r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ec332b81a27117ce9c16b67a5a8e4fac
b6d2afa2c859d000ad830d3d8d73f57bac6ffce2
1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7320
Expires: Mon, 20 Mar 2023 17:27:47 GMT
Date: Mon, 20 Mar 2023 15:25:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00e304a3fc0c2f01af0e94fcefe0ca40
833969e75e5e13e823c8d97ee59a9821eb157ee3
c2b7f7ae4861f2dd16867de54c7e47d95582de77887f523841d9683a369d20a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2B7F7AE4861F2DD16867DE54C7E47D95582DE77887F523841D9683A369D20A7"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4588
Expires: Mon, 20 Mar 2023 16:42:15 GMT
Date: Mon, 20 Mar 2023 15:25:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 20 Mar 2023 15:14:55 GMT
content-type: application/json
age: 652
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5285a032a285729d3e4a546310ed052d
d370c14bbc2d168cc3703bcb6b94ea0ece26e69d
a811aac1eb89de0666a7de8d3eda1dc3affa7ce5353219211a1beee1211536b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A811AAC1EB89DE0666A7DE8D3EDA1DC3AFFA7CE5353219211A1BEEE1211536B5"
Last-Modified: Mon, 20 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8688
Expires: Mon, 20 Mar 2023 17:50:35 GMT
Date: Mon, 20 Mar 2023 15:25:47 GMT
Connection: keep-alive
retti.com/http:/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7:1oXAGC:1oEaxCC4hwELz5eN14PrEohw-pc/2
200 OK 23 kB URL HTTP/1.1 retti.com/http:/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7:1oXAGC:1oEaxCC4hwELz5eN14PrEohw-pc/2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (57274)
Hash a0f62e2dedd040e3119e3b97b00340fa
bfda3825da8e02eb734cca8c850bb2b3cf3d2386
73aacf86f4b03e758276871b9ea68442669a3da638e7c18f3839b0dc72e1d0c5
Analyzer Verdict Alert fortinet Malware
GET /http:/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7:1oXAGC:1oEaxCC4hwELz5eN14PrEohw-pc/2 HTTP/1.1
Host: retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 20 Mar 2023 15:25:47 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DQ0/hLYPBdmlo7gH6Ya7Y7odFamskPBpULUczv+bNMTax4znqqDUcib/6Yqxpu4/T9RrbAOOayPdqUH622371w==
x-amz-request-id: CPMY8HNSFRCCN7J2
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 20 Mar 2023 14:52:48 GMT
age: 1979
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 15:25:47 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
retti.com/http%3A/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7%3A1oXAGC%3A1oEaxCC4hwELz5eN14PrEohw-pc/2?gp=1&js=1&uuid=1679325947.0054016982&other_args=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
302 Found 0 B URL HTTP/1.1 retti.com/http%3A/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7%3A1oXAGC%3A1oEaxCC4hwELz5eN14PrEohw-pc/2?gp=1&js=1&uuid=1679325947.0054016982&other_args=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /http%3A/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7%3A1oXAGC%3A1oEaxCC4hwELz5eN14PrEohw-pc/2?gp=1&js=1&uuid=1679325947.0054016982&other_args=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 HTTP/1.1
Host: retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://retti.com/http:/retti.com/mtm/direct/.eJxdkN9TgkAcxP8XHksEMckf4wNlKKiMiiHx0hzHCWccIHyB06b_Pcxqpt52P7OzM7vvQplTYShIEUA2lHICQNs4ZRIDJgU0JxikNjHrwdsSyvBN07SVqONTYTjY9s11Hh83Psfbab3g9zoPZN3zKpGcHYtkYPYO271dBHMPqWm0mYA7dQw6M57QfKmksR6dNtpaDaOepVY0pdapcFhxVkvzbHLZdq1lH6y6ukNlpxTPoHTo2gbjFXv1IHnuMyVzzRmRVxxhdbkPfAMM9c7tiNUkXujdg7t77IpynXnqY1AXkRc_T-3NiZniS09Z4dlgNwHn4UVjh0RxDw9CS0B5WDRHNCone5KT_GqitIDXBDHS2N93LnGMm4kNBMKheY_FLZRlMcUIaJpI_EJu-X_K4tFxLLcHLcpQSCRU0f23rImf_dAsCVs30s1XtP-noKBhQgKRcByhJCSjaux3r43CxydK_5y7:1oXAGC:1oEaxCC4hwELz5eN14PrEohw-pc/2
