o.efficientglisteningdirect.shop/wbiwxb/i13s21m/index-en-i13pro-max.html
104.16.157.101200 OK 4.1 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/index-en-i13pro-max.html
IP 104.16.157.101:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2338)
Hash 04f599990273ca9771983eede3278217
3b5b69ee05356ca10f63870f9f196072d03164f7
3ac9604317f0419c09de5aa3a3aa893139ec61d13153bc2ef6e9edfb917fefd1
Analyzer Verdict Alert fortinet Phishing
GET /wbiwxb/i13s21m/index-en-i13pro-max.html HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 08 Aug 2022 09:54:43 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kRIq4e3HSaKP5U5ZxSe2PoGrWDEsYGiFDdzE%2Bn6Pq4DDLlS9ibNX9Lc6YpJ2zb0BJegSx0kDQenkV5ndarIxUJ%2FjXhWAFFEE%2BeIIEiN2OuLKmpX5lHBbjfrccPet%2FQoKRqoGo1f%2FUQ8jQTEF9xnrkP%2Bgow%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 794353f13ffe0b4d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15011
Expires: Sat, 04 Feb 2023 16:24:57 GMT
Date: Sat, 04 Feb 2023 12:14:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18548
Expires: Sat, 04 Feb 2023 17:23:54 GMT
Date: Sat, 04 Feb 2023 12:14:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 11:36:14 GMT
content-type: application/json
age: 2312
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6763
Expires: Sat, 04 Feb 2023 14:07:29 GMT
Date: Sat, 04 Feb 2023 12:14:46 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: oJYXh06P5Ue+rk06mSPfDpN2P0gu0e+57f2mW7Rp+5RYomYSBhlXfe19jclak7o4AEt/wBrYDMQ=
x-amz-request-id: NTPEH9AB61SQT292
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 11:23:58 GMT
age: 3048
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 12:14:46 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/clean.css
104.16.157.101200 OK 3.0 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/clean.css
IP 104.16.157.101:0
File type ASCII text, with very long lines (650)
Hash 4eee55370b6210da2cec438cda2e7f20
552c35510193b1d1ba7f18ac8b22cb19ac338634
a49b70eb310aa73c7deea0a7f4b4f7c014d7aeff55a38c1c003357f3078b0e8d
GET /wbiwxb/i13s21m/clean.css HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 04 May 2022 11:12:56 GMT
ETag: W/"2c20-5de2db50ec4b0"
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1152
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yh2dXOijZQmPSN%2BBGuJa7UaQs0BJ0%2FARU2jv%2F2bSFXD3NojHp0i1FziPv3wat%2FPElm%2ByOg6R5I%2FOAGjTYRnGfWDjzFfD5Q%2BUro4yQG1TtXww03bt19SdqJ00wEvoOwdqBcrozrXKRfaUBtYwuZnSEG%2Felw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 794353f44a1c0b4d-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/like_user_1.jpg
104.16.157.101200 OK 1.8 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/like_user_1.jpg
IP 104.16.157.101:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash e12b6068c207cd33798d4b16dba16734
c2018b9b4f5fe43286049d216a197591dfefc5ba
7893062f7d46552a092de765d1a0844e3d642a963ba7c93d96f28ccb0562de6f
GET /wbiwxb/i13s21m/like_user_1.jpg HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/jpeg
Content-Length: 1791
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 11:13:25 GMT
ETag: "6ff-5de2db6cc6c2c"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ARNMdBEJfZuIzHDvdLYV4WzAsFKMOhxqWNlw1apgvZt%2BbR%2FkuLykHUhVnKBR0a74USTcPY%2FstGozTWqROemOh25KwzdbwFyFfT02Bft8INtGMb0IyIZpkMp3cLG1hDwcp95tH3%2FoxcR%2BUdj3sN0WKdkTNA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f45a2f0b4d-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/7.jpg
104.16.157.101200 OK 887 B URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/7.jpg
IP 104.16.157.101:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 46850ff4ee4ad38f92ecbb9b944fdbc1
a6524e5139adc15b55bc0600458ea3a53f3e4f83
