www.medronic.com/
93.115.28.104200 OK 477 B IP 93.115.28.104:0
ASN #16125 UAB Cherry Servers
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (477), with no line terminators
Hash 25e598d3c0e43f0df7b2324b768c3896
221dc011858568e2acbb1ffb8b756d28710abf4a
eb27a3054de721a9515cb86a3e24fc7964d94b492c64e4930c355d50b0df772c
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.medronic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 477
content-type: text/html; charset=utf-8
date: Sat, 03 Dec 2022 01:21:43 GMT
server: nginx
set-cookie: sid=d95e4078-72a8-11ed-96aa-9f98dc8fd298; path=/; domain=.medronic.com; expires=Thu, 21 Dec 2090 04:35:51 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16013
Expires: Sat, 03 Dec 2022 05:48:37 GMT
Date: Sat, 03 Dec 2022 01:21:44 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4241
Cache-Control: max-age=123612
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:21:44 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 11:41:56 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10903
Expires: Sat, 03 Dec 2022 04:23:27 GMT
Date: Sat, 03 Dec 2022 01:21:44 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 01:19:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 107
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: fMfXevAwLrV56szkKTgyEBC8fUd+1Gj4lKuQqz3B/VK3ujNHSA8wL8e8jWnBriMr38R9Keu07kA=
x-amz-request-id: B1NG9MJQYTC0A456
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 00:46:55 GMT
age: 2089
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:21:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.medronic.com/favicon.ico
93.115.28.104404 Not Found 9 B URL HTTP/1.1 www.medronic.com/favicon.ico
IP 93.115.28.104:0
ASN #16125 UAB Cherry Servers
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: www.medronic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.medronic.com/
Cookie: sid=d95e4078-72a8-11ed-96aa-9f98dc8fd298
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sat, 03 Dec 2022 01:21:44 GMT
server: nginx
www.medronic.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDAzNzcwNCwiaWF0IjoxNjcwMDMwNTA0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc21pN3BhYWdoczQwZ2Y2ZzAxMTdnNGEiLCJuYmYiOjE2NzAwMzA1MDQsInRzIjoxNjcwMDMwNTA0NTI4OTc0fQ.jWZ5xzsMZAPBvuj1JT8J7DDBvPZBNXKQe3rqoFJI4Sc&sid=d95e4078-72a8-11ed-96aa-9f98dc8fd298
93.115.28.104302 Found 11 B URL HTTP/1.1 www.medronic.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDAzNzcwNCwiaWF0IjoxNjcwMDMwNTA0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc21pN3BhYWdoczQwZ2Y2ZzAxMTdnNGEiLCJuYmYiOjE2NzAwMzA1MDQsInRzIjoxNjcwMDMwNTA0NTI4OTc0fQ.jWZ5xzsMZAPBvuj1JT8J7DDBvPZBNXKQe3rqoFJI4Sc&sid=d95e4078-72a8-11ed-96aa-9f98dc8fd298
IP 93.115.28.104:0
ASN #16125 UAB Cherry Servers
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDAzNzcwNCwiaWF0IjoxNjcwMDMwNTA0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc21pN3BhYWdoczQwZ2Y2ZzAxMTdnNGEiLCJuYmYiOjE2NzAwMzA1MDQsInRzIjoxNjcwMDMwNTA0NTI4OTc0fQ.jWZ5xzsMZAPBvuj1JT8J7DDBvPZBNXKQe3rqoFJI4Sc&sid=d95e4078-72a8-11ed-96aa-9f98dc8fd298 HTTP/1.1
Host: www.medronic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.medronic.com/
Cookie: sid=d95e4078-72a8-11ed-96aa-9f98dc8fd298
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 03 Dec 2022 01:21:44 GMT
location: http://btpnative.com/click?data=RENoTDl2YWlMODBZRlh4ZXE4OWNVdXQzUlc4ZkpNSFdYUFNib3VobDRLa0hpMU9oNWZIdUV2SngxVE5LUThaVGtITm8yaGN6aTlpT084c21IVFZWZFdwMHdobDRMSVVtYmJZVGFhVkx4UEdQc2dSb1AzNm9uNlpldGM2dWdFSi15ek16U3FlMVVQT1c2UTRoUmlvWEtRMg2&id=854ee7f0-5584-4068-9c55-e5b27922d2ad
server: nginx
set-cookie: sid=d95e4078-72a8-11ed-96aa-9f98dc8fd298; path=/; domain=.medronic.com; expires=Thu, 21 Dec 2090 04:35:52 GMT; max-age=2147483647; HttpOnly
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 01:08:58 GMT
cache-control: public,max-age=3600
age: 767
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4232
Cache-Control: max-age=118541
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:21:45 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 10:17:26 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
btpnative.com/click?data=RENoTDl2YWlMODBZRlh4ZXE4OWNVdXQzUlc4ZkpNSFdYUFNib3VobDRLa0hpMU9oNWZIdUV2SngxVE5LUThaVGtITm8yaGN6aTlpT084c21IVFZWZFdwMHdobDRMSVVtYmJZVGFhVkx4UEdQc2dSb1AzNm9uNlpldGM2dWdFSi15ek16U3FlMVVQT1c2UTRoUmlvWEtRMg2&id=854ee7f0-5584-4068-9c55-e5b27922d2ad
192.99.158.241200 OK 5.5 kB URL HTTP/1.1 btpnative.com/click?data=RENoTDl2YWlMODBZRlh4ZXE4OWNVdXQzUlc4ZkpNSFdYUFNib3VobDRLa0hpMU9oNWZIdUV2SngxVE5LUThaVGtITm8yaGN6aTlpT084c21IVFZWZFdwMHdobDRMSVVtYmJZVGFhVkx4UEdQc2dSb1AzNm9uNlpldGM2dWdFSi15ek16U3FlMVVQT1c2UTRoUmlvWEtRMg2&id=854ee7f0-5584-4068-9c55-e5b27922d2ad
