| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5ceaca9fd4ad000cb435820812fc69c8 8168397aaf7b572c89a9c83f46c0b65e4ac509f2 9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3763
Expires: Wed, 07 Dec 2022 13:07:46 GMT
Date: Wed, 07 Dec 2022 12:05:03 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha0abf10fb7e96c1c98dacf2f013a68b4 acdd839bce85eadc78a8e821e32e00a958d5c0c8 b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8357
Expires: Wed, 07 Dec 2022 14:24:20 GMT
Date: Wed, 07 Dec 2022 12:05:03 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf83c5e33ba42e312ee398848bbb711f5 caa1fd23b1fbbe883292ded04404c1cfd861eb09 106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5579
Cache-Control: max-age=86354
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:03 GMT
Etag: "638f19f6-1d7"
Expires: Thu, 08 Dec 2022 12:04:17 GMT
Last-Modified: Tue, 06 Dec 2022 10:31:18 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6vH6HFbCalmarjyPBwT4O64b61FMGgQzdc3Wif6xA1vsCUbexeGUNqXQYhlFkCOVo4ZWDXoWeMw=
x-amz-request-id: B46F7PFR1CHNWMH4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 11:49:21 GMT
age: 942
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 11:20:28 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2675
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:05:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 11:11:20 GMT
cache-control: public,max-age=3600
age: 3223
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash053aff7451e55d4269dd9610ab070f3f b3376256d11d159b0c7280ba1515b78d7d9e12ca 24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5569
Cache-Control: max-age=167676
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:03 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 10:39:39 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 54.149.149.164 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.149.149.164:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IPPpgVOJFO9phhizC5scCw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ASWtDegWCg61jj3Cm8xJeBqLabE=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5860
Expires: Wed, 07 Dec 2022 13:42:45 GMT
Date: Wed, 07 Dec 2022 12:05:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5860
Expires: Wed, 07 Dec 2022 13:42:45 GMT
Date: Wed, 07 Dec 2022 12:05:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5860
Expires: Wed, 07 Dec 2022 13:42:45 GMT
Date: Wed, 07 Dec 2022 12:05:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5860
Expires: Wed, 07 Dec 2022 13:42:45 GMT
Date: Wed, 07 Dec 2022 12:05:05 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb15136d60fd0a5e0f657a4f5c75d540f 36082b7329d473829178f280cb71a83b1531e486 79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: YVR50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGtiCE9C3j0BUruNaFN2j1mKxCSouLmocmTXpmLMBJaLNyVwkXu1gQ==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 20:49:34 GMT
age: 54931
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg | 34.120.237.76 | 200 OK | 7.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc9257f2e3b9bd1b3aa262b0f4bf57968 4bcdd6ecd63834aa1010faf19457a97f37ae99fa 9afd592279c51b533b3bf72a860cf4a8f2bc6cf01b07d1ab6f11f0ff302e0ef6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7392
x-amzn-requestid: f4b6890a-7a8f-48f8-b2af-365cb5f681e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwREFiXoAMFSMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-009e524f30c72d0629c877bb;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C0-H0LUbxaxMEXoDf6PXEFAvVTj2D9K2M7eshRo39QzAAWSk2ubepA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 03:15:41 GMT
age: 31764
etag: "4bcdd6ecd63834aa1010faf19457a97f37ae99fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg | 34.120.237.76 | 200 OK | 6.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash210b27f5f6310d8fad640acce3d9ae0e 08d241e56622cb900754d95bc5d58ed8826d9f32 64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 08:32:51 GMT
age: 12734
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash604a4132da78a0c013b5818644adb121 ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566 eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8701
x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cm3-2HRWIAMFjfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cmRvAOLmk_xZC4RKdin-lozUNeK9-icqkzsQmSjP9scXnnCLxkvJ5A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:01:53 GMT
age: 50592
etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha0f0782df385287698881f1c19e79b96 5a25f245b594f6cbf2fdaeed2463ac5fbc08068a 4f795cd2286e194cd96751e6a4e3bd0da09c6db5344182e51986b65149e75cd7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8579
x-amzn-requestid: 0efa303a-364e-488d-beac-24836c7c1e4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlirE2KoAMFX9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb610-5564a0c0264ed36f0497e17e;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xpzGji_JAWkUjhXLouXWlin6rV-44shz6Z_STqo7uK7ZUV2PWs7Zpg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:19 GMT
etag: "5a25f245b594f6cbf2fdaeed2463ac5fbc08068a"
content-type: image/jpeg
age: 50866
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg | 34.120.237.76 | 200 OK | 8.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe95ebce9d79ba46cb96af9a45af1762f 985c6761675e6bcc0186f64d55f94cf09352f05c 5837d6bf31e57f955ba2577f112281cc33a5502b358c83192f4e396b57042ac0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8438
x-amzn-requestid: 0f5d1b0e-1193-4006-8a54-555681d9f62e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlqVGMjoAMFS6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb641-6366ea6464122d857407cdff;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:38:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nm0qQpo75zvDYWxv8V3GvOSBFenh8ocfjV9d02Mc2l-ABieIb3h2uA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:53:40 GMT
