39d8d3aba2cc5cc1ffe684b74c3fad2ccb2455df
Sha256: 2143810b96086b2e4f7418dc0e8b62a9bcd1a8f28f041a10423d1a5f12f51071
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/tanya.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1262
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4ee"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1262
Md5:    7a80eb9fd17f0ed6ac26230f07d55a9b
Sha1:   6a583733a7c90c766dbefdd95dbbe4e505882440
Sha256: 454c925843a41edff18869cbc0810cbdd14252df7e3517deb46c5c9baab0748d
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/jenni.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1232
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4d0"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1232
Md5:    f7a54de8e654e8ecedc63ccfb020379d
Sha1:   e778001b8a36ec422c82f8a1eea01d6b5f234297
Sha256: 9de82de8763aa6b0f6984a0ff9b3795aaa3455c9ecb47e430b1590c16b82a2d9
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/cash.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1184
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4a0"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1184
Md5:    3bd3f461831590cee74fbc29a20973f9
Sha1:   20604d0a9038204a3d757df6f889ea15da462aca
Sha256: 752bef7f82ef140a2228686444b3bf599ba7cf5ff3ce463e8d88e85f1925dc42
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/katy.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1284
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-504"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1284
Md5:    07ae0a4fa3ac42249f2b13980ab514e5
Sha1:   da0d2f1aebda057e55198903164c6a08099ab54f
Sha256: 1fc2f0473da3db97cbeb37fc6a49ff52e15a8b620267214342b2ef71676c66b3
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/amanda.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1160
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-488"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1160
Md5:    40c91fcad2530fd485c0c3817891a734
Sha1:   e224e3f6b6cac22d669cbe9e4b4dcb2ba41bb3fb
Sha256: 2d135797861efa70a58542ebc38e4dff38b7fd925fe1adb4debca93043853c7d
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/julie.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1257
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4e9"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1257
Md5:    beba04fce91962fba8733fda9ed54869
Sha1:   9491cec4147e5b38346562208ef0ffb7b7a97e85
Sha256: be9fe031e645a104077bd8049b2090a1ff405547acc853d6588de9fa00ff40d3
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/sarah.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1266
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4f2"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1266
Md5:    c7fd30f540e75dc5549861070bb3c7a4
Sha1:   dbd6971e49334d81639b6f2202bdd9de088cfc85
Sha256: 1de472afb09fadd00d0d00f9e7d66a8d0904d0d2d4d2ecedbd1b65ab8c1d8d41
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/kirs.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 992
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-3e0"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   992
Md5:    660a7171bc3730033812ca7a5fc3f8f9
Sha1:   32bdf8aedf202dd1b1ba016eebc5ccc9727ba1eb
Sha256: 4c38266456456509a5bae882e89e54b5e31ed5a3e3691974c7037f619d384546
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/celia.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1267
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4f3"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1267
Md5:    f2bfdc248cd0b41988f82997c8f26f3c
Sha1:   0e9eba7ed4acc853cbb8a5d3a2fc93b133bf9ce3
Sha256: 5bffd1330e662fbc51a61d96ce6b722474ff683084e57f4a4f9abee5d73f500a
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/alanna.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1092
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-444"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1092
Md5:    967385649087d3ce10b5285a780a26f5
Sha1:   fe2e9f439fdca19c9bb871ddbd7b3e1147b5714a
Sha256: 495346985e6cbd57fe2bc1c78cb4c69866fa9e67deedbc100be02de5579f6cfc
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/alice.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1305
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-519"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1305
Md5:    f4dfd64128553e659b68f338dbd8e92b
Sha1:   a963200740f0863589bbcb3492b8efe3b70f6fa1
Sha256: b86dc09484a8ef4ebfb0ce24fe7942f18afdd8a925360ab5a02396c9eade3e5a
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/mark.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1229
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4cd"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1229
Md5:    117c6acf2b5de488c89347276cfbca14
Sha1:   75fb98dff5e99aaf01c3ad5f36b7459a974ba26b
Sha256: ab75a88d1f4a72f325646490c61c4c059d16bf9bc0302d9d76a4a3b7130fc9f0
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/ashley.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1290
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-50a"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1290
Md5:    9fea3ad6e6d1df75b9a9cc880ac723a2
Sha1:   bdd34f90f39b597e007d56ed334d677507b9595b
Sha256: 9f95e41cacab8c9407238e0dd9b06eaceef88d1a326fe76e0807db0bd7fe9a6f
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/hick.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1233
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4d1"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1233