IP 192.99.158.241:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (349), with CRLF line terminators
Hash 62aafe034bccde616b40f9b435776f2f
e8406b499029483328ee86735cc0aec45bd570de
2756e0398cff770cc32818f63fc0bca199d70d1d1e6868444c873c364debbd74
GET /click?data=RENoTDl2YWlMODBZRlh4ZXE4OWNVdXQzUlc4ZkpNSFdYUFNib3VobDRLa0hpMU9oNWZIdUV2SngxVE5LUThaVGtITm8yaGN6aTlpT084c21IVFZWZFdwMHdobDRMSVVtYmJZVGFhVkx4UEdQc2dSb1AzNm9uNlpldGM2dWdFSi15ek16U3FlMVVQT1c2UTRoUmlvWEtRMg2&id=854ee7f0-5584-4068-9c55-e5b27922d2ad HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.medronic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: obqlOJzTPiKnOUM=obqlOJzTPiKnOUM; path=/
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Sat, 03 Dec 2022 01:21:45 GMT
Content-Length: 5470
push.services.mozilla.com/
34.213.121.129101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.213.121.129:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HSxBQBT+HRMLh9fldhv2Zg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: I8MMoKCD/87qJ1zDeKVXOutp2xs=
btpnative.com/Redirect/
192.99.158.241302 Found 3.3 kB IP 192.99.158.241:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (3198), with CRLF line terminators
Hash 705f155638af5850919149fc5ae9a412
8736d3d1146fa5c30bfdc5246d4b1be60f9f889c
578afaea36c0d1aeeb4549605a5587f845b297271070c976acc3874301f36602
POST /Redirect/ HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 358
Origin: http://btpnative.com
Connection: keep-alive
Referer: http://btpnative.com/click?data=RENoTDl2YWlMODBZRlh4ZXE4OWNVdXQzUlc4ZkpNSFdYUFNib3VobDRLa0hpMU9oNWZIdUV2SngxVE5LUThaVGtITm8yaGN6aTlpT084c21IVFZWZFdwMHdobDRMSVVtYmJZVGFhVkx4UEdQc2dSb1AzNm9uNlpldGM2dWdFSi15ek16U3FlMVVQT1c2UTRoUmlvWEtRMg2&id=854ee7f0-5584-4068-9c55-e5b27922d2ad
Cookie: obqlOJzTPiKnOUM=obqlOJzTPiKnOUM
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzwXDAdHuC637LyT4nqgY4lVLZji0wJ7_ZGdNRMz_dvhc29XXvCS9-JLFXNSHgbbvMDcVgn291AC8_M1Mmbofr-ZKceZDQZtXA_b5np8cxJs0YFos_XX7JtPGVWViaJip_gzuORprI4qlt_7kfAZbXZ_3hitpdaEoqdQhW18LNARgPy3oN0OEJbLnj5updYLDF46i3N-R82Yrmbs8bRAwb8IXAJg2c0GBQpCIC1TnQA3eox256moumXQjYI4PpFWxIQEdsTjSPn0g0mkb9KBzedPOcFshGPJGMffL1Jjf_ip8t1qV102MAp4mr75vc4ayKwjRtEH16qU3W40Am9u1kTXuG_EUOv2NHa8N47EA2kZvK-u12DepJ3MJkWHUT-SHovMs75HF0sCrijEbZiGB56VyS1x6Xb-u4glof4ZSxV5LZF4XealRZaYGHJvxtSWM-_Ye6qKOmY3FVLZae4R3TiobdnAN8X6V4WNUx9BTdQNa7svNcfpBc2Nt0AIVzp_r-x8RH2wkQcqcRisDuqBR9bSAmrIaxT_NHZS8DotScyAo24osoGnxvEw5XbyAHBpVTefa541l6q-IlM5IDksykLXT-Oaj6LCsOwjwClL9yvG3gVwSmeS3-1rizRSbgvJTKFotlewUVBqpLxJ1h_cITvmZ7EqEHM590g1Kaduuf7Q_b9fv9_shflpbxxyWUYtHhSWaYvf3_jkTt6-DsR2dtRqlK4YkVafZmk94zEQWqgFKVeZKv0zo5G5LQjf93up8XDRfVxQW3Rp7dMNxuMZfUgEOLvM09M3mWkRkL-fsp9NvbO-xLsAj5BYVmuq5kFLJ_MZ2jvMippcUSU7hNlHwvRZGuiHhEhCBvbQ0_Z5beFjxxatO32tzQMEoQe5WmEmso59Z8PYH2y3W3usgp-Rb0BcznN_0oBd7UEVjhrHG7rwrzOmIA8spR9AvcMtbP0dZJUVIw31NyMf6ZUO8xsDObkG_oaCAT-PdUlR2LwrTNNSRw1WYr3bLYgyZBhLQ4qlrykzblyP2cwErGxm0DkTVbPy19jGrajjWTP9mPnCocHVJmDTDJcFP2Fq7ADAUYKzRTYFVrDHYw8A58SuFrCKch2T7_Cj17riEHaYtrAUI9zcqKJPvq5gdN7VdS4M_ejIjhY9VYSGMQ5JaCEne_BtfDZghXR8V5uRrbuaqAmBiW-mNUo_24YjZnRY8Qk59pm1LF7ivUaGXbBSJW6QG5OpI1EGqNCSOA1Ux7M4xBhuwRM5E-EBinC47Ba_cHsviy9QZcw4I4SPUqqopD8QAVrOqbUPVEEZJsopYPwPzMRvW5L12pLcGkLhOXxadztrtK_-nDYBS1blRdTOhJISIsuQ_EZgf1cstJ1zORWvAaBftK1tVUHlbqypRIeUEH69-1D0vrJq34qNRxBcmoMtxjAu1XScInh48nhv8OHqZWfSZ4dbnyyl5vLe-gNtzkmRiBwte2DSzppdQgP2EFzSsM5kgIk17_z3WojXrey-_N9gk2hfgwYOtKUEAJyZT1JxzL84IZg8lHR54BHVIAMGlycR0_zjxL3W6mgGnjfNzzs_IsPpHvosjS_P73qlWX2DvIaTmnVkCxXhrw82npAYQXtovwzAr0fFnylLAxYkV_V1e1DpXRYT3ryR5g1W-fW2r1pUzF4fSmMe65ONiddylfM0H6yFtiDvvjsdI2HgGDtq_XRqxZIz4g8Xrs-B0Hoslzk-86lspaVCvcgSoOrAmyMNZXoTj6hv1hmiJZiYbPEJRctcVNFOU1F6rH-pXGWrhYlyyJ4CzwYgkZ0yJDvCe43KO3_S7NiCnWL-HfG9jmjfBKA9bj4gwVtXfpJvhJ4XLSitdmiVmtUhLqppI-k2zvr25vyQkD7V3CU3nEB2Jxf7hiiIX5VXTuLQlb2m32glPjG1cy3jrgxyODoT0zPy_Gsjh3NkrW2p0HcaOk34tZC97S0m0c87iw7P8cPQYfBTNQ6JZJngwRGpz7EccXE0LUT3bse1NU9QmVlAl-Mhslg5JfObioiPDGTLR4tr9-_nyTO8ziV6bvS4IWlDg4ukJ3KRp_5IQllGPiwLw4_Nj1X-TjguhA3z6IMso3-9gXLvMLOmBmnXkjYAE2yX4qZzUwa2rSsVhirZMg908eNYriyDKVGTZtYoj0h0JC3vc2p1IZ76jlXD7j2ldycwo_1Agqzgxm1XzFz1yw2Uv5xLQ9wRz3bSY62G-uAuFwjYZxaj8B-HIgCpRGOW3qF_sqZzUwa2rSsXmx6SeidoD1jL7RpucDGZTH1D8go0dE1DJKsR-LgNnpSu4tbPcMIOWz9T3dVSnovMkYJ-EGdBKXAIfU-nSO265Pb4ncFfn7cIZbYz551kewAa2urKd5uxe77SWCd8SVhtid3Hz__9fzroWtk65Jz-i-kfq4Ncp73ovdH4UMKiTlFcDmNRJVn2S9YumGka_m_JIeTs2N1Tlq49hQ17RjRVP8fWCMXZvsFrMBMA3JPT2W-HVJ11jnOFvEBFdWvLV8bKzr5HgNYaHMZvH7lixhXiso2Lni3GWoAela6N0oeegpx7bgmSExPZ4ecYx3kGl0l4vAxLjjGq2SLSpBH3Ad2TeHPbWDhP8NIlb13ncLJhgvpu1pLodhHJQHe5XaDToBATEafSIUuIoimdqUAhMCS6LXba1EOy-7m3_6A2YGCe18KPIp9ZnpQgU5fnHB_Qmnw14LhJZZBTbenci3sSEngwkBg8njuTlm5b9WbuVmiyUnZhjmAi0XyUfvM9o6rK6lEDFw8UdVc2uTUh5OzY3VOWr69C7S-a0XItmx-S-s9FaC5kuEqOSSNwcFph0QxGbV5EAEH0I7kACKsIF7uNWcZiabXiDeMvNT2LgvAHj2-dp_m5t_zYGLoIC3KUYI5NSjzdFHhFdBcajzxXWhJ__YEIqUm96xkDC0dXzB41E6xkEpJOGzzOibTSyKSSl34GQSamSren858DlVTmMMKiT1gysMy1QprFISBeyPLefAO474NJoYCW5Q-bLqZzUwa2rSsVt51jBqPLKy4i7kIDkvOYU4HJunKpK9iHoMgl-yw0ss9HM7deWuAHOZZJCxAdeOqU