age: 51085
etag: "985c6761675e6bcc0186f64d55f94cf09352f05c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| web.sistemascomerciales.net/ | 174.136.57.91 | 301 Moved Permanently | 0 B |
URL HTTP/1.1web.sistemascomerciales.net/ IP174.136.57.91:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET / HTTP/1.1
Host: web.sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Dec 2022 12:05:03 GMT
Server: Apache
X-Redirect-By: WordPress
Set-Cookie: cntctfrm_send_mail=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://sistemascomerciales.net/
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash3025b4c51fa49b1cfb04323171de5be1 2e90e313500f8c8614913c7adb2451f11a2e097e 4bc8b08368c851da85093a4e4c054555aa6091ad97f042e971ab106f511f033e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5292
Cache-Control: max-age=159874
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:06 GMT
Etag: "63903a48-117"
Expires: Fri, 09 Dec 2022 08:29:40 GMT
Last-Modified: Wed, 07 Dec 2022 07:01:28 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
|
|
| maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css |  188.114.98.234 | 200 OK | 6.3 kB |
URL HTTP/2maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css IP188.114.98.234:0
File typeASCII text, with very long lines (26548) Hasha52ed4bfedbe272ea206f87fb76204a1 1ee74fcd73ac381df04a131c742e512626f2678b f57d308fad065f0163f1a667ce23de063fbcbcd76b9ff612b2bae172008352b5
GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 12:05:06 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 12/13/2021 21:25:06
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 632
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 8ac87b10825a6871d9cd076fc3a23e4f
cdn-cache: HIT
cf-cache-status: HIT
age: 15861458
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 775d20ad9e35b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash3074a66f6d9b2e2af9b41ec0e2f4e2db 942e2c49b3848f11da966937f5914c62aed24bce 7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| sistemascomerciales.net/wp-includes/css/classic-themes.min.css?ver=1 | 174.136.57.91 | 200 OK | 217 B |
URL HTTP/2sistemascomerciales.net/wp-includes/css/classic-themes.min.css?ver=1 IP174.136.57.91:0
Hash95e891f28e44a9b314c09545d86be2b7 f9b13a8bd47273b086a0a07df15f314e0af0bc3e 5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Oct 2022 14:45:16 GMT
accept-ranges: bytes
content-length: 217
content-type: text/css
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash3074a66f6d9b2e2af9b41ec0e2f4e2db 942e2c49b3848f11da966937f5914c62aed24bce 7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| sistemascomerciales.net/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 174.136.57.91 | 200 OK | 95 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP174.136.57.91:0
File typeASCII text, with very long lines (47826) Hash71d925864153f0edf91037f3d31048e8 cc16a0524ac63b5ce29f703a66412224f0dd771a c324ef26b20264369e4568dc9ef1c5cb1f325f6bc4e8b7c01f7fe93fa353276a
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Nov 2022 16:56:44 GMT
accept-ranges: bytes
content-length: 94889
content-type: text/css
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-content/plugins/contact-form-plugin/css/form_style.css?ver=4.2.4 | 174.136.57.91 | 200 OK | 5.1 kB |
URL HTTP/2sistemascomerciales.net/wp-content/plugins/contact-form-plugin/css/form_style.css?ver=4.2.4 IP174.136.57.91:0
Hash5d1d4891893cf9c12c42cf0646691556 f7e3bdc50bb5c3c5a98e19b44a6899b8070e3b23 de17d63770f4a75bdc5079ab9176c912df0f63b45c7bba4e4980aa004186ba3f
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-content/plugins/contact-form-plugin/css/form_style.css?ver=4.2.4 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Dec 2022 06:29:33 GMT
accept-ranges: bytes
content-length: 5050
content-type: text/css
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 174.136.57.91 | 200 OK | 11 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP174.136.57.91:0
File typeASCII text, with very long lines (11126) Hash79b4956b7ec478ec10244b5e2d33ac7d a46025b9d05e3df30d610a8aef14f392c7058dc9 029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 11:06:06 GMT
accept-ranges: bytes
content-length: 11224
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-content/themes/twentyseventeen/assets/js/skip-link-focus-fix.js?ver=20161114 | 174.136.57.91 | 200 OK | 683 B |
URL HTTP/2sistemascomerciales.net/wp-content/themes/twentyseventeen/assets/js/skip-link-focus-fix.js?ver=20161114 IP174.136.57.91:0
Hash75abd4cd8807b312f9f7faeb77ee774b e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7 ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-content/themes/twentyseventeen/assets/js/skip-link-focus-fix.js?ver=20161114 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Dec 2022 06:47:12 GMT
accept-ranges: bytes
content-length: 683
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-content/themes/twentyseventeen/assets/css/blocks.css?ver=20220912 | 174.136.57.91 | 200 OK | 11 kB |
URL HTTP/2sistemascomerciales.net/wp-content/themes/twentyseventeen/assets/css/blocks.css?ver=20220912 IP174.136.57.91:0
Hash00184da8b43cc60f051ba2e5cc467a76 e765edb540994b2bf946a158969c0eb326398a45 37fa576d4c1a5e70993a211461fabe5e8473af031573b57dcfd7874bedb39d6a
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-content/themes/twentyseventeen/assets/css/blocks.css?ver=20220912 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Dec 2022 06:47:12 GMT
accept-ranges: bytes
content-length: 10745
content-type: text/css
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-content/themes/twentyseventeen/assets/js/global.js?ver=20211130 | 174.136.57.91 | 200 OK | 7.8 kB |