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Mon, 20 Mar 2023 15:25:47 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.retti.com/?tm=1&subid4=1679325947.0478360000&KW1=B2B%20Travel%20Booking%20System&KW2=Dedicated%20Gaming%20Servers&KW3=Elite%20Dating%20Services&KW4=Lowest%20Car%20Insurance%20Rates&KW5=Best%20Mortgage%20Refinancing%20Rates&KW6=Get%20An%20Online%20Degree&KW7=B2B%20Travel%20Booking%20System&KW8=Make%20Money%20From%20Home&KW9=Lowest%20Car%20Insurance%20Rates&searchbox=0&backfill=0
referrer-policy: no-referrer
x-mtm-path: 4
x-mtm-prov: 300:0.00;308:15.85
x-mtm-rd: 0.64
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=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:1peHON:pvkDhlfU7_5K3Z6TFv0bnc0qA74; expires=Mon, 20-Mar-2023 16:25:47 GMT; Max-Age=3600; Path=/
connection: close
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 20 Mar 2023 15:14:32 GMT
age: 676
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www1.retti.com/?tm=1&subid4=1679325947.0478360000&KW1=B2B%20Travel%20Booking%20System&KW2=Dedicated%20Gaming%20Servers&KW3=Elite%20Dating%20Services&KW4=Lowest%20Car%20Insurance%20Rates&KW5=Best%20Mortgage%20Refinancing%20Rates&KW6=Get%20An%20Online%20Degree&KW7=B2B%20Travel%20Booking%20System&KW8=Make%20Money%20From%20Home&KW9=Lowest%20Car%20Insurance%20Rates&searchbox=0&backfill=0
200 OK 6.4 kB URL HTTP/1.1 www1.retti.com/?tm=1&subid4=1679325947.0478360000&KW1=B2B%20Travel%20Booking%20System&KW2=Dedicated%20Gaming%20Servers&KW3=Elite%20Dating%20Services&KW4=Lowest%20Car%20Insurance%20Rates&KW5=Best%20Mortgage%20Refinancing%20Rates&KW6=Get%20An%20Online%20Degree&KW7=B2B%20Travel%20Booking%20System&KW8=Make%20Money%20From%20Home&KW9=Lowest%20Car%20Insurance%20Rates&searchbox=0&backfill=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1563)
Hash 30a8968f7bb3503c84d0e2e02f3313bd
2c458b53537446f62d0dea2ebe61aca9e4bb8c75
505fd6128b3bd14a3b9749094ed633a467a3b64d5a3d2d5f7135a8cb3d5d239d
GET /?tm=1&subid4=1679325947.0478360000&KW1=B2B%20Travel%20Booking%20System&KW2=Dedicated%20Gaming%20Servers&KW3=Elite%20Dating%20Services&KW4=Lowest%20Car%20Insurance%20Rates&KW5=Best%20Mortgage%20Refinancing%20Rates&KW6=Get%20An%20Online%20Degree&KW7=B2B%20Travel%20Booking%20System&KW8=Make%20Money%20From%20Home&KW9=Lowest%20Car%20Insurance%20Rates&searchbox=0&backfill=0 HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 15:25:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket103
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Zw/dAeqUf0CA9wrHA/c3EFPFCNkbiplyz+l8oTsGy3Hq8LZyD7xt9+kUmFXcXuLQ9J41lTXx1YCSUTEVorDQEw==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: retti.com
X-Subdomain: www1
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4c195a3fc0c2abb831630cef1dcfa770
eda338de3063640556177b9db364c33193d7f6dc
c22eb0537cd79666b82fe61dd77fe9b0b3c059a4c65d405412acfc2c6800b444
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7400
Expires: Mon, 20 Mar 2023 17:29:08 GMT
Date: Mon, 20 Mar 2023 15:25:48 GMT
Connection: keep-alive
www.google.com/adsense/domains/caf.js?abp=1
200 OK 54 kB URL HTTP/1.1 www.google.com/adsense/domains/caf.js?abp=1
IP
File type ASCII text, with very long lines (2193)