Md5:    f50a1a468d8e9521e71c352c52cd39c3
Sha1:   5140433a915aff9164fb89aaa04a4262d33b3787
Sha256: f7511bdd8af222ada21e4878ac179af0bcdf5e6dde60f76b01934137d6656894
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/brit.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1201
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4b1"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1201
Md5:    9b0602eb59a8ddb42f75c3c267f57acc
Sha1:   8853e905fac8707f8550802cdd7fce75c7c9dea0
Sha256: 8a5b0c4d43c5a70c42f66e65bf958511e5e4f4b943ec0c7b7316c9bb3529d480
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/shel.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1168
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-490"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1168
Md5:    5efb36017a08bf5de7adcad36b2984f9
Sha1:   f96a7626fe1564fb269d019ef4458b4b7fa06d7f
Sha256: 0cc67c1f9cffa5d02db1df6c0be182121cf59ff4d0acb4a00b8d3a31d7d76987
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/jill.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1244
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4dc"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1244
Md5:    cfbcc58d1740c94f7df97e17457cc384
Sha1:   ce722ab41042f94f6557ea203ae7d60514b975fb
Sha256: 93335ed4ed6047902ffdafea3d169f4ec4e5b43cb90012ec532cd4dc3eb20ef3
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/molly.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1157
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-485"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1157
Md5:    d52a5be20ca5d47b65f815bc7c710e78
Sha1:   f25e13041844039b7eee044add273a7a59ea8919
Sha256: 272b5b66c44301d94f827f32bc3e892a2737d648effb2ee358e79d16bae0eaf4
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/jenna.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1062
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-426"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1062
Md5:    e3191e8953facaad9856d3fecea7fc10
Sha1:   09ff4b87a7c5eeb921ee2d3955a19843878a593c
Sha256: c3aabd936aeb91488a0fa341e2382189c02015ce4d83364ae40bc93eefd7d8eb
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/laura.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1230
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4ce"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1230
Md5:    730e767ee0c4e867e582badbb6e977bc
Sha1:   6455824d6be1fdc55b8ad2773bfd86f613420cc0
Sha256: 3983ca68dc13bcfbd673cf031402b032655b6cb1136165572d384d6075081b57
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/sara.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1165
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-48d"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1165
Md5:    163926140bad8f68e8af561882445c99
Sha1:   1b01ea9876305c331e1e990b17c2a757edce21c6
Sha256: 4bca5a7cd0e9fcefab1e744db1f9dded3397e136b4dc092cb253297cac2ab971
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/silver.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1212
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-4bc"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1212
Md5:    1d655a4feead18dfcc61b3ef049c9473
Sha1:   47a1c504b67c3a2a878a9f9e1b228ecae3a58186
Sha256: 3a67268dfed0933e74fb9e8860ed9c2a23d9b478d77544999b2a7b37cf8d29af
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/got.jpg HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
content-length: 1158
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-486"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size:   1158
Md5:    46d7c4cc290c50cbc7096c2eca8400bd
Sha1:   ea2a9c5c9864d4435ef3d15e627038155ee91c0c
Sha256: 8ac5618a0acad3082ab90f50d990acadfc0440eecb4527de0f92de63ed27734a
                                        
                                            GET /static/diet/en/arch_celeb6/files/entertainment_STK/images/checkmark.png HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/static/diet/en/arch_celeb6_new/css/style.css
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ; _view=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:20 GMT
content-length: 308
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-134"
expires: Fri, 16 Dec 2022 12:24:20 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 30 x 29, 4-bit colormap, non-interlaced\012- data
Size:   308
Md5:    bbff66d10c2fc7f5b123d7156440780a
Sha1:   df1d966b27ae6b5161164e1993854583618518e0
Sha256: 61fffd2a646ccb7a9cbb9a226caf96d0727ff6be9a203e43f3061c3880ee9b4e
                                        
                                            GET /static/diet/en/arch_celeb6/100-sta.png HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/static/diet/en/arch_celeb6_new/css/style.css
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ; _view=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:20 GMT
content-length: 9899
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-26ab"
expires: Fri, 16 Dec 2022 12:24:20 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 150 x 150, 8-bit colormap, non-interlaced\012- data
Size:   9899
Md5:    a2218397dc795ea7425eb5625d8496f8
Sha1:   79e130f4f775d70640f0958b9048a0483e9ed9bb
Sha256: b84d6856605930759b7f6760f285a8bbea13f885733738ce19c64b6d7ecbb73d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 12:24:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/1.11.0/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33576
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 19:35:05 GMT