URL HTTP/2sistemascomerciales.net/wp-content/themes/twentyseventeen/assets/js/global.js?ver=20211130 IP174.136.57.91:0
Hashb05f10be5dc47940fc74ad56a9495aaf 97c3e00962157773e293e0715dc533e221f62b18 75d7fd1066c67dfe078b0cf1fe3863d2b883076cb6f4e41988708179f7e18488
GET /wp-content/themes/twentyseventeen/assets/js/global.js?ver=20211130 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Dec 2022 06:47:12 GMT
accept-ranges: bytes
content-length: 7825
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 174.136.57.91 | 200 OK | 19 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP174.136.57.91:0
File typeASCII text, with very long lines (15660) Hash32beb68a374e3aeac00abdf9e12b84ea b5d18aa625e8696dd9d07cd0869337717b211ae0 5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Apr 2022 06:56:22 GMT
accept-ranges: bytes
content-length: 18617
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 174.136.57.91 | 200 OK | 18 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP174.136.57.91:0
File typeUnicode text, UTF-8 text, with very long lines (17819), with no line terminators Hashe495a4709e3eae31c67f8263f25d2d39 d43ba6a092e4823a71f3bff75d5ed279a481636b 1c1fef6e6b4f9832603850b9b6562e74d9a6a3700ba836efe88facc577121e8b
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Sep 2022 16:43:28 GMT
accept-ranges: bytes
content-length: 17823
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 174.136.57.91 | 200 OK | 90 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP174.136.57.91:0
File typeASCII text, with very long lines (65447) Hash17738318d61d394f1de8890d589afaec f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3 cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Sep 2022 15:16:24 GMT
accept-ranges: bytes
content-length: 89684
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-content/uploads/2019/07/BANNER-ALPHA.png | 174.136.57.91 | 200 OK | 9.7 kB |
URL HTTP/2sistemascomerciales.net/wp-content/uploads/2019/07/BANNER-ALPHA.png IP174.136.57.91:0
File typePNG image data, 600 x 250, 8-bit/color RGBA, non-interlaced\012- data Hashd9d48bbd8f5b13a363959bfac52fa688 f407aa7737c1ff9df615ba9d4f0f6adad99e4d34 0db68f310ea50c292204c59b14862a08102473119f6055b9a875bc484ec5601c
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-content/uploads/2019/07/BANNER-ALPHA.png HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 13 Jul 2019 22:44:19 GMT
accept-ranges: bytes
content-length: 9669
content-type: image/png
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js?ver=2.1.3 | 174.136.57.91 | 200 OK | 5.8 kB |
URL HTTP/2sistemascomerciales.net/wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js?ver=2.1.3 IP174.136.57.91:0
Hashd45857185e4d727c4644f920fe3da019 1f1860080bef5852db24e9c7c30caf655320ea3e 74b88e3c74597c256390ff0cf19b7bc9c5427ca2b0651959c164b29253965871
GET /wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js?ver=2.1.3 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Dec 2022 06:47:12 GMT
accept-ranges: bytes
content-length: 5817
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 | 174.136.57.91 | 200 OK | 6.5 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 IP174.136.57.91:0
File typeASCII text, with very long lines (6475), with no line terminators Hash61449413a42d2daaa79dbe7298b40e21 d86c474164c603084397bdc50fb0e469d28b5772 f30769ea0b80a5d900c5f0de30b1aad1ab461195e69223d5ef63c2c5de8b6c1a
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Apr 2022 13:04:30 GMT
accept-ranges: bytes
content-length: 6475
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca | 174.136.57.91 | 200 OK | 498 B |
URL HTTP/2sistemascomerciales.net/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca IP174.136.57.91:0
File typeASCII text, with very long lines (463) Hashb0b80b0256874e70acdc820b52bbf1aa 9aace9a7989736bf535d65f229d0c10e9acea41b 166c7c3bb5f76f977a9f2a5490589b3466374eb2b3f064802e56f08bad71fbf0
GET /wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Apr 2022 13:04:30 GMT
accept-ranges: bytes
content-length: 498
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664 | 174.136.57.91 | 200 OK | 2.5 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664 IP174.136.57.91:0
File typeUnicode text, UTF-8 text, with very long lines (2472) Hash496baa8dab0a9861cd85d4e329f5aa77 5a036d58aecc5c5c471237d6dc719333cfe225e6 5df2942db2352e49e00bcf3393b875a71d0acee986e48fbdcc5879846f5c3689
GET /wp-includes/js/dist/a11y.min.js?ver=ecce20f002eda4c19664 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Apr 2022 13:04:30 GMT
accept-ranges: bytes
content-length: 2508
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae | 174.136.57.91 | 200 OK | 10 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae IP174.136.57.91:0
Hash8cd696505481e74ffee89b4995f37379 ee9aad199ef2bc60a3460f4c52f37d22907b2ec9 01c3955df67a9b9d1367957e2c187729eae46b72e92c2b52bdb217b14a8fc874
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 23 Sep 2022 20:55:30 GMT
accept-ranges: bytes
content-length: 10230
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 | 174.136.57.91 | 200 OK | 4.9 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 IP174.136.57.91:0
File typeASCII text, with very long lines (4875) Hashb33ab4d5dcf02436276a717e9d1b7c18 f47b9a9c41b3b11c9dffabca22945727c3ec6566 9bd82960d99b3a76f4af77a88a346bd61f87bac5ff2f385ee28cd669d8f22134
GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Apr 2022 13:04:30 GMT
accept-ranges: bytes
content-length: 4910
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-includes/js/wp-custom-header.min.js?ver=6.1.1 | 174.136.57.91 | 200 OK | 4.4 kB |
URL HTTP/2sistemascomerciales.net/wp-includes/js/wp-custom-header.min.js?ver=6.1.1 IP174.136.57.91:0
