| win2.icu/tc/img/landers/prizewheel-fb/notification.png | 104.21.77.24 | 200 OK | 449 B |
URL GET HTTP/3win2.icu/tc/img/landers/prizewheel-fb/notification.png IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typePNG image data, 30 x 28, 8-bit colormap, non-interlaced Hashbd5203f2cc9e7a9125e4575e029541b0 9fa565ab2f4b55da4735b79e529562252b3c9afe db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f
GET /tc/img/landers/prizewheel-fb/notification.png HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:31 GMT
content-type: image/png
content-length: 449
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "2400f0408566d58f5d66ac77c82dfc5d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i2Vg6ztMop4h9fTNJOVlpAYnAoeP09kUHZvcJzAxR70BlEwrYjWXxvXZT0e8mP6kUZjrWNsJtLpUKgi3Rv%2F9%2Fzr2Wply4SadFWM0E8yLcFsMFSEXaet%2BG%2FaEYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175acc8b2456c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/landers/prizewheel-fb/prizewheel_spinner.jpg | 104.21.77.24 | 200 OK | 32 kB |
URL GET HTTP/3win2.icu/tc/img/landers/prizewheel-fb/prizewheel_spinner.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1002, components 3 Hashd4655cba21d806e849eed4e4119fbe1a 6453039d85005643e9d65074ca022f63b5d47cdd 90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7
GET /tc/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:31 GMT
content-type: image/jpeg
content-length: 32496
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "1b2096d2e9ea857e0d9343610c61e0cb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BnRpj8AkFIOyVan5oqW0PaiiG%2FO5bazQ3vODkVM0EtIuGWba8%2BqORW2%2FTTgCGNuVOAYBmqOmxocR1b%2FCI2f84mvTAk7DbYaHJEHYFzoJ21WTYkI6NDbX0SVa7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175acc8b2656c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/script.js | 104.21.77.24 | 404 Not Found | 0 B |
IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tc/script.js HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 10 May 2024 04:58:31 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mE32JulEVhQ42N15g3GNu9033zS9eHc0jSrGyoUlc%2Fs56CWJo9M6lhcCfH3EFI%2FqimbE2RMoVcZsT%2BUY8UAKHLvAz8dLtTrc51fRoUR4oerAtgK4apx6o%2B3y%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 88175acc8b2256c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/prizes/iphone-14/default@0.5x.png | 104.21.77.24 | 200 OK | 5.3 kB |
URL GET HTTP/3win2.icu/tc/img/prizes/iphone-14/default@0.5x.png IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typePNG image data, 200 x 200, 8-bit colormap, non-interlaced Hash690405dcbcd7e4230f747dc6ed50af82 725b37ab28b407cfa6f3c7bbb005ded1c8393477 e2d184b35e5bdc7916d85dca09ef2e4a292563a14cf9cda0eea65a3a9861ac5e
GET /tc/img/prizes/iphone-14/default@0.5x.png HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:31 GMT
content-type: image/png
content-length: 5264
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "795e45f1af1a507f277c55a97dc5ddc6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=387FPoHX66y61K3%2BgP0hmGKEJLhffmM%2BXqozFrUhKH9i%2FEHTt1l8w%2Bx7vEhzQETLcvsGdJqMjaKIWIVhWZiFB2qkVtvec0vnTCJ4rbhPLP8pJBtCCt05ln5q2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175acc8b2856c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/landers/prizewheel-fb/loader.gif | 104.21.77.24 | 200 OK | 5.1 kB |
URL GET HTTP/3win2.icu/tc/img/landers/prizewheel-fb/loader.gif IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeGIF image data, version 89a, 50 x 50 Hashed786659a534e0d183c09a90c50abc9d a6c3d90bfaa86a7cda490bc5d04c8939c31a414e cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97
GET /tc/img/landers/prizewheel-fb/loader.gif HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:31 GMT
content-type: image/gif
content-length: 5083
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "380f8977bc9afbbebc514d99cc1e5dc9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6IXHGrZJ%2FY1pMLjLoxxCju%2FuTINjda%2BvLeQljK7wjwGYOhD9ynJ9TjEyLdAKuJQ50vYWjFv8TQq5cYx1hoXaqVYk4rcq4AI17%2BoaSGKToYNeyX2DM%2BNFsWTQ3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175acc8b2c56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/jquery.min.js | 104.21.77.24 | 404 Not Found | 0 B |