Hash 258850ed667a30da02b6a7091f5614ff
5b4e5d8e2d1b0ca14655630eaaedb10b2f7aed50
895e49b9659e7191678699e8ff025e6be411ca07ff9d040fc7b7bc14f75037d6
GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Mon, 20 Mar 2023 15:25:48 GMT
Expires: Mon, 20 Mar 2023 15:25:48 GMT
Cache-Control: private, max-age=3600
ETag: "1056662557661385284"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0
c.parkingcrew.net/scripts/sale_form.js
200 OK 761 B URL HTTP/1.1 c.parkingcrew.net/scripts/sale_form.js
IP
Hash 64f809e06446647e192fce8d1ec34e09
5b7ced07da42e205067afa88615317a277a4a82c
f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3
GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 15:25:48 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes
www1.retti.com/track.php?domain=retti.com&toggle=browserjs&uid=MTY3OTMyNTk0OC4xODI1OmE2ODNmM2IzY2Q3MmE3YzYwNDY2NDg5YjMyMzM3MzkzOTNjODIxODI3MTUwZjI1NWYwOTc5ZjJlMTJhZTUzOTI6NjQxODdhZmMyYzhjNQ%3D%3D
200 OK 20 B URL HTTP/1.1 www1.retti.com/track.php?domain=retti.com&toggle=browserjs&uid=MTY3OTMyNTk0OC4xODI1OmE2ODNmM2IzY2Q3MmE3YzYwNDY2NDg5YjMyMzM3MzkzOTNjODIxODI3MTUwZjI1NWYwOTc5ZjJlMTJhZTUzOTI6NjQxODdhZmMyYzhjNQ%3D%3D
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=retti.com&toggle=browserjs&uid=MTY3OTMyNTk0OC4xODI1OmE2ODNmM2IzY2Q3MmE3YzYwNDY2NDg5YjMyMzM3MzkzOTNjODIxODI3MTUwZjI1NWYwOTc5ZjJlMTJhZTUzOTI6NjQxODdhZmMyYzhjNQ%3D%3D HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/?tm=1&subid4=1679325947.0478360000&KW1=B2B%20Travel%20Booking%20System&KW2=Dedicated%20Gaming%20Servers&KW3=Elite%20Dating%20Services&KW4=Lowest%20Car%20Insurance%20Rates&KW5=Best%20Mortgage%20Refinancing%20Rates&KW6=Get%20An%20Online%20Degree&KW7=B2B%20Travel%20Booking%20System&KW8=Make%20Money%20From%20Home&KW9=Lowest%20Car%20Insurance%20Rates&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 15:25:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e8fc65c8ed6ea66df6d6f044d7636fe2
da5b32e7c3fb8dddbd1466e4733cab6e35a66f8c
733e51b02cac5aca153e462118e12f623b0be034bb5488eb021c09a4b41744dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 15:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
200 OK 11 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP
File type PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Hash 0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Mon, 20 Mar 2023 01:22:05 GMT
Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT
Accept-Ranges: bytes
ETag: "62b4441b-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4sfsCpYHyNsIoo1zl7bSbY5DYEuK3ukA5jlCVlsOLbccsRGhxK9TQA==
Age: 50623
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pafiooSubd36mg+JpZVFbg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DrVV81c2prh+Bk/tZnKDumTVbTU=
www.google.com/afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2C000003%2C000264%2Cbucket103&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fwww1.retti.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2NDE4N2FmYzJjOGFifHx8MTY3OTMyNTk0OC4xOTMxfDg1NjlkMzFjMTcyYTFkOTFhOTI3YWY3NWQ5ODhjNDc2MmM1YjE4Zjh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfGV5Sm9iQ0k2SW1WdUluMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qYzVNekkxT1RRM0xqQTBOemd6TmpBd01EQWlmUT09fDc5NjgzN2RiZjVjMjIwZDQ0NTA2N2NlYzVlOWU3MTFlZWYzOThiZTd8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&terms=B2B%20Travel%20Booking%20System%2CDedicated%20Gaming%20Servers%2CElite%20Dating%20Services%2CLowest%20Car%20Insurance%20Rates%2CBest%20Mortgage%20Refinancing%20Rates%2CGet%20An%20Online%20Degree%2CB2B%20Travel%20Booking%20System%2CMake%20Money%20From%20Home%2CLowest%20Car%20Insurance%20Rates&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2514429714757505&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301075%2C17301078&format=r9%7Cs&nocache=3851679325949216&num=0&output=afd_ads&domain_name=www1.retti.