File typeASCII text, with very long lines (4407) Hash80b3aaa56e980fff1e2846d1ccbd1dce 3704442ab639f7277388facf9fb523ad3d7cce11 2ff218eb73899f8607dd60e8a9f53d310cd8a314cb1686b26a1d0f2c98863854
GET /wp-includes/js/wp-custom-header.min.js?ver=6.1.1 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 10 Apr 2021 13:40:04 GMT
accept-ranges: bytes
content-length: 4442
content-type: application/javascript
date: Wed, 07 Dec 2022 12:05:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashec6ece82a7cb8faa3ba171efae3a9eda 7ee75fba9a9d1078960f7834d71961c38f514b82 301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashec6ece82a7cb8faa3ba171efae3a9eda 7ee75fba9a9d1078960f7834d71961c38f514b82 301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/librefranklin/v13/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 | 142.250.74.35 | 200 OK | 27 kB |
URL HTTP/2fonts.gstatic.com/s/librefranklin/v13/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 27268, version 1.0\012- data Hashcd83836443d658985c464d7021aa3e83 83a2915021f30c4ed54752b02e0c999e3c56798c 0c5b68b3ae23054815d89c5a2230ad7edf2d4b68732b4463d6be74cacb974055
GET /s/librefranklin/v13/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sistemascomerciales.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27268
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 06:10:24 GMT
expires: Tue, 05 Dec 2023 06:10:24 GMT
cache-control: public, max-age=31536000
age: 194083
last-modified: Mon, 11 Jul 2022 18:56:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashec6ece82a7cb8faa3ba171efae3a9eda 7ee75fba9a9d1078960f7834d71961c38f514b82 301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashec6ece82a7cb8faa3ba171efae3a9eda 7ee75fba9a9d1078960f7834d71961c38f514b82 301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| sistemascomerciales.net/wp-content/uploads/2018/01/cuanto-cuesta-el-business-intelligence-e1515439796324-1920x1200.jpg | 174.136.57.91 | 200 OK | 350 kB |
URL HTTP/2sistemascomerciales.net/wp-content/uploads/2018/01/cuanto-cuesta-el-business-intelligence-e1515439796324-1920x1200.jpg IP174.136.57.91:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1920x1200, components 3\012- data Size350 kB (349850 bytes) Hash88a3205801581664d136bd4844a3e060 e74e0e126cf6afd73d9b4918f98aa7ed5cfc2bf7 423feb0f4bbc272074d9a1d59059082b0fcfb39637012b797662437fb5eb5fd3
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-content/uploads/2018/01/cuanto-cuesta-el-business-intelligence-e1515439796324-1920x1200.jpg HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2018 19:29:57 GMT
accept-ranges: bytes
content-length: 349850
content-type: image/jpeg
date: Wed, 07 Dec 2022 12:05:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashcd6dabd083ee1c237c8ea3ba38cc48d5 bbe4420bf1c0fe0d5621336865563418d2f16f39 c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.youtube.com/s/player/ac058a09/www-widgetapi.vflset/www-widgetapi.js | 142.250.74.78 | 200 OK | 54 kB |
URL HTTP/2www.youtube.com/s/player/ac058a09/www-widgetapi.vflset/www-widgetapi.js IP142.250.74.78:0
File typeASCII text, with very long lines (817) Hash412308866bc89dfdabc2f01da260060c ff046fae7c14da6739ced00601c04a2f3c655682 8a3a845ac0ca1f24696f404c6ba38545517136e6b89410ac24db11dcac53758c
GET /s/player/ac058a09/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 53949
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 18:06:35 GMT
expires: Wed, 06 Dec 2023 18:06:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 01:22:00 GMT
content-type: text/javascript
age: 64712
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-content/uploads/2019/07/cropped-icono-APP-32x32.png | 174.136.57.91 | 200 OK | 830 B |
URL HTTP/2sistemascomerciales.net/wp-content/uploads/2019/07/cropped-icono-APP-32x32.png IP174.136.57.91:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hashf7675b9ed6e2025927662694f8ec6f4d 6386b010ab7138862b3a496f8e07c726a505d3b0 3d2300109a34c05ac439e07c7aaf86abe853f60ac7e8e5bc9ce54dc1da169142
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-content/uploads/2019/07/cropped-icono-APP-32x32.png HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Jul 2019 01:43:24 GMT
accept-ranges: bytes
content-length: 830
content-type: image/png
date: Wed, 07 Dec 2022 12:05:08 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.youtube.com/iframe_api | 142.250.74.78 | 200 OK | 995 B |
URL HTTP/2www.youtube.com/iframe_api IP142.250.74.78:0
File typeASCII text, with very long lines (509) Hashe9e2d45cb4259b5b8ba2139ce4b4d2fc 02347250e5b3834f238c83ae22a1baa9396e7875 9c2ea524e4f9d2b6f9016f16eece6de5dc8e5942ec97ed589cfbabdd71e5a85e
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Wed, 07 Dec 2022 12:05:07 GMT
date: Wed, 07 Dec 2022 12:05:07 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=_8AecEWtUH8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=47xdWIuXn98; Domain=.youtube.com; Expires=Mon, 05-Jun-2023 12:05:07 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+692; expires=Fri, 06-Dec-2024 12:05:07 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:48:03 GMT
expires: Fri, 01 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 483424
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| sistemascomerciales.net/wp-content/themes/twentyseventeen/style.css?ver=20221101 | 174.136.57.91 | 200 OK | 16 kB |
URL HTTP/2sistemascomerciales.net/wp-content/themes/twentyseventeen/style.css?ver=20221101 IP174.136.57.91:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
| Analyzer | Verdict | Alert |
|---|
| openphish | M & T Bank Coporation | |
GET /wp-content/themes/twentyseventeen/style.css?ver=20221101 HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Dec 2022 06:47:12 GMT
accept-ranges: bytes
content-length: 84335
content-type: text/css