d896a8da72391081cada64a7f8f7b20ae4578eba8603a15c61b36e62a41b7f06
GET /wbiwxb/i13s21m/7.jpg HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/jpeg
Content-Length: 887
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 11:12:50 GMT
ETag: "377-5de2db4bc1c3f"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1qt4dPXht%2FQorhLkx%2FfWA3T2XQ0UiuBHYjIatTDpRXVZ4%2BHhx9dhDNWbhT%2BpYkdN2e3YHPKf4zkaqopM42n4z%2Bu6IqtQMUHcEA0WO323O2daSViO%2BxFOG9MsCyM%2ByFptS99j2tw14KipS0i3ybqkPVjtfg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f45a330b4d-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/i13pro-g.png
104.16.157.101200 OK 6.5 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/i13pro-g.png
IP 104.16.157.101:0
File type PNG image data, 200 x 236, 8-bit colormap, non-interlaced\012- data
Hash 90e9c68f4bdc955fa8c06358e1bf36cd
1cdcf3eb79b36980343cce18593568f6aba2483a
25f41f616a456f289f5f4f4b5c8485280175be6b63b7364bc2aac8b150901cf6
GET /wbiwxb/i13s21m/i13pro-g.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 6509
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:49:01 GMT
ETag: "196d-5df42d072e9f3"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1152
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pa3YhTPjf8tH6uNUob3SSOTR%2FEe0MKeIfoXac9%2Bu1SdtD9VAk%2Biakx6Ktg%2BqM3hWB%2FVrAOosrC9xITn1UjXDW33gXKt5vjL7tsDXKgdSF0vYRXY3VAjXhdPWHFvygoICA0gh8J5LUahj2qES8mTw7WIdDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f45d15b503-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/i12o.png
104.16.157.101200 OK 57 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/i12o.png
IP 104.16.157.101:0
File type PNG image data, 470 x 594, 8-bit colormap, non-interlaced\012- data
Hash 84d81e75074e396a8eff4fd99a6d3469
89e0f115fe073f07a09de1e7192bb46e50943bae
d0d31d635242240abf46a613cda3e012b3233b397e85bdaeb99c07547adec54c
GET /wbiwxb/i13s21m/i12o.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 56997
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:49:00 GMT
ETag: "dea5-5df42d05c8b4f"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1152
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9XC%2B04F1H7nuxmupgOyU8zOyhIAMfNwpZDSjXboyoJV9DYzYNMKoTN4NFRKw%2F%2B7SjwvwPXkVdv951lts6Syi%2FC9fQMOh4bwmkMF3E4RYqyHtogijgO6tTP6zTaKg5q%2F3GmQD7WG6wLvBjIWv2N2qdJQkxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f458c2b506-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/pw_i13p-max.png
104.16.157.101200 OK 32 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/pw_i13p-max.png
IP 104.16.157.101:0
File type PNG image data, 501 x 501, 8-bit colormap, non-interlaced\012- data
Hash 4ae39ce8fb6c507dbda7404e5128651e
3300101ffe5f009c09c3f3bf0c072df2f5c0b8b6
457dd5c665927040b3dc5be478277ae41ec4dd4827dcd10345f306e03fb68ac1
GET /wbiwxb/i13s21m/pw_i13p-max.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 32212
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 08:29:38 GMT
ETag: "7dd4-5df450eddb50d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1152
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jUi5S4IXz%2FIGvzjedncnDaJUrvrr%2Fp4R7eXyq%2B7fCSj0bhhpEMZNSEppAbVswc1CHbQcbDSb8C7xnkoBW9%2FM8BXHYdB8LbGPJo2R63nLtYr57C4NwPGp5XyJarJ64aDXV9b9adq9fW7I2jBw4aLVSlDBRA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f45b90b527-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/i13pro-s.png
104.16.157.101200 OK 7.3 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/i13pro-s.png
IP 104.16.157.101:0
File type PNG image data, 200 x 236, 8-bit colormap, non-interlaced\012- data
Hash 2957d5b059f1cefecf1a2bea506d36e3
3c87cf6a0cb5fd340ab4a799d3083607dc423c6e
6b37571a9020c444cce2ca73e37966b9359d1e9f8f91135f1b2b6bc2780539c2