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1679325949217&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=797&frm=0&cl=516558706&uio=--&cont=tc&jsid=caf&jsv=516558706&rurl=http%3A%2F%2Fwww1.retti.com%2F%3Ftm%3D1%26subid4%3D1679325947.0478360000%26KW1%3DB2B%2520Travel%2520Booking%2520System%26KW2%3DDedicated%2520Gaming%2520Servers%26KW3%3DElite%2520Dating%2520Services%26KW4%3DLowest%2520Car%2520Insurance%2520Rates%26KW5%3DBest%2520Mortgage%2520Refinancing%2520Rates%26KW6%3DGet%2520An%2520Online%2520Degree%26KW7%3DB2B%2520Travel%2520Booking%2520System%26KW8%3DMake%2520Money%2520From%2520Home%26KW9%3DLowest%2520Car%2520Insurance%2520Rates%26searchbox%3D0%26backfill%3D0&adbw=master-1%3A530
200 OK 3.3 kB URL HTTP/2 www.google.com/afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2C000003%2C000264%2Cbucket103&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fwww1.retti.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2NDE4N2FmYzJjOGFifHx8MTY3OTMyNTk0OC4xOTMxfDg1NjlkMzFjMTcyYTFkOTFhOTI3YWY3NWQ5ODhjNDc2MmM1YjE4Zjh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfGV5Sm9iQ0k2SW1WdUluMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qYzVNekkxT1RRM0xqQTBOemd6TmpBd01EQWlmUT09fDc5NjgzN2RiZjVjMjIwZDQ0NTA2N2NlYzVlOWU3MTFlZWYzOThiZTd8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&terms=B2B%20Travel%20Booking%20System%2CDedicated%20Gaming%20Servers%2CElite%20Dating%20Services%2CLowest%20Car%20Insurance%20Rates%2CBest%20Mortgage%20Refinancing%20Rates%2CGet%20An%20Online%20Degree%2CB2B%20Travel%20Booking%20System%2CMake%20Money%20From%20Home%2CLowest%20Car%20Insurance%20Rates&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2514429714757505&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301075%2C17301078&format=r9%7Cs&nocache=3851679325949216&num=0&output=afd_ads&domain_name=www1.retti.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1679325949217&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=797&frm=0&cl=516558706&uio=--&cont=tc&jsid=caf&jsv=516558706&rurl=http%3A%2F%2Fwww1.retti.com%2F%3Ftm%3D1%26subid4%3D1679325947.0478360000%26KW1%3DB2B%2520Travel%2520Booking%2520System%26KW2%3DDedicated%2520Gaming%2520Servers%26KW3%3DElite%2520Dating%2520Services%26KW4%3DLowest%2520Car%2520Insurance%2520Rates%26KW5%3DBest%2520Mortgage%2520Refinancing%2520Rates%26KW6%3DGet%2520An%2520Online%2520Degree%26KW7%3DB2B%2520Travel%2520Booking%2520System%26KW8%3DMake%2520Money%2520From%2520Home%26KW9%3DLowest%2520Car%2520Insurance%2520Rates%26searchbox%3D0%26backfill%3D0&adbw=master-1%3A530
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9326)
Hash e2b5203750ada5e55caa9e740d3cd94a
d8a80a78c7685053853edb76ac0a104f99b98920
7600350eeb54ffe401d79ee8b450c36975d93d3a9214363184ad17ae9dd27a0c