expires: Fri, 08 Dec 2023 19:35:05 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
age: 60555
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32341)
Size:   33576
Md5:    856f85cc1b07156fa844b44a10c236c2
Sha1:   7cef457c0e1cd0c20f4e699564ea8997f0332021
Sha256: c61aa9ce7b32f93630abac1a4b27382f9333e0ff69477c9d9099070ae0742b01
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 12:24:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/diet/en/arch_celeb6_new/img/favicon.png HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ; _view=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:20 GMT
content-length: 292
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-124"
expires: Fri, 16 Dec 2022 12:24:20 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 4-bit colormap, non-interlaced\012- data
Size:   292
Md5:    131da2b11612d156ac6ec94b82efb10d
Sha1:   e11d9dc334b390c0a2242fd6a3339d63331eaf18
Sha256: 4f799e044439147edc307e8c69144fee25639f2e2d5f20ff08c2724e82d40fa1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 12:24:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 12:24:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 12:24:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 12:24:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 12:24:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Ubuntu HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 12:24:20 GMT
date: Fri, 09 Dec 2022 12:24:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /static/diet/en/arch_celeb6/getProductCounter.js?_=1670588659453 HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ; _view=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:20 GMT
content-length: 1616
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-650"
expires: Fri, 16 Dec 2022 12:24:20 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (367)
Size:   1616
Md5:    800b8502394dc70809f1c7a203e20f98
Sha1:   52a7286e297879ba18d8e923340a2c9ead22c615
Sha256: a97d02df7557232147a7cdc69e9246f23760c3caacded403b7eb1a9c84d571d6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /static/diet/en/arch_celeb6/TimeCircles.css HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ; _view=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:20 GMT
content-length: 813
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
etag: "624174ef-32d"
expires: Fri, 16 Dec 2022 12:24:20 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   813
Md5:    407d71180fc5d057c031c016d61e4374
Sha1:   81207ddf8630b94142f5336b4d823bfcfd8ae3dc
Sha256: 11a550b372a2afc99d2f070ed7320626ffdd533c051db57b1dd017b249e44708
                                        
                                            GET /static/diet/en/arch_celeb6/style.css?v=8 HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ; _view=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:20 GMT
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
vary: Accept-Encoding
etag: W/"624174ef-1084"
expires: Fri, 16 Dec 2022 12:24:20 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   37120
Md5:    7328bdced91a41b1ab00c61895773f54
Sha1:   008a64a36ef92892da308f76db680941dada4ffb
Sha256: 065123c158f52ddbf99e2f58d17dd16332b6fbf78850614793c3d97c704c7bd7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Dec 2022 12:24:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://trytruetipsnews.world
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 11:07:48 GMT
expires: Sat, 09 Dec 2023 11:07:48 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
age: 4593
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size:   23580
Md5:    e1b3b5908c9cf23dfb2b9c52b9a023ab
Sha1:   fcd4136085f2a03481d9958cc6793a5ed98e714c
Sha256: 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
                                        
                                            GET /css?family=Josefin+Slab HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 12:24:20 GMT
date: Fri, 09 Dec 2022 12:24:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /static/diet/en/arch_celeb6_new/css/style.css HTTP/1.1 
Host: trytruetipsnews.world
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/intl/sqkw/compl?bhu=CWrKCfiCBwZnBb8CcT8w3x2dQdQbCLp4SVAJ7
Cookie: UUID=U2474-85-6843-429837-234964; _data=HeFSMLLhbq9Wvb1L95NUuMX6yaWrsF1ZZm3BJ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.96.189.186
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx/1.12.2
date: Fri, 09 Dec 2022 12:24:19 GMT
last-modified: Mon, 28 Mar 2022 08:42:23 GMT
vary: Accept-Encoding
etag: W/"624174ef-4cae"
expires: Fri, 16 Dec 2022 12:24:19 GMT
cache-control: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-robots-tag: none
strict-transport-security: max-age=15768000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Lato HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 12:24:20 GMT
date: Fri, 09 Dec 2022 12:24:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Open+Sans HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 12:24:20 GMT
date: Fri, 09 Dec 2022 12:24:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Abril+Fatface HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 12:24:20 GMT
date: Fri, 09 Dec 2022 12:24:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Droid+Sans HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trytruetipsnews.world/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 12:24:20 GMT
date: Fri, 09 Dec 2022 12:24:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---