GET /wbiwxb/i13s21m/i13pro-s.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 7279
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:49:01 GMT
ETag: "1c6f-5df42d06e65af"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1152
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JzmQCVb5gzO7deuGkdcwaMIke4GLYzW98ol4JDM8I2zflOvnDciAQipriqte6quDN1XWtWmKaP8HkI%2FfsyMqEg2POenOIYjxBFv%2BXXeaxTMxfECYjT%2F%2FCzaMpj6UxA%2FPXzuRC9vofZ%2FERrWSEFa2R2VQoA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f45aeab4eb-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/like_user_2.jpg
104.16.157.101200 OK 1.6 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/like_user_2.jpg
IP 104.16.157.101:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 0fdf7c38b0b303cfe1d1a7f526f22fe7
865fce3860231d7aad0777434bbf8852a42b5d96
8af263791c44ddc331f9758bb8ac54a88614ad0c7e64b5148bf017098e5ee938
GET /wbiwxb/i13s21m/like_user_2.jpg HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/jpeg
Content-Length: 1621
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 11:13:25 GMT
ETag: "655-5de2db6cf525e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GXblUNjMgU6dxX%2BuBTdRit6HfDmIB0v0ijC2AssJC4ueIwkDTxwOU%2FQcvk5jPxDdir4vU6DbSfKyYTcuFHqzbO7qESmyxNKt9a1qcpbDMRZbUgDK5AY%2BHTCNdFLndypMByRlc9T0rr5aviZUyeykRQ2hsw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f45f5e1c06-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/2.jpg
104.16.157.101200 OK 1.0 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/2.jpg
IP 104.16.157.101:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 23f129560cf7cbc8131f7eea14db5393
2f927a7f5e76a6d040d105fdff43764bdaff66eb
6973c6af4ca2ddabbbd5531aa93cdc2813d9c581a63051c0e370758af2486c0c
GET /wbiwxb/i13s21m/2.jpg HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/jpeg
Content-Length: 1029
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 11:12:50 GMT
ETag: "405-5de2db4b49288"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s7buQuyp03yXPCUtOAXPIdm1vQ%2BZOYPCL1T0uISHXN2RkdnbDWFcAsdN7iHHpZmcJQ001GBEtCAwLkwkP7aMR38c9HiIwK1Fj6ZJbFV1lpLKpe6MqGQ96%2FWF1Jy%2BI%2BamfClKDnXlk7SgrfSVV1Kr4gDDlA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f46a3b0b4d-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/3.jpg
104.16.157.101200 OK 1.4 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/3.jpg
IP 104.16.157.101:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash a09a1cdf7778f3993187ff902dc97fe7
190642ca4ce88083da49e0b6cd067b95fc9fea3c
6e67bda7c04f92f669b2f4068b1cefe7691d9fbbcbfbf76fb7ac804ac9bff02e
GET /wbiwxb/i13s21m/3.jpg HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/jpeg
Content-Length: 1421
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 11:12:50 GMT
ETag: "58d-5de2db4b51370"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y46E8gdRNJiT1uLrLozZepy754GhaXNUbs8OEOv6ml00pQNnLN3W4aPCoTC1sYDD9ZSqazkz4Er5mIxKDDp0YLY4FYCO6Y9e9YJiPzr7aWqbS%2FBGO81End2PW5kuo88vROAIKTPxx4TpnQG%2B9M%2BEJSZqKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f478eab506-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/4.jpg
104.16.157.101200 OK 1.4 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/4.jpg
IP 104.16.157.101:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 386fd5a02b464da06f9bd1820d161618
9ceffb2c7529f021189aa4f2dbab6b1b83d87d22
02be5f61aceac8046100130b05ce9e6b163caa6eda96f7ef345b1a6637fc374e
GET /wbiwxb/i13s21m/4.jpg HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/jpeg
Content-Length: 1439
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 11:12:50 GMT