GET /afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2C000003%2C000264%2Cbucket103&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fwww1.retti.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2NDE4N2FmYzJjOGFifHx8MTY3OTMyNTk0OC4xOTMxfDg1NjlkMzFjMTcyYTFkOTFhOTI3YWY3NWQ5ODhjNDc2MmM1YjE4Zjh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfGV5Sm9iQ0k2SW1WdUluMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qYzVNekkxT1RRM0xqQTBOemd6TmpBd01EQWlmUT09fDc5NjgzN2RiZjVjMjIwZDQ0NTA2N2NlYzVlOWU3MTFlZWYzOThiZTd8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&terms=B2B%20Travel%20Booking%20System%2CDedicated%20Gaming%20Servers%2CElite%20Dating%20Services%2CLowest%20Car%20Insurance%20Rates%2CBest%20Mortgage%20Refinancing%20Rates%2CGet%20An%20Online%20Degree%2CB2B%20Travel%20Booking%20System%2CMake%20Money%20From%20Home%2CLowest%20Car%20Insurance%20Rates&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2514429714757505&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301075%2C17301078&format=r9%7Cs&nocache=3851679325949216&num=0&output=afd_ads&domain_name=www1.retti.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1679325949217&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=797&frm=0&cl=516558706&uio=--&cont=tc&jsid=caf&jsv=516558706&rurl=http%3A%2F%2Fwww1.retti.com%2F%3Ftm%3D1%26subid4%3D1679325947.0478360000%26KW1%3DB2B%2520Travel%2520Booking%2520System%26KW2%3DDedicated%2520Gaming%2520Servers%26KW3%3DElite%2520Dating%2520Services%26KW4%3DLowest%2520Car%2520Insurance%2520Rates%26KW5%3DBest%2520Mortgage%2520Refinancing%2520Rates%26KW6%3DGet%2520An%2520Online%2520Degree%26KW7%3DB2B%2520Travel%2520Booking%2520System%26KW8%3DMake%2520Money%2520From%2520Home%26KW9%3DLowest%2520Car%2520Insurance%2520Rates%26searchbox%3D0%26backfill%3D0&adbw=master-1%3A530 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www1.retti.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Mon, 20 Mar 2023 15:25:48 GMT
expires: Mon, 20 Mar 2023 15:25:48 GMT
cache-control: private, max-age=3600
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3306
x-xss-protection: 0
set-cookie: CONSENT=PENDING+373; expires=Wed, 19-Mar-2025 15:25:48 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8866119b294e41f9d0e4bd2ebf685e6a
208c6fdf3cb60272510131c81ed89a52c4392ee5
25d8952454a5ce1662a4b38bc478f6b8ab4945233e96a1293b9857dfe2ab184e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 15:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www1.retti.com/favicon.ico
200 OK 0 B URL HTTP/1.1 www1.retti.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/?tm=1&subid4=1679325947.0478360000&KW1=B2B%20Travel%20Booking%20System&KW2=Dedicated%20Gaming%20Servers&KW3=Elite%20Dating%20Services&KW4=Lowest%20Car%20Insurance%20Rates&KW5=Best%20Mortgage%20Refinancing%20Rates&KW6=Get%20An%20Online%20Degree&KW7=B2B%20Travel%20Booking%20System&KW8=Make%20Money%20From%20Home&KW9=Lowest%20Car%20Insurance%20Rates&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 15:25:48 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
partner.googleadservices.com/gampad/cookie.js?domain=www1.retti.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie
200 OK 241 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www1.retti.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie
IP
File type ASCII text, with very long lines (358), with no line terminators
Hash 47780ca99389677f708b387846e71010
c754206cf9ac7a2c23626012c2018c58bf63d6da
689543d6bc621c87fcbb83864ff85bdc8ada5c2af11942386204287bc4f45f09
GET /gampad/cookie.js?domain=www1.retti.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www1.retti.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 20 Mar 2023 15:25:48 GMT