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Sat, 03 Dec 2022 01:21:45 GMT
Content-Length: 3270
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 35100cbf157b6825ef3d213be11b9169
8b1d43b2b0382b174ba275b72118932ad28a837a
d427cea895f3856ada3f1b648342b55f2463a7fc88a979b4e8e57e351997e5ee
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 01:21:46 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 07:25:42 GMT
Expires: Thu, 08 Dec 2022 07:25:41 GMT
Etag: "8b1d43b2b0382b174ba275b72118932ad28a837a"
Cache-Control: max-age=453234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77387cc81cdcb50b-OSL
mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzwXDAdHuC637LyT4nqgY4lVLZji0wJ7_ZGdNRMz_dvhc29XXvCS9-JLFXNSHgbbvMDcVgn291AC8_M1Mmbofr-ZKceZDQZtXA_b5np8cxJs0YFos_XX7JtPGVWViaJip_gzuORprI4qlt_7kfAZbXZ_3hitpdaEoqdQhW18LNARgPy3oN0OEJbLnj5updYLDF46i3N-R82Yrmbs8bRAwb8IXAJg2c0GBQpCIC1TnQA3eox256moumXQjYI4PpFWxIQEdsTjSPn0g0mkb9KBzedPOcFshGPJGMffL1Jjf_ip8t1qV102MAp4mr75vc4ayKwjRtEH16qU3W40Am9u1kTXuG_EUOv2NHa8N47EA2kZvK-u12DepJ3MJkWHUT-SHovMs75HF0sCrijEbZiGB56VyS1x6Xb-u4glof4ZSxV5LZF4XealRZaYGHJvxtSWM-_Ye6qKOmY3FVLZae4R3TiobdnAN8X6V4WNUx9BTdQNa7svNcfpBc2Nt0AIVzp_r-x8RH2wkQcqcRisDuqBR9bSAmrIaxT_NHZS8DotScyAo24osoGnxvEw5XbyAHBpVTefa541l6q-IlM5IDksykLXT-Oaj6LCsOwjwClL9yvG3gVwSmeS3-1rizRSbgvJTKFotlewUVBqpLxJ1h_cITvmZ7EqEHM590g1Kaduuf7Q_b9fv9_shflpbxxyWUYtHhSWaYvf3_jkTt6-DsR2dtRqlK4YkVafZmk94zEQWqgFKVeZKv0zo5G5LQjf93up8XDRfVxQW3Rp7dMNxuMZfUgEOLvM09M3mWkRkL-fsp9NvbO-xLsAj5BYVmuq5kFLJ_MZ2jvMippcUSU7hNlHwvRZGuiHhEhCBvbQ0_Z5beFjxxatO32tzQMEoQe5WmEmso59Z8PYH2y3W3usgp-Rb0BcznN_0oBd7UEVjhrHG7rwrzOmIA8spR9AvcMtbP0dZJUVIw31NyMf6ZUO8xsDObkG_oaCAT-PdUlR2LwrTNNSRw1WYr3bLYgyZBhLQ4qlrykzblyP2cwErGxm0DkTVbPy19jGrajjWTP9mPnCocHVJmDTDJcFP2Fq7ADAUYKzRTYFVrDHYw8A58SuFrCKch2T7_Cj17riEHaYtrAUI9zcqKJPvq5gdN7VdS4M_ejIjhY9VYSGMQ5JaCEne_BtfDZghXR8V5uRrbuaqAmBiW-mNUo_24YjZnRY8Qk59pm1LF7ivUaGXbBSJW6QG5OpI1EGqNCSOA1Ux7M4xBhuwRM5E-EBinC47Ba_cHsviy9QZcw4I4SPUqqopD8QAVrOqbUPVEEZJsopYPwPzMRvW5L12pLcGkLhOXxadztrtK_-nDYBS1blRdTOhJISIsuQ_EZgf1cstJ1zORWvAaBftK1tVUHlbqypRIeUEH69-1D0vrJq34qNRxBcmoMtxjAu1XScInh48nhv8OHqZWfSZ4dbnyyl5vLe-gNtzkmRiBwte2DSzppdQgP2EFzSsM5kgIk17_z3WojXrey-_N9gk2hfgwYOtKUEAJyZT1JxzL84IZg8lHR54BHVIAMGlycR0_zjxL3W6mgGnjfNzzs_IsPpHvosjS_P73qlWX2DvIaTmnVkCxXhrw82npAYQXtovwzAr0fFnylLAxYkV_V1e1DpXRYT3ryR5g1W-fW2r1pUzF4fSmMe65ONiddylfM0H6yFtiDvvjsdI2HgGDtq_XRqxZIz4g8Xrs-B0Hoslzk-86lspaVCvcgSoOrAmyMNZXoTj6hv1hmiJZiYbPEJRctcVNFOU1F6rH-pXGWrhYlyyJ4CzwYgkZ0yJDvCe43KO3_S7NiCnWL-HfG9jmjfBKA9bj4gwVtXfpJvhJ4XLSitdmiVmtUhLqppI-k2zvr25vyQkD7V3CU3nEB2Jxf7hiiIX5VXTuLQlb2m32glPjG1cy3jrgxyODoT0zPy_Gsjh3NkrW2p0HcaOk34tZC97S0m0c87iw7P8cPQYfBTNQ6JZJngwRGpz7EccXE0LUT3bse1NU9QmVlAl-Mhslg5JfObioiPDGTLR4tr9-_nyTO8ziV6bvS4IWlDg4ukJ3KRp_5IQllGPiwLw4_Nj1X-TjguhA3z6IMso3-9gXLvMLOmBmnXkjYAE2yX4qZzUwa2rSsVhirZMg908eNYriyDKVGTZtYoj0h0JC3vc2p1IZ76jlXD7j2ldycwo_1Agqzgxm1XzFz1yw2Uv5xLQ9wRz3bSY62G-uAuFwjYZxaj8B-HIgCpRGOW3qF_sqZzUwa2rSsXmx6SeidoD1jL7RpucDGZTH1D8go0dE1DJKsR-LgNnpSu4tbPcMIOWz9T3dVSnovMkYJ-EGdBKXAIfU-nSO265Pb4ncFfn7cIZbYz551kewAa2urKd5uxe77SWCd8SVhtid3Hz__9fzroWtk65Jz-i-kfq4Ncp73ovdH4UMKiTlFcDmNRJVn2S9YumGka_m_JIeTs2N1Tlq49hQ17RjRVP8fWCMXZvsFrMBMA3JPT2W-HVJ11jnOFvEBFdWvLV8bKzr5HgNYaHMZvH7lixhXiso2Lni3GWoAela6N0oeegpx7bgmSExPZ4ecYx3kGl0l4vAxLjjGq2SLSpBH3Ad2TeHPbWDhP8NIlb13ncLJhgvpu1pLodhHJQHe5XaDToBATEafSIUuIoimdqUAhMCS6LXba1EOy-7m3_6A2YGCe18KPIp9ZnpQgU5fnHB_Qmnw14LhJZZBTbenci3sSEngwkBg8njuTlm5b9WbuVmiyUnZhjmAi0XyUfvM9o6rK6lEDFw8UdVc2uTUh5OzY3VOWr69C7S-a0XItmx-S-s9FaC5kuEqOSSNwcFph0QxGbV5EAEH0I7kACKsIF7uNWcZiabXiDeMvNT2LgvAHj2-dp_m5t_zYGLoIC3KUYI5NSjzdFHhFdBcajzxXWhJ__YEIqUm96xkDC0dXzB41E6xkEpJOGzzOibTSyKSSl34GQSamSren858DlVTmMMKiT1gysMy1QprFISBeyPLefAO474NJoYCW5Q-bLqZzUwa2rSsVt51jBqPLKy4i7kIDkvOYU4HJunKpK9iHoMgl-yw0ss9HM7deWuAHOZZJCxAdeOqU