ETag: "59f-5de2db4b49288"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hCfnrDu%2FEZns%2FjvQxB4CKYTGhdeGJP261dinVOYB5L9uOlUs2%2BV%2FZ4LigKR%2Fapo5jvR5gEvgHxHd5P9LxVT5suuGcWGgKPy9io2faAzqkj54PMTMpDBpc96Dhvw6v0ucVXtCSyWB%2F4FzYLbaj8tuQKFQOA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f47bb3b527-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/1.jpg
104.16.157.101200 OK 1.5 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/1.jpg
IP 104.16.157.101:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash e7dca354ccb063903cebf2dd831cb525
0dabb5b759dd821d2fa0375d1d27340630a25337
43c2baf3cd3073372e17632be603ef8a92dd5e676e11f57a324bcab0dfbd4065
GET /wbiwxb/i13s21m/1.jpg HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/jpeg
Content-Length: 1528
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 11:12:50 GMT
ETag: "5f8-5de2db4b46b78"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tLoHNRH39G%2Bx8rzYjEfnju1Jus4KeT%2BLlVM4rM6P%2BOBapvhz0a%2FSG24Jww5f4erHYO8tzhUFWLuEhqdSMeWpGm1GVVxtNB5%2FP8TIZppGq8ZKyFgXpBZVxjqCEbUv%2FKonw1qWpJGbGfbcV9TyFBiInQLi5w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f47d38b503-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/clip_footer_3.png
104.16.157.101200 OK 2.5 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/clip_footer_3.png
IP 104.16.157.101:0
File type PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data
Hash e1b626392882cc25b4d891afaa68afd4
454d7abdbc2548d04feb95436ea0ab4126b4f00b
ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f
GET /wbiwxb/i13s21m/clip_footer_3.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 2460
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:48:56 GMT
ETag: "99c-5df42d0213f6a"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mjEJrK0Dn%2ForNmFxzz3%2B24EBU3sr2Tk7%2FGKQBFxb9xWlVxFXbaYFD%2FXARkIDzhkCp%2B8Hbpb%2FK%2BXqHAbTOpGGDHqfRVfs74DdJ%2BVUl%2FwQzAAi8%2FLkmKPnRCFIMcW474Y4BLHsjodmtaSj2JU45piy%2Bi8yng%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f48a4b0b4d-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/6.jpg
104.16.157.101200 OK 1.4 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/6.jpg
IP 104.16.157.101:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash b495b903b9614cbbec05ee2c0b45812f
e9eccbcefdaf7ae884f63b9917ea6450bd0a48dd
4df64eb20d3e9be6eb4b5bc140e7f9041586db66bbe5e551ec8f3e0bf0435a1b
GET /wbiwxb/i13s21m/6.jpg HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/jpeg
Content-Length: 1366
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 11:12:50 GMT
ETag: "556-5de2db4b71afa"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tud1%2BhdMn1BYBkf%2Bb2eh52d58CPqfeciUeTznl7%2FwMgC0040qDocUPkef0pThxEAvhzb%2FAztzlFZjJivghpem6%2BvHBH%2BgxN4JQSjVbo7%2FhYARrgA6ncf9yk50E9wcJ72hLNWBrP29yKoVSsD3b%2B0qWSvmw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f47b15b4eb-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/8.jpg
104.16.157.101200 OK 1.5 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/8.jpg
IP 104.16.157.101:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 7ce5a791d665a637fbb4a50151a52f3b
5f65e7b90e604926f80237502984720edd830260
16bcc12185134528b09248cfaed881a6077d79d000106ea6346af437391ff920
GET /wbiwxb/i13s21m/8.jpg HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/jpeg
Content-Length: 1467
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 11:12:50 GMT
ETag: "5bb-5de2db4c10de3"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=INDeQMY9ISzPGK%2FN6FwD1Cfr%2FYrEidBsaXmHMUfn8zeNv6KGiSZJpa7t8kdVIqOJ1eYPsBpUGGpX1ENxUKmvJ0bMU8o3NCUlhiGkYZ%2BvzrDhs5Et8APoHSbkX1l2Csm1pjz13jRWhChS3sjfasuBXWGLEg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f47f831c06-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/footer_right.png