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash38d1c089860ce360f5266ae101ab05ca 31705702b50e1c818c052b6d2a23f22583aa07d1 097ac1bb8edd3ef2e02fa551d824a0104c6995e130f9cdc4bcfa65583a9785d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash81a7e0ed8b45460991a7d9b719423d48 fa4824b64d5484b955cecebbeea06710ced4fba5 2fb356139722003d5c83566b936968a5ce9ba3756f69ace50a53bea6c1b9f7eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| googleads.g.doubleclick.net/pagead/id | 142.250.74.98 | 302 Found | 0 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/id IP142.250.74.98:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 07 Dec 2022 12:05:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| static.doubleclick.net/instream/ad_status.js | 142.250.74.134 | 200 OK | 29 B |
URL HTTP/2static.doubleclick.net/instream/ad_status.js IP142.250.74.134:0
Hash1fa71744db23d0f8df9cce6719defcb7 e4be9b7136697942a036f97cf26ebaf703ad2067 eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 11:51:04 GMT
expires: Wed, 07 Dec 2022 12:06:04 GMT
cache-control: public, max-age=900
age: 844
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 216.58.207.234 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP216.58.207.234:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 07 Dec 2022 12:05:08 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 216.58.207.234 | 200 OK | 31 kB |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP216.58.207.234:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hash0fbefd0c3d6fcbd63920ad3ac81ceeea 1f8198dcc43f139f7e2b9d89e0ee424382b4d0d3 2ed899f45d9272a2904a0386aab3125a0559227fb7878049f13f34b59e9dc8a2
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 07 Dec 2022 12:05:08 GMT
server: ESF
cache-control: private
content-length: 31123
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash81a7e0ed8b45460991a7d9b719423d48 fa4824b64d5484b955cecebbeea06710ced4fba5 2fb356139722003d5c83566b936968a5ce9ba3756f69ace50a53bea6c1b9f7eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash38d1c089860ce360f5266ae101ab05ca 31705702b50e1c818c052b6d2a23f22583aa07d1 097ac1bb8edd3ef2e02fa551d824a0104c6995e130f9cdc4bcfa65583a9785d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9084a518c70ad57bb3226fb519b648fd 79348ebe6f5900a035d4d65e08a7409fd9708f15 f0c6b0f66c31aa7cb2d2808eb4c04c3681d48e731efc8cbba0f3fef1d218ce7b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| googleads.g.doubleclick.net/pagead/id?slf_rd=1 | 142.250.74.98 | 200 OK | 120 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/id?slf_rd=1 IP142.250.74.98:0
Hash1f1b4aebeda9f61fcae6541c5e296619 cc589e5b0219b2da6c8f4d0b8a48239ed31e45bc 579306e1112631c0a9a41aa78a7efe06deac5eb8a8ab433f31f52ef083317962
GET /pagead/id?slf_rd=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Referer: https://www.youtube.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
content-type: application/json; charset=UTF-8
date: Wed, 07 Dec 2022 12:05:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 120
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js | 216.58.207.228 | 200 OK | 14 kB |
URL HTTP/2www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js IP216.58.207.228:0
File typeASCII text, with very long lines (36162) Hashe9bf756aa2fac02f3307febffa242635 d0da1ab271c03a49fe6499a38e6f3c34d396c5d4 12655f58f30c13fae1942aae99ace0d8e450ead33ec120b89d78fd98a279e0bb
GET /js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14349
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 15:46:54 GMT
expires: Wed, 06 Dec 2023 15:46:54 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
age: 73094
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9e83e23c9303fc167d2b23bceba4f304 cc712e67770a00bcc9901a6881f5b1cd343cf054 16378fd60ce4fb8ead3bbc313e6ae0166f68d532d40c586f8c71cb6cd1a91f50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 216.58.207.234 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP216.58.207.234:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 07 Dec 2022 12:05:08 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 216.58.207.234 | 200 OK | 114 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP216.58.207.234:0
File typeJSON data\012- , ASCII text, with no line terminators Hashc019092d79e9c519fcca00da0314f2bf b632000ebbb5b7e1e74650784e646ff442e3203a ff384739262267568e868cd7649174345e49ea885a57d109d00cbad397bc897f
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1339
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 07 Dec 2022 12:05:08 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash4808876cfd727e5f220568c0d82e90fd 9d217d8f2aa94544ba80b006ac4291c4bc9c0312 8edec2d89259e801da93aedcd326b6388d117655655d6580f1fdff9a6833adf7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash4808876cfd727e5f220568c0d82e90fd 9d217d8f2aa94544ba80b006ac4291c4bc9c0312 8edec2d89259e801da93aedcd326b6388d117655655d6580f1fdff9a6833adf7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&mh=ej&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=2607500&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&mt=1670414474&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgRfGhBcaecGgf1Y7o5uyu2kTWLttMJnvt7jsOdzkMw4ACIQDGOXo7pKxbwSEuiR1MQkTkeZQnRX4AhgZTxwvgAXx9DA%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&range=0-65900&rn=2&rbuf=0&ump=1&srfvp=1 | 91.90.45.172 | 200 OK | 1.0 kB |
URL HTTP/1.1rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&mh=ej&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=2607500&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&mt=1670414474&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgRfGhBcaecGgf1Y7o5uyu2kTWLttMJnvt7jsOdzkMw4ACIQDGOXo7pKxbwSEuiR1MQkTkeZQnRX4AhgZTxwvgAXx9DA%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&range=0-65900&rn=2&rbuf=0&ump=1&srfvp=1 IP91.90.45.172:0 ASN#50304 Blix Solutions AS