server: cafe
cache-control: private
content-length: 241
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d2b91b87a3060a36d0002f6338924521
b216a0ae0e118f942207ae6c51a5309393fe79f4
835446923abce8bde27c74317de5388462f43f7cbf93293a15891a2a2554e406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 15:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8866119b294e41f9d0e4bd2ebf685e6a
208c6fdf3cb60272510131c81ed89a52c4392ee5
25d8952454a5ce1662a4b38bc478f6b8ab4945233e96a1293b9857dfe2ab184e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 15:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www1.retti.com/ls.php?t=64187afc&token=796837dbf5c220d445067cec5e9e711eef398be7
201 Created 16 B URL HTTP/1.1 www1.retti.com/ls.php?t=64187afc&token=796837dbf5c220d445067cec5e9e711eef398be7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
GET /ls.php?t=64187afc&token=796837dbf5c220d445067cec5e9e711eef398be7 HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/?tm=1&subid4=1679325947.0478360000&KW1=B2B%20Travel%20Booking%20System&KW2=Dedicated%20Gaming%20Servers&KW3=Elite%20Dating%20Services&KW4=Lowest%20Car%20Insurance%20Rates&KW5=Best%20Mortgage%20Refinancing%20Rates&KW6=Get%20An%20Online%20Degree&KW7=B2B%20Travel%20Booking%20System&KW8=Make%20Money%20From%20Home&KW9=Lowest%20Car%20Insurance%20Rates&searchbox=0&backfill=0
HTTP/1.1 201 Created
Date: Mon, 20 Mar 2023 15:25:48 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 64187afc66b67c6e26425dd2
Charset: utf-8
Access-Control-Allow-Origin:
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_JB3bY1B18moDvGGyDX3AAWGdBBlOgouAUzqeJ2D7jxPTvlljwSUneMB6wtFdaDE4Tgkmd+2ak56vwPg71j3//w==
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7192531b5ad082b63c067aa5932ec07b
1275d7db171b6e336bd755408ae452afa60f48dd
286c0269d72bdc72ae9c52360e8ec2623b2f728f01289b41a206881caf644361
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 15:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 934dffe86562e18d6b226867f9c530a0
3ed5d88373639e94a066afd2ba76e68ed66af07d
6b213829600abe87f729b89cfe8b22875588e07adc5c0f0d3d26aec0f7308f57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 15:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
200 OK 174 B URL HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 4de8b85c8915995b571bde50e231be7c
29c226ca7b9cbe1d44e5480ce95bbb42727b2d99
2ec9168c4507546748c5f400f5030031f0eb06f2aed8deaa11362c395bff4f7a
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sun, 19 Mar 2023 17:43:10 GMT
expires: Mon, 20 Mar 2023 16:43:10 GMT
cache-control: public, max-age=82800
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 78158
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
200 OK 270 B URL HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Hash 5100391430a00e10ce60aa159f525b5c
231a4492d73b225f441b1e9028dc33c89862e498
52b1432a6e3002e41ed1d8f4c84b258fdc4c6dac863e3c0e5c06360c81be6067
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sun, 19 Mar 2023 18:05:40 GMT
expires: Mon, 20 Mar 2023 17:05:40 GMT
cache-control: public, max-age=82800
age: 76808
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 934dffe86562e18d6b226867f9c530a0
3ed5d88373639e94a066afd2ba76e68ed66af07d