108.168.193.189302 Found 0 B URL HTTP/2 mybettermb.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzwXDAdHuC637LyT4nqgY4lVLZji0wJ7_ZGdNRMz_dvhc29XXvCS9-JLFXNSHgbbvMDcVgn291AC8_M1Mmbofr-ZKceZDQZtXA_b5np8cxJs0YFos_XX7JtPGVWViaJip_gzuORprI4qlt_7kfAZbXZ_3hitpdaEoqdQhW18LNARgPy3oN0OEJbLnj5updYLDF46i3N-R82Yrmbs8bRAwb8IXAJg2c0GBQpCIC1TnQA3eox256moumXQjYI4PpFWxIQEdsTjSPn0g0mkb9KBzedPOcFshGPJGMffL1Jjf_ip8t1qV102MAp4mr75vc4ayKwjRtEH16qU3W40Am9u1kTXuG_EUOv2NHa8N47EA2kZvK-u12DepJ3MJkWHUT-SHovMs75HF0sCrijEbZiGB56VyS1x6Xb-u4glof4ZSxV5LZF4XealRZaYGHJvxtSWM-_Ye6qKOmY3FVLZae4R3TiobdnAN8X6V4WNUx9BTdQNa7svNcfpBc2Nt0AIVzp_r-x8RH2wkQcqcRisDuqBR9bSAmrIaxT_NHZS8DotScyAo24osoGnxvEw5XbyAHBpVTefa541l6q-IlM5IDksykLXT-Oaj6LCsOwjwClL9yvG3gVwSmeS3-1rizRSbgvJTKFotlewUVBqpLxJ1h_cITvmZ7EqEHM590g1Kaduuf7Q_b9fv9_shflpbxxyWUYtHhSWaYvf3_jkTt6-DsR2dtRqlK4YkVafZmk94zEQWqgFKVeZKv0zo5G5LQjf93up8XDRfVxQW3Rp7dMNxuMZfUgEOLvM09M3mWkRkL-fsp9NvbO-xLsAj5BYVmuq5kFLJ_MZ2jvMippcUSU7hNlHwvRZGuiHhEhCBvbQ0_Z5beFjxxatO32tzQMEoQe5WmEmso59Z8PYH2y3W3usgp-Rb0BcznN_0oBd7UEVjhrHG7rwrzOmIA8spR9AvcMtbP0dZJUVIw31NyMf6ZUO8xsDObkG_oaCAT-PdUlR2LwrTNNSRw1WYr3bLYgyZBhLQ4qlrykzblyP2cwErGxm0DkTVbPy19jGrajjWTP9mPnCocHVJmDTDJcFP2Fq7ADAUYKzRTYFVrDHYw8A58SuFrCKch2T7_Cj17riEHaYtrAUI9zcqKJPvq5gdN7VdS4M_ejIjhY9VYSGMQ5JaCEne_BtfDZghXR8V5uRrbuaqAmBiW-mNUo_24YjZnRY8Qk59pm1LF7ivUaGXbBSJW6QG5OpI1EGqNCSOA1Ux7M4xBhuwRM5E-EBinC47Ba_cHsviy9QZcw4I4SPUqqopD8QAVrOqbUPVEEZJsopYPwPzMRvW5L12pLcGkLhOXxadztrtK_-nDYBS1blRdTOhJISIsuQ_EZgf1cstJ1zORWvAaBftK1tVUHlbqypRIeUEH69-1D0vrJq34qNRxBcmoMtxjAu1XScInh48nhv8OHqZWfSZ4dbnyyl5vLe-gNtzkmRiBwte2DSzppdQgP2EFzSsM5kgIk17_z3WojXrey-_N9gk2hfgwYOtKUEAJyZT1JxzL84IZg8lHR54BHVIAMGlycR0_zjxL3W6mgGnjfNzzs_IsPpHvosjS_P73qlWX2DvIaTmnVkCxXhrw82npAYQXtovwzAr0fFnylLAxYkV_V1e1DpXRYT3ryR5g1W-fW2r1pUzF4fSmMe65ONiddylfM0H6yFtiDvvjsdI2HgGDtq_XRqxZIz4g8Xrs-B0Hoslzk-86lspaVCvcgSoOrAmyMNZXoTj6hv1hmiJZiYbPEJRctcVNFOU1F6rH-pXGWrhYlyyJ4CzwYgkZ0yJDvCe43KO3_S7NiCnWL-HfG9jmjfBKA9bj4gwVtXfpJvhJ4XLSitdmiVmtUhLqppI-k2zvr25vyQkD7V3CU3nEB2Jxf7hiiIX5VXTuLQlb2m32glPjG1cy3jrgxyODoT0zPy_Gsjh3NkrW2p0HcaOk34tZC97S0m0c87iw7P8cPQYfBTNQ6JZJngwRGpz7EccXE0LUT3bse1NU9QmVlAl-Mhslg5JfObioiPDGTLR4tr9-_nyTO8ziV6bvS4IWlDg4ukJ3KRp_5IQllGPiwLw4_Nj1X-TjguhA3z6IMso3-9gXLvMLOmBmnXkjYAE2yX4qZzUwa2rSsVhirZMg908eNYriyDKVGTZtYoj0h0JC3vc2p1IZ76jlXD7j2ldycwo_1Agqzgxm1XzFz1yw2Uv5xLQ9wRz3bSY62G-uAuFwjYZxaj8B-HIgCpRGOW3qF_sqZzUwa2rSsXmx6SeidoD1jL7RpucDGZTH1D8go0dE1DJKsR-LgNnpSu4tbPcMIOWz9T3dVSnovMkYJ-EGdBKXAIfU-nSO265Pb4ncFfn7cIZbYz551kewAa2urKd5uxe77SWCd8SVhtid3Hz__9fzroWtk65Jz-i-kfq4Ncp73ovdH4UMKiTlFcDmNRJVn2S9YumGka_m_JIeTs2N1Tlq49hQ17RjRVP8fWCMXZvsFrMBMA3JPT2W-HVJ11jnOFvEBFdWvLV8bKzr5HgNYaHMZvH7lixhXiso2Lni3GWoAela6N0oeegpx7bgmSExPZ4ecYx3kGl0l4vAxLjjGq2SLSpBH3Ad2TeHPbWDhP8NIlb13ncLJhgvpu1pLodhHJQHe5XaDToBATEafSIUuIoimdqUAhMCS6LXba1EOy-7m3_6A2YGCe18KPIp9ZnpQgU5fnHB_Qmnw14LhJZZBTbenci3sSEngwkBg8njuTlm5b9WbuVmiyUnZhjmAi0XyUfvM9o6rK6lEDFw8UdVc2uTUh5OzY3VOWr69C7S-a0XItmx-S-s9FaC5kuEqOSSNwcFph0QxGbV5EAEH0I7kACKsIF7uNWcZiabXiDeMvNT2LgvAHj2-dp_m5t_zYGLoIC3KUYI5NSjzdFHhFdBcajzxXWhJ__YEIqUm96xkDC0dXzB41E6xkEpJOGzzOibTSyKSSl34GQSamSren858DlVTmMMKiT1gysMy1QprFISBeyPLefAO474NJoYCW5Q-bLqZzUwa2rSsVt51jBqPLKy4i7kIDkvOYU4HJunKpK9iHoMgl-yw0ss9HM7deWuAHOZZJCxAdeOqU
IP 108.168.193.189:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aS/feedclick?s=HFz5zNIIs95ROWPasgEEzwXDAdHuC637LyT4nqgY4lVLZji0wJ7_ZGdNRMz_dvhc29XXvCS9-JLFXNSHgbbvMDcVgn291AC8_M1Mmbofr-ZKceZDQZtXA_b5np8cxJs0YFos_XX7JtPGVWViaJip_gzuORprI4qlt_7kfAZbXZ_3hitpdaEoqdQhW18LNARgPy3oN0OEJbLnj5updYLDF46i3N-R82Yrmbs8bRAwb8IXAJg2c0GBQpCIC1TnQA3eox256moumXQjYI4PpFWxIQEdsTjSPn0g0mkb9KBzedPOcFshGPJGMffL1Jjf_ip8t1qV102MAp4mr75vc4ayKwjRtEH16qU3W40Am9u1kTXuG_EUOv2NHa8N47EA2kZvK-u12DepJ3MJkWHUT-SHovMs75HF0sCrijEbZiGB56VyS1x6Xb-u4glof4ZSxV5LZF4XealRZaYGHJvxtSWM-_Ye6qKOmY3FVLZae4R3TiobdnAN8X6V4WNUx9BTdQNa7svNcfpBc2Nt0AIVzp_r-x8RH2wkQcqcRisDuqBR9bSAmrIaxT_NHZS8DotScyAo24osoGnxvEw5XbyAHBpVTefa541l6q-IlM5IDksykLXT-Oaj6LCsOwjwClL9yvG3gVwSmeS3-1rizRSbgvJTKFotlewUVBqpLxJ1h_cITvmZ7EqEHM590g1Kaduuf7Q_b9fv9_shflpbxxyWUYtHhSWaYvf3_jkTt6-DsR2dtRqlK4YkVafZmk94zEQWqgFKVeZKv0zo5G5LQjf93up8XDRfVxQW3Rp7dMNxuMZfUgEOLvM09M3mWkRkL-fsp9NvbO-xLsAj5BYVmuq5kFLJ_MZ2jvMippcUSU7hNlHwvRZGuiHhEhCBvbQ0_Z5beFjxxatO32tzQMEoQe5WmEmso59Z8PYH2y3W3usgp-Rb0BcznN_0oBd7UEVjhrHG7rwrzOmIA8spR9AvcMtbP0dZJUVIw31NyMf6ZUO8xsDObkG_oaCAT-PdUlR2LwrTNNSRw1WYr3bLYgyZBhLQ4qlrykzblyP2cwErGxm0DkTVbPy19jGrajjWTP9mPnCocHVJmDTDJcFP2Fq7ADAUYKzRTYFVrDHYw8A58SuFrCKch2T7_Cj17riEHaYtrAUI9zcqKJPvq5gdN7VdS4M_ejIjhY9VYSGMQ5JaCEne_BtfDZghXR8V5uRrbuaqAmBiW-mNUo_24YjZnRY8Qk59pm1LF7ivUaGXbBSJW6QG5OpI1EGqNCSOA1Ux7M4xBhuwRM5E-EBinC47Ba_cHsviy9QZcw4I4SPUqqopD8QAVrOqbUPVEEZJsopYPwPzMRvW5L12pLcGkLhOXxadztrtK_-nDYBS1blRdTOhJISIsuQ_EZgf1cstJ1zORWvAaBftK1tVUHlbqypRIeUEH69-1D0vrJq34qNRxBcmoMtxjAu1XScInh48nhv8OHqZWfSZ4dbnyyl5vLe