Hash03f7b5d9f61637fdee0a69c6dd5f1765 73e06e122ea7d8d66debf502998a1361345becd4 bd69bfaf653a4ab37240b92dd01bff3a98b1def01bf7916b2433e416a9818688
POST /videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&mh=ej&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=2607500&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&mt=1670414474&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgRfGhBcaecGgf1Y7o5uyu2kTWLttMJnvt7jsOdzkMw4ACIQDGOXo7pKxbwSEuiR1MQkTkeZQnRX4AhgZTxwvgAXx9DA%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&range=0-65900&rn=2&rbuf=0&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Wed, 07 Dec 2022 12:05:09 GMT
Expires: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: private, max-age=21299
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=ej&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=2607500&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=video%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=2109435&dur=56.399&lmt=1670412104332250&mt=1670414474&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5316224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgLWfQc4pREPBpsB1mtLk-jdqHkXHcjQ9aMm9NB5VkNUMCIBE4eVHL_vsaWMpjHxwRCTGHDfAWwlSyPddlndzJQltF&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgRfGhBcaecGgf1Y7o5uyu2kTWLttMJnvt7jsOdzkMw4ACIQDGOXo7pKxbwSEuiR1MQkTkeZQnRX4AhgZTxwvgAXx9DA%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&range=0-120614&rn=1&rbuf=0&ump=1&srfvp=1 | 91.90.45.172 | 200 OK | 1.1 kB |
URL HTTP/1.1rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=ej&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=2607500&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=video%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=2109435&dur=56.399&lmt=1670412104332250&mt=1670414474&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5316224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgLWfQc4pREPBpsB1mtLk-jdqHkXHcjQ9aMm9NB5VkNUMCIBE4eVHL_vsaWMpjHxwRCTGHDfAWwlSyPddlndzJQltF&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgRfGhBcaecGgf1Y7o5uyu2kTWLttMJnvt7jsOdzkMw4ACIQDGOXo7pKxbwSEuiR1MQkTkeZQnRX4AhgZTxwvgAXx9DA%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&range=0-120614&rn=1&rbuf=0&ump=1&srfvp=1 IP91.90.45.172:0 ASN#50304 Blix Solutions AS
Hash0bcbaf8125514413877f50293fafc818 23fcde886a96e0a2ff68685de55c54ae6a45ed88 f01d1bd3489e6fe1512a8133c6faafc51e7ce478fdba33675bf7207d629f3485
POST /videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=ej&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=2607500&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=video%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=2109435&dur=56.399&lmt=1670412104332250&mt=1670414474&fvip=3&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5316224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgLWfQc4pREPBpsB1mtLk-jdqHkXHcjQ9aMm9NB5VkNUMCIBE4eVHL_vsaWMpjHxwRCTGHDfAWwlSyPddlndzJQltF&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgRfGhBcaecGgf1Y7o5uyu2kTWLttMJnvt7jsOdzkMw4ACIQDGOXo7pKxbwSEuiR1MQkTkeZQnRX4AhgZTxwvgAXx9DA%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&range=0-120614&rn=1&rbuf=0&ump=1&srfvp=1 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Wed, 07 Dec 2022 12:05:09 GMT
Expires: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: private, max-age=21299
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash4808876cfd727e5f220568c0d82e90fd 9d217d8f2aa94544ba80b006ac4291c4bc9c0312 8edec2d89259e801da93aedcd326b6388d117655655d6580f1fdff9a6833adf7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| yt3.ggpht.com/ytc/AMLnZu8hDb0lM-9fweCmHRKNquqXR1GihuSSsh8J8OD7=s68-c-k-c0x00ffffff-no-rj | 142.250.74.161 | 200 OK | 4.0 kB |
URL HTTP/2yt3.ggpht.com/ytc/AMLnZu8hDb0lM-9fweCmHRKNquqXR1GihuSSsh8J8OD7=s68-c-k-c0x00ffffff-no-rj IP142.250.74.161:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 68x68, components 3\012- data Hash85e533095006cd6b5c151c419b7f9302 4c68eb664b26939b2b283947c41e0592cf135d22 9aa9d4aa2b69fd02834324c39e34d29c278f9ed13b50078a2f3ab2ede27c016d
GET /ytc/AMLnZu8hDb0lM-9fweCmHRKNquqXR1GihuSSsh8J8OD7=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1c"
expires: Thu, 08 Dec 2022 12:05:09 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 12:05:09 GMT
server: fife
content-length: 3967
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash00a44eacab2a2866366cfbb2483463ca a000c92137b94cbfffdda028cd866d23ac37d17c 0b12fc2d0e7fa43df9c0e0b1ca29a12199982595dd5d687d2632020f81e2a9e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9e83e23c9303fc167d2b23bceba4f304 cc712e67770a00bcc9901a6881f5b1cd343cf054 16378fd60ce4fb8ead3bbc313e6ae0166f68d532d40c586f8c71cb6cd1a91f50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash00a44eacab2a2866366cfbb2483463ca a000c92137b94cbfffdda028cd866d23ac37d17c 0b12fc2d0e7fa43df9c0e0b1ca29a12199982595dd5d687d2632020f81e2a9e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=ej&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670414478&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgCEbbzqye9bm7pjqMZGBkZBWy9ZWWwtOI1tai8cjWaO4CIQCSz1slkO8pSkuzewV3scBjpwpjsIsBZN5gtBLWhGAb8g%3D%3D&range=0-65900&rn=3&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 | 74.125.111.8 | 200 OK | 1.2 kB |
URL HTTP/1.1rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=ej&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670414478&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgCEbbzqye9bm7pjqMZGBkZBWy9ZWWwtOI1tai8cjWaO4CIQCSz1slkO8pSkuzewV3scBjpwpjsIsBZN5gtBLWhGAb8g%3D%3D&range=0-65900&rn=3&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 IP74.125.111.8:0
Hashcfb7003654b66fcd82bb0743708467b3 a91bf3a1df2986cb51c998aaae2b7607a85a6737 35f4a350426c273c1b0715f446b8f3e80374b364474143ab2a595cea6d45b1cd