URL GET HTTP/3win2.icu/tc/jquery.min.js IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tc/jquery.min.js HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 10 May 2024 04:58:31 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FbOg7Ks1jP%2F9hPE8vzB4C10UhhlEdVA43Ih1B%2F68a8vwuJhsDqn8qLHawNIVu3cPldElWJeAoxBksFf02fotN68nUvqNQsy2Bye64OlIi3OvdXlz2RQd%2FpmlGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 88175acc8b2056c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/script.js | 104.21.77.24 | 404 Not Found | 0 B |
IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tc/script.js HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 10 May 2024 04:58:31 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mE32JulEVhQ42N15g3GNu9033zS9eHc0jSrGyoUlc%2Fs56CWJo9M6lhcCfH3EFI%2FqimbE2RMoVcZsT%2BUY8UAKHLvAz8dLtTrc51fRoUR4oerAtgK4apx6o%2B3y%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 88175acd2b9456c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/landers/prizewheel-fb/prizewheel_static.png | 104.21.77.24 | 200 OK | 3.4 kB |
URL GET HTTP/3win2.icu/tc/img/landers/prizewheel-fb/prizewheel_static.png IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typePNG image data, 1002 x 1002, 4-bit colormap, non-interlaced Hashdc484e0043b5ff6191b1880c8779863c a5b67e3dff3dea3940eed090431aecbb36611b1d 30bc059973d84a6e1d22d16747bce062025561f2555cdd9cec012a87866abcb6
GET /tc/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/png
content-length: 3370
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "1cb6689a4d55d9bd1f450f2d206d996a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wnBTgaoMd5SvV5qxOPgUhE%2BZhqrm%2F8jpvYJset%2BvjIxQ2VRaaecxQC6VkOdc9IOB5lbLXkSYGA9vJuDFfhDuUz%2F3qudFI6qJtzGzURhhAOR3dxsikkWjBmwSnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace1c2e56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/js/app.js?id=d95b2f380a2918b995e8 | 104.21.77.24 | 200 OK | 9.8 kB |
URL GET HTTP/3win2.icu/tc/js/app.js?id=d95b2f380a2918b995e8 IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typegzip compressed data, from Unix Hashbefcde618291e29a60ee59d23c968c32 915c8964af2778c12c8bdc317f83004140dbe10d 19b4f2ba62ffbdf13b028af37dceb8204ee666a4f194451a59aa813d2776c4d9
GET /tc/js/app.js?id=d95b2f380a2918b995e8 HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:31 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"b1024e64e3a7bd95f2ddab6544bb3238"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WAH7jIhWfVmKDyuWxrDaJCyyFjNBFeblLZTgwcQHKtpBD3lW%2FXykKQhmVRr3lf6hvM6N5VDtpeUXUKemGODRuknUvv06A7y66VwNuUszVD4j2HvkyOUmPEpv%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 88175acc8b2d56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/profiles/caucasian/male/10@0.25x.jpg | 104.21.77.24 | 200 OK | 2.7 kB |
URL GET HTTP/3win2.icu/tc/img/profiles/caucasian/male/10@0.25x.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash1112732142f99bb6c1631b89e0d3ab7d 23f5c0c1a491135b6e2e16f1f649773ac95d7bdf fb6ecfa12b19fa686f2e8138fe5be303d5e08f270c995e2bc287c33b62faa503
GET /tc/img/profiles/caucasian/male/10@0.25x.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/jpeg
content-length: 2736
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "4eb07a37c9675887bca82226178268ee"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RAsnmdQXC9nOWxUoD7KWC1uqemvO6V402pOw9XVc%2BVKuFz%2FoQ7vCnMV%2Ftl9oSBUn4WNavztWGkbD4V9FKpARwFCK9VLXxn%2F86748yX7vIS9xR58e7Ll7OgpgMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace3c4a56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/profiles/caucasian/female/1@0.25x.jpg | 104.21.77.24 | 200 OK | 1.9 kB |
URL GET HTTP/3win2.icu/tc/img/profiles/caucasian/female/1@0.25x.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hashfbd823b4b286d9441a68da275eeaf828 ed13e98d4b2615e7b00eb9c432c25d46c70389d6 3da1e9cfb273447e5e799ead9e3c1be32c4d95a1aef51982a3dfcaf76ab75afb
GET /tc/img/profiles/caucasian/female/1@0.25x.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/jpeg