-gNtzkmRiBwte2DSzppdQgP2EFzSsM5kgIk17_z3WojXrey-_N9gk2hfgwYOtKUEAJyZT1JxzL84IZg8lHR54BHVIAMGlycR0_zjxL3W6mgGnjfNzzs_IsPpHvosjS_P73qlWX2DvIaTmnVkCxXhrw82npAYQXtovwzAr0fFnylLAxYkV_V1e1DpXRYT3ryR5g1W-fW2r1pUzF4fSmMe65ONiddylfM0H6yFtiDvvjsdI2HgGDtq_XRqxZIz4g8Xrs-B0Hoslzk-86lspaVCvcgSoOrAmyMNZXoTj6hv1hmiJZiYbPEJRctcVNFOU1F6rH-pXGWrhYlyyJ4CzwYgkZ0yJDvCe43KO3_S7NiCnWL-HfG9jmjfBKA9bj4gwVtXfpJvhJ4XLSitdmiVmtUhLqppI-k2zvr25vyQkD7V3CU3nEB2Jxf7hiiIX5VXTuLQlb2m32glPjG1cy3jrgxyODoT0zPy_Gsjh3NkrW2p0HcaOk34tZC97S0m0c87iw7P8cPQYfBTNQ6JZJngwRGpz7EccXE0LUT3bse1NU9QmVlAl-Mhslg5JfObioiPDGTLR4tr9-_nyTO8ziV6bvS4IWlDg4ukJ3KRp_5IQllGPiwLw4_Nj1X-TjguhA3z6IMso3-9gXLvMLOmBmnXkjYAE2yX4qZzUwa2rSsVhirZMg908eNYriyDKVGTZtYoj0h0JC3vc2p1IZ76jlXD7j2ldycwo_1Agqzgxm1XzFz1yw2Uv5xLQ9wRz3bSY62G-uAuFwjYZxaj8B-HIgCpRGOW3qF_sqZzUwa2rSsXmx6SeidoD1jL7RpucDGZTH1D8go0dE1DJKsR-LgNnpSu4tbPcMIOWz9T3dVSnovMkYJ-EGdBKXAIfU-nSO265Pb4ncFfn7cIZbYz551kewAa2urKd5uxe77SWCd8SVhtid3Hz__9fzroWtk65Jz-i-kfq4Ncp73ovdH4UMKiTlFcDmNRJVn2S9YumGka_m_JIeTs2N1Tlq49hQ17RjRVP8fWCMXZvsFrMBMA3JPT2W-HVJ11jnOFvEBFdWvLV8bKzr5HgNYaHMZvH7lixhXiso2Lni3GWoAela6N0oeegpx7bgmSExPZ4ecYx3kGl0l4vAxLjjGq2SLSpBH3Ad2TeHPbWDhP8NIlb13ncLJhgvpu1pLodhHJQHe5XaDToBATEafSIUuIoimdqUAhMCS6LXba1EOy-7m3_6A2YGCe18KPIp9ZnpQgU5fnHB_Qmnw14LhJZZBTbenci3sSEngwkBg8njuTlm5b9WbuVmiyUnZhjmAi0XyUfvM9o6rK6lEDFw8UdVc2uTUh5OzY3VOWr69C7S-a0XItmx-S-s9FaC5kuEqOSSNwcFph0QxGbV5EAEH0I7kACKsIF7uNWcZiabXiDeMvNT2LgvAHj2-dp_m5t_zYGLoIC3KUYI5NSjzdFHhFdBcajzxXWhJ__YEIqUm96xkDC0dXzB41E6xkEpJOGzzOibTSyKSSl34GQSamSren858DlVTmMMKiT1gysMy1QprFISBeyPLefAO474NJoYCW5Q-bLqZzUwa2rSsVt51jBqPLKy4i7kIDkvOYU4HJunKpK9iHoMgl-yw0ss9HM7deWuAHOZZJCxAdeOqU HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Cookie: rhid=82484378266; loi=ad_490233_off_142374_aff_3322_cid_274639-525980711-JIGGASHA.COM_ts_1670029859
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 03 Dec 2022 01:21:46 GMT
content-length: 0
set-cookie: rhid=82484378266; Max-Age=15552000; Expires=Thu, 01-Jun-2023 01:21:46 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://p274639.mybettermb.com/adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCJB3FqzYwU-8i-eAbrPJncONG2LV3Zkk-IwQKE9WM4vINXAnYC4dta_oTGLlCfXxGcGrTdz8YzS_R6ZqGGVygmx4A3OfV8VvNdylGCOTUo83I4XCXOQKRvMU515zaB-58RhxCY7M-QIAFylbRZqYhObmpvaz0HfxKY2BT0a8HLU08YLCPV82gSfQLxp0o2L5Y4_7Y2cIdaKdePbgoo9WD8eu7mIrxoOxHI4jzX511G8SHmh_fDTBtZO8x0-5CLJ8-tgVhA38YgAZ8MGYhorgSE_5pcKzlT2_pOA1ASW8WlYj2KaNn_6EKhrps8Ba45uzzmI-I2OiOxp4xMKqRAp2FO2wu37skkIM1hEFKFFM8kZE9hjMYFWLX_CNS2WLeKlnCK0gbo6n8plZR_HjI0Erco6-XsIy9vbiqRbxQyvzOfOkcfqvj8aB6Fk-cSovN17k3hMFTjhPWPNYRxS3KhTHqcSgy9Zx685cl_5FxF5yC-V9U8Jg7ImuhlGA4MOosh6Ur2_SwENznKF-HtO6_ze7F0W0fJee60pFZ6EYUmojP73z8Sak1DalSt8vjd-d4RmIWr5ewjL29uKpzej57qHZHz5CdA6jaU9vnQLB6UC1viFsedW0kyu55g76XqiKBg8-eDgLOizwnSNh2AGzNOjo4vwpXRdGXzQkCAJhbv8jnDgCYTtVpYha-ftMBjVMmngXy6pKBRNuI0RC0wj5j36fcklA79Jqsn7sH2xf146cvBjGiNLle-8-UD3ANIkpYT9byNNrMKLgafIZOP4Y9yygj9tMH3o6KF7BlxQ6Ins6iRqallpg4FhZfxSND2YfpRIsxCN5ECptO-enzRUjrlYf0kI8GNZX2HI45GJWdAgaDFAOJTu6AXYz7K4aU2qFXKWm-ST4wVIzB4sUixNQEx2h0FjO0YZFimsSKBfmcGIZqNHMqUzaeYhSjwo4wze4caGpDvAdDxfNZOFVxWfBO_Pgkf9Lj9hxf0SJk0tVfUbfcXAU2dgRsl_cISdhzavJEfo6eseVq4GY9uFdESEy041wghMrAgV2R4ubIyh-8XWjYI5uvZ0tvrAyc11VkHRUwGVzse4_hxqmBidZ34_EUBB7T3W5HBHAGI8aS9N1nFfXSbZvnHOFig1NfW7vYpQjImT0vw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSRkRDduRYuhW5MNlzRfKk6XqkT5MJgg36OowsMDXcyKiEaWgBY9F-ReDf-yrDj6Y4BE7tw-YZgS_6FM2vynwPhw&si=1&oref=dd226087e4c027e7da686ac31e5e69f7&optunit=GlNqhVylpvmtK6Mz5FaVqw&rb=6HrvxnDas3s&rr=0&abtg=0
X-Firefox-Spdy: h2
p274639.mybettermb.com/adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCJB3FqzYwU-8i-eAbrPJncONG2LV3Zkk-IwQKE9WM4vINXAnYC4dta_oTGLlCfXxGcGrTdz8YzS_R6ZqGGVygmx4A3OfV8VvNdylGCOTUo83I4XCXOQKRvMU515zaB-58RhxCY7M-QIAFylbRZqYhObmpvaz0HfxKY2BT0a8HLU08YLCPV82gSfQLxp0o2L5Y4_7Y2cIdaKdePbgoo9WD8eu7mIrxoOxHI4jzX511G8SHmh_fDTBtZO8x0-5CLJ8-tgVhA38YgAZ8MGYhorgSE_5pcKzlT2_pOA1ASW8WlYj2KaNn_6EKhrps8Ba45uzzmI-I2OiOxp4xMKqRAp2FO2wu37skkIM1hEFKFFM8kZE9hjMYFWLX_CNS2WLeKlnCK0gbo6n8plZR_HjI0Erco6-XsIy9vbiqRbxQyvzOfOkcfqvj8aB6Fk-cSovN17k3hMFTjhPWPNYRxS3KhTHqcSgy9Zx685cl_5FxF5yC-V9U8Jg7ImuhlGA4MOosh6Ur2_SwENznKF-HtO6_ze7F0W0fJee60pFZ6EYUmojP73z8Sak1DalSt8vjd-d4RmIWr5ewjL29uKpzej57qHZHz5CdA6jaU9vnQLB6UC1viFsedW0kyu55g76XqiKBg8-eDgLOizwnSNh2AGzNOjo4vwpXRdGXzQkCAJhbv8jnDgCYTtVpYha-ftMBjVMmngXy6pKBRNuI0RC0wj5j36fcklA79Jqsn7sH2xf146cvBjGiNLle-8-UD3ANIkpYT9byNNrMKLgafIZOP4Y9yygj9tMH3o6KF7BlxQ6Ins6iRqallpg4FhZfxSND2YfpRIsxCN5ECptO-enzRUjrlYf0kI8GNZX2HI45GJWdAgaDFAOJTu6AXYz7K4aU2qFXKWm-ST4wVIzB4sUixNQEx2h0FjO0YZFimsSKBfmcGIZqNHMqUzaeYhSjwo4wze4caGpDvAdDxfNZOFVxWfBO_Pgkf9Lj9hxf0SJk0tVfUbfcXAU2dgRsl_cISdhzavJEfo6eseVq4GY9uFdESEy041wghMrAgV2R4ubIyh-8XWjYI5uvZ0tvrAyc11VkHRUwGVzse4_hxqmBidZ34_EUBB7T3W5HBHAGI8aS9N1nFfXSbZvnHOFig1NfW7vYpQjImT0vw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSRkRDduRYuhW5MNlzRfKk6XqkT5MJgg36OowsMDXcyKiEaWgBY9F-ReDf-yrDj6Y4BE7tw-YZgS_6FM2vynwPhw&si=1&oref=dd226087e4c027e7da686ac31e5e69f7&optunit=GlNqhVylpvmtK6Mz5FaVqw&rb=6HrvxnDas3s&rr=0&abtg=0