POST /videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=ej&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670414478&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgCEbbzqye9bm7pjqMZGBkZBWy9ZWWwtOI1tai8cjWaO4CIQCSz1slkO8pSkuzewV3scBjpwpjsIsBZN5gtBLWhGAb8g%3D%3D&range=0-65900&rn=3&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 HTTP/1.1
Host: rr3---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Wed, 07 Dec 2022 12:05:09 GMT
Expires: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: private, max-age=21299
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=video%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=2109435&dur=56.399&lmt=1670412104332250&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5316224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgLWfQc4pREPBpsB1mtLk-jdqHkXHcjQ9aMm9NB5VkNUMCIBE4eVHL_vsaWMpjHxwRCTGHDfAWwlSyPddlndzJQltF&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=ej&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670414478&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgTqccF0w1OsolEwMKc_LBT_JcbzGPGNYN31368rIX0ScCIQC0lyRioRvOqemDaqL3og4pfxIWsDmiL3ze4menBNkHMg%3D%3D&range=0-120614&rn=4&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 | 74.125.111.8 | 200 OK | 1.3 kB |
URL HTTP/1.1rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=video%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=2109435&dur=56.399&lmt=1670412104332250&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5316224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgLWfQc4pREPBpsB1mtLk-jdqHkXHcjQ9aMm9NB5VkNUMCIBE4eVHL_vsaWMpjHxwRCTGHDfAWwlSyPddlndzJQltF&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=ej&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670414478&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgTqccF0w1OsolEwMKc_LBT_JcbzGPGNYN31368rIX0ScCIQC0lyRioRvOqemDaqL3og4pfxIWsDmiL3ze4menBNkHMg%3D%3D&range=0-120614&rn=4&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 IP74.125.111.8:0
Hashdb0d9523ff1035a5a4ec4c71d61f0203 107eab4d8d40f13183987ee987b01305bf6161fa 6f9b75d09785a61f1146205b7a31d33cefe88576fa66aa27956c48f5082f2b63
POST /videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=video%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=2109435&dur=56.399&lmt=1670412104332250&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5316224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgLWfQc4pREPBpsB1mtLk-jdqHkXHcjQ9aMm9NB5VkNUMCIBE4eVHL_vsaWMpjHxwRCTGHDfAWwlSyPddlndzJQltF&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=ej&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670414478&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgTqccF0w1OsolEwMKc_LBT_JcbzGPGNYN31368rIX0ScCIQC0lyRioRvOqemDaqL3og4pfxIWsDmiL3ze4menBNkHMg%3D%3D&range=0-120614&rn=4&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 HTTP/1.1
Host: rr3---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Wed, 07 Dec 2022 12:05:09 GMT
Expires: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: private, max-age=21299
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=ej&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670414478&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgAKXT6rA3gKFj40PCFQm9LRVAI01xX61ey8LxPLGdOHUCIQCVDUrk5n7TTEibWZ5Yzr-JRpFVHiVWHcSlLHL5hS6MEw%3D%3D&range=0-65900&rn=7&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 | 74.125.111.8 | 200 OK | 1.2 kB |
URL HTTP/1.1rr3---sn-5goeenez.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=ej&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670414478&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgAKXT6rA3gKFj40PCFQm9LRVAI01xX61ey8LxPLGdOHUCIQCVDUrk5n7TTEibWZ5Yzr-JRpFVHiVWHcSlLHL5hS6MEw%3D%3D&range=0-65900&rn=7&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 IP74.125.111.8:0
Hash92a0b5e807c2104f4d651ef049cb76d4 1b2bb108c1e85c9fa5d88f384347d3ada273cd76 efd20534502229af079096a88a11bd202ac6b6b7d69dd664fd242b1b44f8d688
POST /videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=ej&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670414478&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgAKXT6rA3gKFj40PCFQm9LRVAI01xX61ey8LxPLGdOHUCIQCVDUrk5n7TTEibWZ5Yzr-JRpFVHiVWHcSlLHL5hS6MEw%3D%3D&range=0-65900&rn=7&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 HTTP/1.1
Host: rr3---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Wed, 07 Dec 2022 12:05:09 GMT
Expires: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: private, max-age=21299
Content-Type: application/vnd.yt-ump
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash00a44eacab2a2866366cfbb2483463ca a000c92137b94cbfffdda028cd866d23ac37d17c 0b12fc2d0e7fa43df9c0e0b1ca29a12199982595dd5d687d2632020f81e2a9e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| yt3.ggpht.com/ytc/AMLnZu8hDb0lM-9fweCmHRKNquqXR1GihuSSsh8J8OD7=s88-c-k-c0x00ffffff-no-rj | 142.250.74.161 | 200 OK | 4.4 kB |
URL HTTP/2yt3.ggpht.com/ytc/AMLnZu8hDb0lM-9fweCmHRKNquqXR1GihuSSsh8J8OD7=s88-c-k-c0x00ffffff-no-rj IP142.250.74.161:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 88x88, components 3\012- data Hash6ec0ef8eec5f26cbb8c352f684dfcbd0 4dcd43477777b7b0ce44e1523284a05302ab0c62 7f87c50a896b8e5477302680319c19b414f037f07e508f8b78b4869828e76e1b
GET /ytc/AMLnZu8hDb0lM-9fweCmHRKNquqXR1GihuSSsh8J8OD7=s88-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1c"
expires: Thu, 08 Dec 2022 12:05:09 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 12:05:09 GMT
server: fife
content-length: 4409