content-length: 1924
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "b075bab8354335db110208c7e55382ff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jrCUzXeG9%2B61g%2FnyoJBaQjRqEFn3sn73vE1pQuBHFiKfAKoXEcEfTSxFwDXbf7SV6wFtQ2aQKBh3x217La1wqg5vBEt65iehMxibsBSLr3OVVylUbaJYutg7uQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace4c5456c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/profiles/caucasian/female/3@0.25x.jpg | 104.21.77.24 | 200 OK | 2.8 kB |
URL GET HTTP/3win2.icu/tc/img/profiles/caucasian/female/3@0.25x.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash8196857e051c12bf3fbc80c5d2706f77 6c5b5053cade51a1c872fd0fccd6425cac4654ad e7da422e27935176f348741986684bb7579b8f27b00d5e740c0b205f35fd382a
GET /tc/img/profiles/caucasian/female/3@0.25x.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/jpeg
content-length: 2833
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "921932da92edad9f329eeb635dd1c7e6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PisJqZSVC6x1F1xhQB9%2BrhLodYRS5kpBpylmqDVJqnMWwY59t5Qj670PZIrOa8N%2BJsSCu0J6pe3Kpg04Kt%2FaotVNOKXga0qwMt0iHdWEnwQB7%2BFeCvJ%2BWUQZqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace1c3256c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/profiles/caucasian/female/5@0.25x.jpg | 104.21.77.24 | 200 OK | 2.6 kB |
URL GET HTTP/3win2.icu/tc/img/profiles/caucasian/female/5@0.25x.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash5e930fa2efb8142b942712a603c0d112 82a6ab6fd202a0e973b4e83861cb9889294289cd b15d6a868ff22d57beec85074fbac2b0bf4d94aba82586f91e28f1843bec2482
GET /tc/img/profiles/caucasian/female/5@0.25x.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/jpeg
content-length: 2607
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "c8d581ee44462a1507e393f9eb1b1e6e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stOe0E54BiV005fmNZvHnjG1D3AVOtNveith52ikUFVOw65Thw16CzBhpKbkysNUWRww6YxOAUlM%2BRGmXoc6s7Xn5CnLmcinD9nMF8pZL66jm%2Fi14bg6AN%2FPrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace4c5356c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/profiles/caucasian/male/9@0.25x.jpg | 104.21.77.24 | 200 OK | 2.3 kB |
URL GET HTTP/3win2.icu/tc/img/profiles/caucasian/male/9@0.25x.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash3ee4f789968700c627e093497418ba7a 5167cc73c33fae5fd4188aa0726af6cd745a874f 6615703a9d11b53339464d4878af74874fae469524ce02266f02c9f1dd6c2239
GET /tc/img/profiles/caucasian/male/9@0.25x.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/jpeg
content-length: 2283
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "5da77b97a370bd4d3f98217bc17bfeb6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E6G04Vjs%2BmbAT6RBr1oCFfGS1SgCMHvprq69NmKzPTqn05Bmmyq6Xlv%2FaPXxslCnGfA5ShCGKiQWAL73GZ38f23aG5R%2F76yOB%2BDOgOEe%2F47YniZqFPJv8YfiUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace3c4c56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/prizes/iphone-14/proof.jpg | 104.21.77.24 | 200 OK | 8.5 kB |
URL GET HTTP/3win2.icu/tc/img/prizes/iphone-14/proof.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 339x450, components 3 Hashf7b51a8b731f36c886f8fe161c773415 50792a575a28d4ab3ac86c298a8fff5bfa9084ec 398eda88bbae5457376da05c8aa9dcd8789e886126a1868cbe1b21f781d548a8
GET /tc/img/prizes/iphone-14/proof.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/jpeg
content-length: 8530
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "d1a326820fe6c1098a5d9be248898774"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yrw1K%2FPl1FOy0%2B51g6mPhkEjyr881N5RXaVbnuOB8uQlQhfaJ%2BUgzmw%2FSVG2Mc2B%2FRf1oKqD0jmqbPZ8iXV2fxybV5DsBUn6H6FLCjHbwJnZnAQkGawlVSMt6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace4c5256c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/profiles/caucasian/male/2@0.25x.jpg | 104.21.77.24 | 200 OK | 2.4 kB |
URL GET HTTP/3win2.icu/tc/img/profiles/caucasian/male/2@0.25x.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hashbfc6eca6ea03a0dae038e42188616d92 d8b88015604798d901a5929a2331e7f581baecfe ac8b3a49e5e511cb0d40f376c87216e5116ec0f85a6de30e157e0fdf45fe7acd