104.16.157.101200 OK 5.0 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/footer_right.png
IP 104.16.157.101:0
File type PNG image data, 168 x 66, 8-bit colormap, non-interlaced\012- data
Hash b6815b95565d1e9238f3ebd6f74ad116
0cca9bc8234c992ca956f170439fa5e8c9d0c97e
c5d55f43a576869d9a3494000810bf654e24ac0bcf65bbca6e095c8098865cd1
GET /wbiwxb/i13s21m/footer_right.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 5023
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:48:56 GMT
ETag: "139f-5df42d02189a3"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XBv1lpYXt%2FMG4wyKutcQt6cuhwtqQziijbUaOR0C6owA4n13z42plez0VocXdk4Xv78VDrchB8IZvXCitSJhTA1lZLiXHKMWU0k6vefIgWVuFfG0HfM3gOl1rmvvcjSqskH6J75ginAAdHTbHn1Q1zlHbA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f488f6b506-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/spin_prize2.png
104.16.157.101200 OK 2.8 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/spin_prize2.png
IP 104.16.157.101:0
File type PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data
Hash f278c8d30fc51b72e0774b9ecb49214c
03b574db82b31ee5758eb5093fda8ea25d1b00d8
43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c
GET /wbiwxb/i13s21m/spin_prize2.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://o.efficientglisteningdirect.shop/wbiwxb/i13s21m/clean.css
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 2814
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:49:06 GMT
ETag: "afe-5df42d0b74631"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1150
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=No6HoJmXK1jSlHSW9Qz9EGXYetCilXB5Q%2FzKSk7ELaUUtBWuwcTjJu1rXmU%2FYHLfVs1NXJ1A4qXCyDCq9Uummdylviq6FdBFYvP1wHC3ieWbwd436rwW1poEp%2BAw7VdW7G1SxhvqrVygWfJ%2F3np%2BZH%2F49Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f51bfeb4eb-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/action_icons_20px_2x.png
104.16.157.101200 OK 1.7 kB URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/action_icons_20px_2x.png
IP 104.16.157.101:0
File type PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data
Hash b699975b5fe73b087e711a33ff24ee1e
0e33cc5c32a5e7d18440751e3946076664caaf53
4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e
GET /wbiwxb/i13s21m/action_icons_20px_2x.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://o.efficientglisteningdirect.shop/wbiwxb/i13s21m/clean.css
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 1726
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:48:54 GMT
ETag: "6be-5df42d00d1730"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1150
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hGCfs54FznJ%2BOxQzcn21Ao3Wr1up8NqSVwDLpavIbeSD6xROXnsZAEPFGkTIt8w4GdS2nFdVJ85AifqeGVu3bZ2X2pzLR9LTZvur8x%2BsESuReRodjLoyPfdyu3YtnDMC1AXSAidR%2FSpcfHem9FEvd8xpXw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f51dfeb503-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/menu_2x.png
104.16.157.101200 OK 134 B URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/menu_2x.png
IP 104.16.157.101:0
File type PNG image data, 40 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash f52e2d6d695477104d4b95055195699b
1a27830c84e12c53e47497c645c52dd538b0af9c
1328a243e666f96278e1b9dce4de847ca2afa6ea45678714c73e7f42a04cc55d
GET /wbiwxb/i13s21m/menu_2x.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://o.efficientglisteningdirect.shop/wbiwxb/i13s21m/clean.css
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 134
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:49:10 GMT