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| rr5---sn-5hnekn7l.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=video%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=2109435&dur=56.399&lmt=1670412104332250&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5316224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgLWfQc4pREPBpsB1mtLk-jdqHkXHcjQ9aMm9NB5VkNUMCIBE4eVHL_vsaWMpjHxwRCTGHDfAWwlSyPddlndzJQltF&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=ej&mm=34&mn=sn-5hnekn7l&ms=ltu&mt=1670414447&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgQg7ezSqF-a2iDSVO9Q0X3MQEdbTg0O1rsf2xqPg2VZkCIAZRFEyfv58qMKx_uiDh4Hk_FV9JbBOjLyz1J_GFOgvO&range=0-120614&rn=6&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 | 74.125.100.10 | 200 OK | 122 kB |
URL HTTP/1.1rr5---sn-5hnekn7l.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=video%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=2109435&dur=56.399&lmt=1670412104332250&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5316224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgLWfQc4pREPBpsB1mtLk-jdqHkXHcjQ9aMm9NB5VkNUMCIBE4eVHL_vsaWMpjHxwRCTGHDfAWwlSyPddlndzJQltF&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=ej&mm=34&mn=sn-5hnekn7l&ms=ltu&mt=1670414447&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgQg7ezSqF-a2iDSVO9Q0X3MQEdbTg0O1rsf2xqPg2VZkCIAZRFEyfv58qMKx_uiDh4Hk_FV9JbBOjLyz1J_GFOgvO&range=0-120614&rn=6&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 IP74.125.100.10:0
Size122 kB (121867 bytes) Hash3e595790cf820824fbe6bb30d87566ea 91de05def64f276409cfaf88fffa5e345be1071f 204ed12d437e410a93281937518b0db63a96296c6833dc90ef5a28a69b5b1df5
POST /videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=video%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=2109435&dur=56.399&lmt=1670412104332250&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5316224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgLWfQc4pREPBpsB1mtLk-jdqHkXHcjQ9aMm9NB5VkNUMCIBE4eVHL_vsaWMpjHxwRCTGHDfAWwlSyPddlndzJQltF&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=ej&mm=34&mn=sn-5hnekn7l&ms=ltu&mt=1670414447&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgQg7ezSqF-a2iDSVO9Q0X3MQEdbTg0O1rsf2xqPg2VZkCIAZRFEyfv58qMKx_uiDh4Hk_FV9JbBOjLyz1J_GFOgvO&range=0-120614&rn=6&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-5hnekn7l.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 07 Dec 2022 11:21:44 GMT
Content-Type: application/vnd.yt-ump
Date: Wed, 07 Dec 2022 12:05:09 GMT
Expires: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: private, max-age=21299
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr5---sn-5hnekn7l.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=ej&mm=34&mn=sn-5hnekn7l&ms=ltu&mt=1670414447&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMwRfvLCkwM91zKslct-5-Ud607w28WedcaXFT2w1BxTAiEAvDz3R-uGM9peRWoVqeBnWX1QarNjtkBItZEJ_Ow8QRM%3D&range=0-65900&rn=8&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 | 74.125.100.10 | 200 OK | 66 kB |
URL HTTP/1.1rr5---sn-5hnekn7l.googlevideo.com/videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=ej&mm=34&mn=sn-5hnekn7l&ms=ltu&mt=1670414447&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMwRfvLCkwM91zKslct-5-Ud607w28WedcaXFT2w1BxTAiEAvDz3R-uGM9peRWoVqeBnWX1QarNjtkBItZEJ_Ow8QRM%3D&range=0-65900&rn=8&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 IP74.125.100.10:0
Hasha84cffa00e7bfdc4fca2b53a13ce6920 697be8ce45855526e8ccf134c9dfa75f19332267 aba51aafe017e103d3cac5ce2bf5079f590826b2db647d69d25a7aaefbbb02d5
POST /videoplayback?expire=1670436308&ei=dIGQY8v7IY6IpATol4SwBA&ip=91.90.42.154&id=o-AK7SCruOltF_M6-Zc_cvjyE6RNozbZyP8Etg3Ca1ALWe&itag=251&source=youtube&requiressl=yes&spc=SFxXNqqFZkgUS7eKpyh1-oPMukrfm3Q&vprv=1&mime=audio%2Fwebm&ns=llgYYKfaFXhE0Mlt3ZOjQfsJ&gir=yes&clen=978019&dur=56.421&lmt=1670413578054859&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5311224&n=Mu4vB3Cs6hpngA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIgKh939mYSdQ2t4lh1_5wr6c1S9octRZDumByehvaUl5ECIQCC9NJLIlL0JmPhL8X58DilUd2y931s3TkH8qd1Xqj2Fg%3D%3D&alr=yes&cpn=ySoxL2zNaoGiNMvm&cver=1.20221204.00.00&cm2rm=sn-capm-vnae7e,sn-5gos77s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=ej&mm=34&mn=sn-5hnekn7l&ms=ltu&mt=1670414447&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMwRfvLCkwM91zKslct-5-Ud607w28WedcaXFT2w1BxTAiEAvDz3R-uGM9peRWoVqeBnWX1QarNjtkBItZEJ_Ow8QRM%3D&range=0-65900&rn=8&rbuf=0&pot=D0xGSNxMO_swTH1zLA97QKLd2pdTfijvL_zdcLXzFa-JXFUIW3Df4tdalBPnSu3PcINWUM9OWvGSoS6wyrccSLjF5W90ao7giFfWOVDq_5ZIK5zHlUB3vXJI7EqJlsg21AI6rx59bZQ=&ump=1&srfvp=1 HTTP/1.1
Host: rr5---sn-5hnekn7l.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 07 Dec 2022 11:46:18 GMT
Content-Type: application/vnd.yt-ump
Date: Wed, 07 Dec 2022 12:05:09 GMT
Expires: Wed, 07 Dec 2022 12:05:09 GMT
Cache-Control: private, max-age=21299
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| sistemascomerciales.net/ | 174.136.57.91 | 200 OK | 0 B |
IP174.136.57.91:0
GET / HTTP/1.1
Host: sistemascomerciales.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
link: <https://sistemascomerciales.net/wp-json/>; rel="https://api.w.org/", <https://sistemascomerciales.net/wp-json/wp/v2/pages/9>; rel="alternate"; type="application/json", <https://sistemascomerciales.net/>; rel=shortlink
set-cookie: cntctfrm_send_mail=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
content-type: text/html; charset=UTF-8
date: Wed, 07 Dec 2022 12:05:07 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i&subset=latin%2Clatin-ext&display=fallback | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i&subset=latin%2Clatin-ext&display=fallback IP142.250.74.106:0
GET /css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i&subset=latin%2Clatin-ext&display=fallback HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sistemascomerciales.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 12:05:06 GMT
date: Wed, 07 Dec 2022 12:05:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
0.0.0.0