GET /tc/img/profiles/caucasian/male/2@0.25x.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/jpeg
content-length: 2359
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "b18b18a1993db45f8de0f89c699f13e3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OtwQeoLflYymhjPH%2FQm%2FThRZK%2FDHnCg7gWyvS91LLVxX2GBK55ilbqm59dq703fhZG3UoKiY0Lmn8VOXLlTiS5bAGeFQ77SrvI6l1MYAfPpyo5xY6jCMIUCZ6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace5c5b56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/profiles/caucasian/female/6@0.25x.jpg | 104.21.77.24 | 200 OK | 2.5 kB |
URL GET HTTP/3win2.icu/tc/img/profiles/caucasian/female/6@0.25x.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash16b747e82cf312a2ced55303d0498d39 5e6d8443cb51b6ef2f1b8418e210c1cb4cb3272d 9689a7da01f10d4f058803fdfa77b6e874073e0eb3e7007c9c551d6a85b2e10e
GET /tc/img/profiles/caucasian/female/6@0.25x.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/jpeg
content-length: 2496
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "f7996dd10f2ab6ca91c2eb99cf75f4a5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tPKf7Gx5Gyc0mtOGk2cDZGGDIDOKzblkDRkchD8rhFuFeiacPY2YFuMeR0ntOwDdE7%2FUqvk7ZSBPT5iY2KQncgUYZ9Z45WgHRKnmWfXt1dRUN4pQ0Nu%2BfO0nEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace3c4b56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| push-sdk.net/f/sdk.js?z=1196578 | 23.88.8.123 | 200 OK | 15 kB |
URL GET HTTP/2push-sdk.net/f/sdk.js?z=1196578 IP23.88.8.123:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectpush-sdk.net FingerprintEF:07:FF:9E:FF:54:65:75:76:5D:48:DC:E3:45:59:45:0B:9A:86:95 ValiditySun, 14 Apr 2024 03:34:59 GMT - Sat, 13 Jul 2024 03:34:58 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (53344), with no line terminators Hashdf17f9793d0bbfbec3c9285f3dcc6200 12f0459f4095371bee63e6dd5f04ea9451cff933 1c60c387936024b9abb1b2514bba07be7725ffad25903c7faf23eecb61e222d7
GET /f/sdk.js?z=1196578 HTTP/1.1
Host: push-sdk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Angie
date: Fri, 10 May 2024 04:58:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 14884
content-encoding: gzip
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|
| push-sdk.net/event?z=1196578 | 23.88.8.123 | 200 OK | 0 B |
URL POST HTTP/2push-sdk.net/event?z=1196578 IP23.88.8.123:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectpush-sdk.net FingerprintEF:07:FF:9E:FF:54:65:75:76:5D:48:DC:E3:45:59:45:0B:9A:86:95 ValiditySun, 14 Apr 2024 03:34:59 GMT - Sat, 13 Jul 2024 03:34:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event?z=1196578 HTTP/1.1
Host: push-sdk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/
Content-Type: text/plain;charset=UTF-8
Content-Length: 83
Origin: https://win2.icu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Angie
date: Fri, 10 May 2024 04:58:32 GMT
content-length: 0
access-control-allow-origin: https://win2.icu
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token
access-control-expose-headers: Authorization
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
pragma: no-cache
expires: Tue, 11 Jan 1994 00:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
X-Firefox-Spdy: h2
|
|
| win2.icu/tc/img/fb-like.svg | 104.21.77.24 | 200 OK | 4.6 kB |
URL GET HTTP/3win2.icu/tc/img/fb-like.svg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeSVG Scalable Vector Graphics image Hashae6b6b70054b321c05fba30c4a57b88d b96a897a875647cd14c246496cdc1581c0a6b6f6 5b6437007755fe5288d09a5895ec04b3ec0a27a9cdc5b6fb2f1697374453bb07
GET /tc/img/fb-like.svg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"bfe4aa2d27c9653df17c79c8f62f7d39"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IrEEDW5Md9nB1OUNdPZZ33iGLf0LIrYdaQMmvbfzP9viOkTm3P404V1w5RKQtA23Gc0nPdAkUDgxzNdf8ZLWgxKFrurMMnbXPmL4O27Fzsieb5GAkmF%2FFigcpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 88175ace5c6156c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/img/profiles/caucasian/male/3@0.25x.jpg | 104.21.77.24 | 200 OK | 2.8 kB |