ETag: "86-5df42d0f8ac9b"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DHysMo9XrVLMX24tRFBYRf5qfGsQ%2BaWBR2en%2BX825JblYgBPschQ433OVu0J91bvi9MVZ7Z9icCOHChmGeNbsLYzaQMLFEl93J3h0XBxXrChoflSKuFlEY%2B1VPXCZa5LeGmlWLsyOerQpSwK15Wg7Iv8FA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f519dab506-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/comment_action_2x.png
104.16.157.101200 OK 641 B URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/comment_action_2x.png
IP 104.16.157.101:0
File type PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data
Hash e9b3872b3e63e19728176d45f0aa6986
b638f89d5d80c4cd65327da973c52f778e30bd55
a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5
GET /wbiwxb/i13s21m/comment_action_2x.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://o.efficientglisteningdirect.shop/wbiwxb/i13s21m/clean.css
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 641
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:48:54 GMT
ETag: "281-5df42d00bcb27"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1150
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IELQ%2Bk%2FZOZDx0zsvzHVHtikEx2j1TAharVGnN7opuXN5kZ1YMfJPhpQWUes1j4N4Ch6WJNePEtDzQQhJEsPcDQEndwBYY9hQ2XUzg4iGfuWNeGIC6stbIgOxkApfNVriuHDCsbFqLGfji9%2FgKmobC8NcxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f52fe71c06-OSL
alt-svc: h2=":443"; ma=60
o.efficientglisteningdirect.shop/wbiwxb/i13s21m/notify_2x.png
104.16.157.101200 OK 240 B URL HTTP/1.1 o.efficientglisteningdirect.shop/wbiwxb/i13s21m/notify_2x.png
IP 104.16.157.101:0
File type PNG image data, 36 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 0934ca67ac2496e77dee48c5c4f7ef87
d9359ccd28c232736d2d0c50af1161ec918d4fe6
b2459aecc95ad5f9c83b2fa52fbc52481122b68e4e73fa923e565c90d455328d
GET /wbiwxb/i13s21m/notify_2x.png HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://o.efficientglisteningdirect.shop/wbiwxb/i13s21m/clean.css
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/png
Content-Length: 240
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 05:49:11 GMT
ETag: "f0-5df42d1090ffa"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1151
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FofxmBrp%2Fg9q5GVqbhk9GYTHu6%2BIdiTyBjUw2F1xxQfdCCVs%2Bka%2FTC%2BkR1eToIBpbOOJmTejTux65f6%2FDx05nADLj2og6ntgaARNWhpgDu25Fk4pO8ISjeECKUvDQRtZMCZcRhxHK4MLQIXcP0uvXMtj%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f51c5bb527-OSL
alt-svc: h2=":443"; ma=60
gauvaiho.net/pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js
139.45.197.251200 OK 14 kB URL HTTP/1.1 gauvaiho.net/pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js
IP 139.45.197.251:0
File type C source, ASCII text, with very long lines (41091), with no line terminators
Hash 002d32199f9116c7429c84ef9d7849bb
328e4f6b8bdfb247e311b58cddab5eaa21d5b4e3
8b9b2a4d4da7ff539e51c4bb298f0587b0c14ed4158294bfa003cb8b6893d1dc
GET /pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js HTTP/1.1
Host: gauvaiho.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: application/javascript
Last-Modified: Fri, 27 Jan 2023 11:03:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63d3af98-a083"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
o.efficientglisteningdirect.shop/favicon.ico
104.16.157.101200 OK 62 B URL HTTP/1.1 o.efficientglisteningdirect.shop/favicon.ico
IP 104.16.157.101:0
File type MS Windows icon resource - 1 icon, 1x1, 24 bits/pixel\012- data
Hash 74f60f0216cc1cb10b33dbeff395f192
de23674230843f409d5a7f840d6a30343675ae66
3a5f2a1419874bc1fac0fed7484c13a962f706e8ba99f7c6dca7a979c71d77c4
GET /favicon.ico HTTP/1.1
Host: o.efficientglisteningdirect.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 12:14:46 GMT
Content-Type: image/vnd.microsoft.icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 10:33:34 GMT