108.168.193.189302 Found 0 B URL HTTP/2 p274639.mybettermb.com/adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCJB3FqzYwU-8i-eAbrPJncONG2LV3Zkk-IwQKE9WM4vINXAnYC4dta_oTGLlCfXxGcGrTdz8YzS_R6ZqGGVygmx4A3OfV8VvNdylGCOTUo83I4XCXOQKRvMU515zaB-58RhxCY7M-QIAFylbRZqYhObmpvaz0HfxKY2BT0a8HLU08YLCPV82gSfQLxp0o2L5Y4_7Y2cIdaKdePbgoo9WD8eu7mIrxoOxHI4jzX511G8SHmh_fDTBtZO8x0-5CLJ8-tgVhA38YgAZ8MGYhorgSE_5pcKzlT2_pOA1ASW8WlYj2KaNn_6EKhrps8Ba45uzzmI-I2OiOxp4xMKqRAp2FO2wu37skkIM1hEFKFFM8kZE9hjMYFWLX_CNS2WLeKlnCK0gbo6n8plZR_HjI0Erco6-XsIy9vbiqRbxQyvzOfOkcfqvj8aB6Fk-cSovN17k3hMFTjhPWPNYRxS3KhTHqcSgy9Zx685cl_5FxF5yC-V9U8Jg7ImuhlGA4MOosh6Ur2_SwENznKF-HtO6_ze7F0W0fJee60pFZ6EYUmojP73z8Sak1DalSt8vjd-d4RmIWr5ewjL29uKpzej57qHZHz5CdA6jaU9vnQLB6UC1viFsedW0kyu55g76XqiKBg8-eDgLOizwnSNh2AGzNOjo4vwpXRdGXzQkCAJhbv8jnDgCYTtVpYha-ftMBjVMmngXy6pKBRNuI0RC0wj5j36fcklA79Jqsn7sH2xf146cvBjGiNLle-8-UD3ANIkpYT9byNNrMKLgafIZOP4Y9yygj9tMH3o6KF7BlxQ6Ins6iRqallpg4FhZfxSND2YfpRIsxCN5ECptO-enzRUjrlYf0kI8GNZX2HI45GJWdAgaDFAOJTu6AXYz7K4aU2qFXKWm-ST4wVIzB4sUixNQEx2h0FjO0YZFimsSKBfmcGIZqNHMqUzaeYhSjwo4wze4caGpDvAdDxfNZOFVxWfBO_Pgkf9Lj9hxf0SJk0tVfUbfcXAU2dgRsl_cISdhzavJEfo6eseVq4GY9uFdESEy041wghMrAgV2R4ubIyh-8XWjYI5uvZ0tvrAyc11VkHRUwGVzse4_hxqmBidZ34_EUBB7T3W5HBHAGI8aS9N1nFfXSbZvnHOFig1NfW7vYpQjImT0vw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSRkRDduRYuhW5MNlzRfKk6XqkT5MJgg36OowsMDXcyKiEaWgBY9F-ReDf-yrDj6Y4BE7tw-YZgS_6FM2vynwPhw&si=1&oref=dd226087e4c027e7da686ac31e5e69f7&optunit=GlNqhVylpvmtK6Mz5FaVqw&rb=6HrvxnDas3s&rr=0&abtg=0
IP 108.168.193.189:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adServe/domainClick?ai=zHPR75Zx-onygYaeN_ogCJB3FqzYwU-8i-eAbrPJncONG2LV3Zkk-IwQKE9WM4vINXAnYC4dta_oTGLlCfXxGcGrTdz8YzS_R6ZqGGVygmx4A3OfV8VvNdylGCOTUo83I4XCXOQKRvMU515zaB-58RhxCY7M-QIAFylbRZqYhObmpvaz0HfxKY2BT0a8HLU08YLCPV82gSfQLxp0o2L5Y4_7Y2cIdaKdePbgoo9WD8eu7mIrxoOxHI4jzX511G8SHmh_fDTBtZO8x0-5CLJ8-tgVhA38YgAZ8MGYhorgSE_5pcKzlT2_pOA1ASW8WlYj2KaNn_6EKhrps8Ba45uzzmI-I2OiOxp4xMKqRAp2FO2wu37skkIM1hEFKFFM8kZE9hjMYFWLX_CNS2WLeKlnCK0gbo6n8plZR_HjI0Erco6-XsIy9vbiqRbxQyvzOfOkcfqvj8aB6Fk-cSovN17k3hMFTjhPWPNYRxS3KhTHqcSgy9Zx685cl_5FxF5yC-V9U8Jg7ImuhlGA4MOosh6Ur2_SwENznKF-HtO6_ze7F0W0fJee60pFZ6EYUmojP73z8Sak1DalSt8vjd-d4RmIWr5ewjL29uKpzej57qHZHz5CdA6jaU9vnQLB6UC1viFsedW0kyu55g76XqiKBg8-eDgLOizwnSNh2AGzNOjo4vwpXRdGXzQkCAJhbv8jnDgCYTtVpYha-ftMBjVMmngXy6pKBRNuI0RC0wj5j36fcklA79Jqsn7sH2xf146cvBjGiNLle-8-UD3ANIkpYT9byNNrMKLgafIZOP4Y9yygj9tMH3o6KF7BlxQ6Ins6iRqallpg4FhZfxSND2YfpRIsxCN5ECptO-enzRUjrlYf0kI8GNZX2HI45GJWdAgaDFAOJTu6AXYz7K4aU2qFXKWm-ST4wVIzB4sUixNQEx2h0FjO0YZFimsSKBfmcGIZqNHMqUzaeYhSjwo4wze4caGpDvAdDxfNZOFVxWfBO_Pgkf9Lj9hxf0SJk0tVfUbfcXAU2dgRsl_cISdhzavJEfo6eseVq4GY9uFdESEy041wghMrAgV2R4ubIyh-8XWjYI5uvZ0tvrAyc11VkHRUwGVzse4_hxqmBidZ34_EUBB7T3W5HBHAGI8aS9N1nFfXSbZvnHOFig1NfW7vYpQjImT0vw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSRkRDduRYuhW5MNlzRfKk6XqkT5MJgg36OowsMDXcyKiEaWgBY9F-ReDf-yrDj6Y4BE7tw-YZgS_6FM2vynwPhw&si=1&oref=dd226087e4c027e7da686ac31e5e69f7&optunit=GlNqhVylpvmtK6Mz5FaVqw&rb=6HrvxnDas3s&rr=0&abtg=0 HTTP/1.1
Host: p274639.mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Cookie: rhid=82484378266; loi=ad_490233_off_142374_aff_3322_cid_274639-525980711-JIGGASHA.COM_ts_1670029859
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 03 Dec 2022 01:21:46 GMT
content-length: 0
set-cookie: rhid=82484378266; Max-Age=15552000; Expires=Thu, 01-Jun-2023 01:21:46 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
loi=ad_490233_off_142374_aff_3322_cid_274639-289784594-MEDRONIC.COM_ts_1670030506; Max-Age=3600; Expires=Sat, 03-Dec-2022 02:21:46 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://myfood.ltd/?v=20171031&s1=0
X-Firefox-Spdy: h2
myfood.ltd/?v=20171031&s1=0
151.139.128.10200 OK 2.9 kB URL HTTP/2 myfood.ltd/?v=20171031&s1=0
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6859), with no line terminators
Hash 029ccb01ef612a9e6748494c60d24b69
d385f7671725be11701998c27571e94b1950f991
7ac429dc45b509b1bed9bdcdc5610868d510d979ce3cc06d48870511bf0425f5
GET /?v=20171031&s1=0 HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:21:46 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 2896