6b213829600abe87f729b89cfe8b22875588e07adc5c0f0d3d26aec0f7308f57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 15:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www1.retti.com/track.php?domain=retti.com&caf=1&toggle=answercheck&answer=yes&uid=MTY3OTMyNTk0OC4xODI1OmE2ODNmM2IzY2Q3MmE3YzYwNDY2NDg5YjMyMzM3MzkzOTNjODIxODI3MTUwZjI1NWYwOTc5ZjJlMTJhZTUzOTI6NjQxODdhZmMyYzhjNQ%3D%3D
200 OK 20 B URL HTTP/1.1 www1.retti.com/track.php?domain=retti.com&caf=1&toggle=answercheck&answer=yes&uid=MTY3OTMyNTk0OC4xODI1OmE2ODNmM2IzY2Q3MmE3YzYwNDY2NDg5YjMyMzM3MzkzOTNjODIxODI3MTUwZjI1NWYwOTc5ZjJlMTJhZTUzOTI6NjQxODdhZmMyYzhjNQ%3D%3D
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=retti.com&caf=1&toggle=answercheck&answer=yes&uid=MTY3OTMyNTk0OC4xODI1OmE2ODNmM2IzY2Q3MmE3YzYwNDY2NDg5YjMyMzM3MzkzOTNjODIxODI3MTUwZjI1NWYwOTc5ZjJlMTJhZTUzOTI6NjQxODdhZmMyYzhjNQ%3D%3D HTTP/1.1
Host: www1.retti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.retti.com/?tm=1&subid4=1679325947.0478360000&KW1=B2B%20Travel%20Booking%20System&KW2=Dedicated%20Gaming%20Servers&KW3=Elite%20Dating%20Services&KW4=Lowest%20Car%20Insurance%20Rates&KW5=Best%20Mortgage%20Refinancing%20Rates&KW6=Get%20An%20Online%20Degree&KW7=B2B%20Travel%20Booking%20System&KW8=Make%20Money%20From%20Home&KW9=Lowest%20Car%20Insurance%20Rates&searchbox=0&backfill=0
Cookie: __gsas=ID=98d9c93c60e97493:T=1679325948:S=ALNI_MYiWeFtGJbZkhhJx5OHPfsAe8Nxug
HTTP/1.1 200 OK
Date: Mon, 20 Mar 2023 15:25:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: answercheck
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7460
Expires: Mon, 20 Mar 2023 17:30:09 GMT
Date: Mon, 20 Mar 2023 15:25:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7460
Expires: Mon, 20 Mar 2023 17:30:09 GMT
Date: Mon, 20 Mar 2023 15:25:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7460
Expires: Mon, 20 Mar 2023 17:30:09 GMT
Date: Mon, 20 Mar 2023 15:25:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7460
Expires: Mon, 20 Mar 2023 17:30:09 GMT
Date: Mon, 20 Mar 2023 15:25:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 302595cc68fe8cf12121d0f652b3194d
e5532a3fed552246e8a63ea2ba75e174273a7b9f
6ca3599a9af06f51d4dc205d4ebd8f7f8b38c54864b6b478eac8c0d1adbc97c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7695
x-amzn-requestid: 1009077b-14aa-42e5-86f1-de94b8b2aba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDETIHf8oAMFxEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641780e0-07bbb0376f1c1941731e00ba;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 388_JExXl_vwNTUh_69QfjoGz-cNeQwwrp6kpAP1Hhv3VvtgeeXbrw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 21:55:31 GMT
age: 63018
etag: "e5532a3fed552246e8a63ea2ba75e174273a7b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7460
Expires: Mon, 20 Mar 2023 17:30:09 GMT
Date: Mon, 20 Mar 2023 15:25:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a940b362660fdee25faaa51e08c439b
85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c
18b99e3e890fdc959421c895ce343b8b3ed88819c83fa0009823e8ded23458f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8195
x-amzn-requestid: c6844a50-a6b2-4ef4-ad28-f1a0fbcec14f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDFESEDGoAMFQ8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6417821b-22fa560d4b7811c233fe07fa;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:43:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hZeMhs-Z5fNn0pvRUSkNcGau_K6EG9EQtDktbLUth0uEveafUgCxeQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 85ee490c179dc0af42b771f11421073e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 22:14:44 GMT