URL GET HTTP/3win2.icu/tc/img/profiles/caucasian/male/3@0.25x.jpg IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash54fbc106f1b9db6ac824a4650d60f3bb 100e44c2fe78adb90e6f949045a50149bb7f3774 559cdadc5c3fcdf6e028d343c420ce52983ae44b1ae217c8c60f1067a081104c
GET /tc/img/profiles/caucasian/male/3@0.25x.jpg HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:32 GMT
content-type: image/jpeg
content-length: 2844
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "c8822b99b8b39599520a51a095a432f0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4hghX76Dr15wl3%2Bn1kj9EgQwzuJq7dPr5Xgzt00%2Bcy1VENJt23Gp8tkjDyfytkcu1xuVPsgQ9JQ9mIxpRew4NQyZ%2FIa9PgjyauHYJMOcCmgDYFtVc97nx%2B40BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 88175ace2c3c56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/css/app.css?id=2fbe2d9a9a40ca9b2489 | 104.21.77.24 | 200 OK | 69 B |
URL GET HTTP/3win2.icu/tc/css/app.css?id=2fbe2d9a9a40ca9b2489 IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeASCII text, with no line terminators Hashf1fab2c3ebc1602716f3973289ec726d 5fcf0f64ea644fca2564d6421d1c29293814c2fe f6117d1a7954f5547694ba09f10172f02ca076e7be187f6344e7931683a07523
GET /tc/css/app.css?id=2fbe2d9a9a40ca9b2489 HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:31 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"61b69c1c332df04d6a80ce39f4916c34"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ias4d4%2FVq5c8wK8Q6GWKr5cYIAucbuWlctksoWAG7BCT24yv4jpvCtW0rEBcmilKulqq9tLfLhbkf1DjYicReId5D7YcTqRC5FdMcoVs4x5QNPEtzsSmWOKPMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 88175acc7b1b56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/js/landers/prizewheel-fb/app.js?id=85af8afc03013e23319f | 104.21.77.24 | 200 OK | 152 kB |
URL GET HTTP/3win2.icu/tc/js/landers/prizewheel-fb/app.js?id=85af8afc03013e23319f IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
Size152 kB (151943 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tc/js/landers/prizewheel-fb/app.js?id=85af8afc03013e23319f HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:31 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"17b6656cbbaa81da2a877cc976a43f85"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nl9LUXInE6TcYteI4%2B0L4eQyZnSXj6S6F7A6R2OUwWtqTPu236J4H5GHj%2FtNFZzd3epBPXSZfii7RVr4Etvv7Xr5BIsfNaP9IN3JV9BmSoePkpZJlyWeNpm2lw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 88175acc8b2e56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| win2.icu/tc/css/landers/prizewheel-fb/app.css?id=afa7f110a14f461eee6e | 104.21.77.24 | 200 OK | 2.5 kB |
URL GET HTTP/3win2.icu/tc/css/landers/prizewheel-fb/app.css?id=afa7f110a14f461eee6e IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
File typeASCII text, with very long lines (2530), with no line terminators Hashc38d649f37350cec96ced3f2972dfd56 b66b022b209776610f57cf95280304afec903852 c347e891a853c72a997e78958dbe197117b7911c0e0c73373a309c44fa817e34
GET /tc/css/landers/prizewheel-fb/app.css?id=afa7f110a14f461eee6e HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://win2.icu/tc/ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 04:58:31 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"d4ff84c21b15d822cda30704b525aac7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FQ3cj0045Vd49oc5U%2FUR%2Ffj0paVkDsrorLUEFXfX04e%2FyInBwCq4Xjr8VxYbCihyHTLssqbqK2O9VyKPeaS9NBpbSAtnSG2Uy32E7wl15K7CtstrbWOcaRnH9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 88175acc8b1d56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 104.21.77.24 | 200 OK | 16 kB |
URL User Request GET HTTP/2IP104.21.77.24:443
CertificateIssuerLet's Encrypt Subjectwin2.icu FingerprintF9:A8:1A:3E:AE:86:07:22:26:2B:FA:06:10:48:9D:72:B8:68:A7:AD ValidityMon, 29 Apr 2024 03:38:42 GMT - Sun, 28 Jul 2024 03:38:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tc/ru HTTP/1.1
Host: win2.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 04:58:31 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S8gES5Q0vR8vgEi%2B3QLevA%2FC5Sv2lenrB66dO6cntYLjul0ahytTN4O%2BubQNgGtNlbFEbSOlDFcSs%2FqfyJOckdsUkNkBzvinrgbsCozgsW6p1ZOMR1wiQZ0TSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 88175ac8da0fb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|