content-type: text/html
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: W/"603cb731-1ad4"
x-hw: 1670030506.cds255.sk1.hn,1670030506.cds236.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/main/css/style.css
151.139.128.10200 OK 19 kB URL HTTP/2 myfood.ltd/main/css/style.css
IP 151.139.128.10:0
File type Unicode text, UTF-8 text, with very long lines (65134), with no line terminators
Hash a95a0c8bd1273406b8c8053fb3527d56
2a461dcfa2c4bf1d22727bfd7c3c2abc85d44343
55b46146d32f4ee365d4ca91d8b3b1c504a062b15bbc1ed60a22ac2d05be1db5
GET /main/css/style.css HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:21:46 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 18933
content-type: text/css
last-modified: Mon, 01 Mar 2021 09:43:15 GMT
accept-ranges: bytes
server: nginx
etag: W/"603cb733-1b1ac"
x-hw: 1670030506.cds255.sk1.hn,1670030506.cds261.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_1.jpg
151.139.128.10200 OK 74 kB URL HTTP/2 myfood.ltd/images/Superfood_1.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x420, components 3\012- data
Hash c2c3ec0e55e648c2a85d4499714a9c11
073f2990a52da59a7d3b73583b30be3c2cf45523
b66cf7365382753dc6340bfa2fba89c368ca3b930a0833d8f64c4c34525fc2ec
GET /images/Superfood_1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:21:46 GMT
cache-control: max-age=30
content-length: 74204
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-121dc"
x-hw: 1670030506.cds255.sk1.hn,1670030506.cds247.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_2.jpg
151.139.128.10200 OK 52 kB URL HTTP/2 myfood.ltd/images/Superfood_2.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x341, components 3\012- data
Hash b87af7248a82f58fe2ea5d0c7b030886
1d5a5b9752d7978c68b0d4a1689b3d8e6d322f0a
14da8c39c357dad0441b26d575c0000a9529c76d785680306a3cf51abe4cae81
GET /images/Superfood_2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:21:46 GMT
cache-control: max-age=30
content-length: 51830
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: "603cb731-ca76"
x-hw: 1670030506.cds255.sk1.hn,1670030506.cds220.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-1.jpg
151.139.128.10200 OK 11 kB URL HTTP/2 myfood.ltd/images/avatar-1.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash 62d0b6a649ac10e72bcb6ea3bbf57564
3e333889b0b66bfc6a32499f4c55878e2102b463
58dddc0a77632d920d096da6c6e2587c5859a4b4dd7af6dcd6eb8009ebc23ba6
GET /images/avatar-1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:21:46 GMT
cache-control: max-age=30
content-length: 11304
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-2c28"
x-hw: 1670030506.cds255.sk1.hn,1670030506.cds218.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-2.jpg
151.139.128.10200 OK 11 kB URL HTTP/2 myfood.ltd/images/avatar-2.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash dd3881ed1b5b03b1d571edf89e12c466
61ca68c1c2d2ae7d286dfc0540f4ca8b357fdf3d
97b65e41dd547b310e1e860d2ae4717dba1d97bd36c0cd06c35749caa515e207
GET /images/avatar-2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:21:46 GMT
cache-control: max-age=30
content-length: 10665
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-29a9"
x-hw: 1670030506.cds255.sk1.hn,1670030506.cds217.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/main/js/main.js
151.139.128.10200 OK 39 kB URL HTTP/2 myfood.ltd/main/js/main.js
IP 151.139.128.10:0
File type Unicode text, UTF-8 text, with very long lines (60220)
Hash 181e3fa3b1de97ff4efd259bc2a2c8c7
52edf1dc36109cb57bea12689a48442e27f06ad1
ffa8984bea3bf0c0a0cb282e9a5a98b3435e63fb6a26dfe0351979fa9f827c40
GET /main/js/main.js HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:21:46 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 38656
content-type: application/javascript
last-modified: Mon, 01 Mar 2021 09:43:14 GMT
accept-ranges: bytes
server: nginx
etag: "603cb732-1d57b"
x-hw: 1670030506.cds255.sk1.hn,1670030506.cds228.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5229
Expires: Sat, 03 Dec 2022 02:48:56 GMT
Date: Sat, 03 Dec 2022 01:21:47 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5229
Expires: Sat, 03 Dec 2022 02:48:56 GMT
Date: Sat, 03 Dec 2022 01:21:47 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5229
Expires: Sat, 03 Dec 2022 02:48:56 GMT
Date: Sat, 03 Dec 2022 01:21:47 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5229
Expires: Sat, 03 Dec 2022 02:48:56 GMT