age: 61865
etag: "85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffb155f3-4b60-4d8c-879f-3b7bd1c5c129.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffb155f3-4b60-4d8c-879f-3b7bd1c5c129.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 07289211ce045b31693c7bb59c06f338
210abec1182bb94b9d0e48827ecb8023611c4489
808b7bfa4b75cfb91e003d6375802da7d2719de29d4f64776dea57992b7632c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffb155f3-4b60-4d8c-879f-3b7bd1c5c129.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5311
x-amzn-requestid: 3e000f36-3e2a-4008-950b-2e9f83306e51
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_w3eFmtIAMF7EA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e95-1b9e4cc8033920ea365de22f;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: BMPxweRO692tG89Nk-DTd66mRNA9UwvlKmflVkF6qbtjNRQjQubNiA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 22:03:37 GMT
age: 62532
etag: "210abec1182bb94b9d0e48827ecb8023611c4489"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1533684819dcbf9e77684c19eb86465
489f8f036efd23ce36085af127af7d6c794fe00b
9154a471013bd0972fad93ea4eeaf4b23f66dd1534e0d9cc302263aca0f94bd1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12424
x-amzn-requestid: 64a89fbe-4ac0-4059-a481-37c30ae36928
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eOuEG2oAMF1Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414dd91-0492160f3e8196a23fc53eda;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: tx--67yg-v6sA1zslsl2iUXzLbdnWhU-cMqTDpxldZg-qog8-urKcA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 c5c7edc18be1805f007e0576da02e554.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 08:59:45 GMT
age: 23164
etag: "489f8f036efd23ce36085af127af7d6c794fe00b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e5aa79770d71507827e79149031b5cf
338ee74f53fac2b19a90981bc4b02a3c3722a1fa
81df6f2312df6e488ae91c172ecf872d694497ffe80500f71eb97e6c06ff5f5f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7249
x-amzn-requestid: dfaf4924-b8c3-4b6b-a079-7c3903fdf4fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDDVjGJyIAMFS9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64177f56-6379351b215dc2d9638de9ea;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:32:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: XYA6F9VzUqxozJS4OsX-TKy81mOHUB7N6L7rkCaQJmXe5n-a_Zce-Q==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 50faaaa196a6b0875217ef7827f97d7c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 22:15:51 GMT
age: 61798
etag: "338ee74f53fac2b19a90981bc4b02a3c3722a1fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78453ba98b72eff3879ef163b59c86ed
80519bb3726ee1f9f211344cd433cefaed3a7f2e
61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: xfkObFQbeYQQjIJ4FWQ7xKbH5FPxBQ1vkTDCwWCM6IcAAu8H31BNhQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 07:04:48 GMT
age: 30061
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google.com/adsense/domains/caf.js
200 OK 0 B URL HTTP/2 www.google.com/adsense/domains/caf.js
IP
GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 20 Mar 2023 15:25:48 GMT
expires: Mon, 20 Mar 2023 15:25:48 GMT
cache-control: private, max-age=3600
etag: "10277692877909445002"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
72.14.178.174
23.36.76.226
185.53.178.30