Date: Sat, 03 Dec 2022 01:21:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6420910e-ce43-46a0-89dc-4495fcc90ae3.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6420910e-ce43-46a0-89dc-4495fcc90ae3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e69659e6409f9caf1fe9cc67c9627353
d316d825169d60dde81a3ee522dd004dfa97fa91
88caacec3bbb78e83905b25b489aff9ae71cfed94835503c601daa15f8248d9c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6420910e-ce43-46a0-89dc-4495fcc90ae3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9527
x-amzn-requestid: 8bbc4492-b1b2-4aae-a09e-1d2c4453e642
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsg9GuBoAMFm2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6384279f-02732aee2d0807af5674481f;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:14:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: cXBNqahvO50EQQ9KGJXMsj3ClEv6OGuRc80LaN5FJ4qQRfylEkUa5w==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 01:33:03 GMT
age: 85724
etag: "d316d825169d60dde81a3ee522dd004dfa97fa91"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd79a3383-273b-420b-975f-73400e86239a.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd79a3383-273b-420b-975f-73400e86239a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7c90eda6b69179422ecd1245e94162c
d5e0aef84626250a62cc94a781a47e08aaac3f6a
5fd1c9586a82c9e6a9a8b5d99b746f17e9485f80057ec35c3f8d5ab5256fbb16
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd79a3383-273b-420b-975f-73400e86239a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8273
x-amzn-requestid: 6abe0e18-1b39-4a87-8f15-6ea75d99b658
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZosHLDIAMFyoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6fd1-455200672a96e0f5605a339f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:36:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sSTysER3tOW4FGv3lqvx2cPAaG8J9wyeuRJB61x8oYQG9Ah1xe1Z0w==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:53:33 GMT
age: 12494
etag: "d5e0aef84626250a62cc94a781a47e08aaac3f6a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jM-fTqLsmU3c_gc9Wle-lvCwXelA9Sid9axtzJQDsfOHv23yUbKsBw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 23:43:28 GMT
age: 5899
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 249aec334460c66dc88b9e8def4e48df
f86d1d278ba5b24587b10519b1b30d75044efd97
b083151804ced0533a5b33302ef110b50ddc4bf653de0fb8f6c7711f4bc29fe2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9449
x-amzn-requestid: c21c52f9-d971-46d9-b632-0439a0e23da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZkxHKbIAMFxkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6fb7-2b8cc0982af568626f4a4bbf;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:35:51 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XFIpOllaPcRJOsgZI2EVDyFv-Doz62OcY6gxFlejoXxdeVGya-PNFg==
via: 1.1 b838ef1ff22a4a994af82d5178c30e1c.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:53:26 GMT
age: 12501
etag: "f86d1d278ba5b24587b10519b1b30d75044efd97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45182367fd4f8b6dd234eef1022acdb1
d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:06 GMT
age: 12641
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fcb89ca25035b2bbb71ae5dd175fcd40
544428cdad754b1bb7be3cd46a79bf078fd5b450
36dcbbe6cd2710ee502776b4bcf32053e92b750a55e2bd4cdeadbc694c7c2699
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: c824c317-e6e3-4006-9f9d-ea54e8170a4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cf2_tGErIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63896b97-7fc523296afea4dd4b5d1de8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 03:05:59 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bd85z5A6C0nxpDjeSEPp1NHJxXFO5sy1OgTLz7KpdWz61TNrfyQ47Q==
via: 1.1 40b967aa4aa18637c4b91214147f3cb4.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:48:26 GMT
age: 77601
etag: "544428cdad754b1bb7be3cd46a79bf078fd5b450"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:21:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
myfood.ltd/favicon.ico
151.139.128.10200 OK 1.2 kB IP 151.139.128.10:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash b671b0407b8abf4ffb9946ee1596d992
79a116ffd13f1888451abd3cb8751cb2140f2fa4
1515616a51664df153b03397585ee45469cb936100992f870419514b17820649
GET /favicon.ico HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:21:47 GMT
cache-control: max-age=30
content-length: 1150
content-type: image/x-icon
last-modified: Wed, 28 Mar 2018 14:00:16 GMT
accept-ranges: bytes
server: nginx
etag: "5abb9ff0-47e"
x-hw: 1670030507.cds255.sk1.hn,1670030507.cds240.sk1.c
X-Firefox-Spdy: h2