ETag: W/"46-5de2d28462a14"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FUxTrX9eH51m84%2B8pcIEDeeFpx33P015kET%2FCc%2FM769yaXDl71AomwwgSyjQOg8Omdool%2Bfu%2BFlLVzbUP29kmucc9sMIykb7YJpUIVqeq2e3lRZicRBflrMbMA9uX%2FuogS9TDof63hhzwlTlGCUSliDv%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794353f5faf7b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1a28de18612dc6d723239d80d4635490
5996481a75318a71e4862f85e8442c520da2d9d6
b0026eda923518bb4d35ed004b185560b37cb2d24f5d282aa75d5c14440756ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0026EDA923518BB4D35ED004B185560B37CB2D24F5D282AA75D5C14440756CA"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 04 Feb 2023 18:14:46 GMT
Date: Sat, 04 Feb 2023 12:14:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 11:49:07 GMT
age: 1540
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
gauvaiho.net/zone?&pub=0&zone_id=4984707&is_mobile=false&domain=o.efficientglisteningdirect.shop&var=&ymid=&var_3=&dsig=&action=prerequest
139.45.197.251200 OK 0 B URL HTTP/2 gauvaiho.net/zone?&pub=0&zone_id=4984707&is_mobile=false&domain=o.efficientglisteningdirect.shop&var=&ymid=&var_3=&dsig=&action=prerequest
IP 139.45.197.251:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4984707&is_mobile=false&domain=o.efficientglisteningdirect.shop&var=&ymid=&var_3=&dsig=&action=prerequest HTTP/1.1
Host: gauvaiho.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 12:14:47 GMT
content-length: 0
x-trace-id: 4dafef107cfb0cc4e8e8e3ed559075fa
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9181
Expires: Sat, 04 Feb 2023 14:47:48 GMT
Date: Sat, 04 Feb 2023 12:14:47 GMT
Connection: keep-alive
push.services.mozilla.com/
100.20.30.105101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 100.20.30.105:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1W6dexLXb/yIXRWnyOo1fQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0aJ6j2fK/ObLUimE0wqj5pGP6XA=
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9760
Expires: Sat, 04 Feb 2023 14:57:28 GMT
Date: Sat, 04 Feb 2023 12:14:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9760
Expires: Sat, 04 Feb 2023 14:57:28 GMT
Date: Sat, 04 Feb 2023 12:14:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9760
Expires: Sat, 04 Feb 2023 14:57:28 GMT
Date: Sat, 04 Feb 2023 12:14:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9760
Expires: Sat, 04 Feb 2023 14:57:28 GMT
Date: Sat, 04 Feb 2023 12:14:48 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a517af0-06bb-4ad2-b66e-3627ca6b60a3.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a517af0-06bb-4ad2-b66e-3627ca6b60a3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 518bba9a8770e8ff15229a68be5bddc3
139f944b3f4279e640901f7a6b993f1a49b51a22
0591e73dec2190752677f06525bc993dc8c7a5aa20984a5eda64c323188e2b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a517af0-06bb-4ad2-b66e-3627ca6b60a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9743
x-amzn-requestid: b6c1caa9-72e4-476f-9c3d-4a746c410ba3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EHLJoAMF_TA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-1289ef383fbad59621eda6d0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nIp2nUVnamnoTpFwrN1L4K1dqjYvcDGuV2yFqYskkXb14k72AZsjMg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:08:41 GMT
age: 50767
etag: "139f944b3f4279e640901f7a6b993f1a49b51a22"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:04 GMT
age: 52004
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5b4e4f15da3323c73974c3f1cdb5d74
1f14971d0cf979cc34ff191849dc43d86e8ac463
5893d7e5b2fd9de92829b303c42d0c07ff32b3f6b8705b6f5b4a784315c8808e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5174
x-amzn-requestid: 35630c70-3bad-47b4-94bb-09c873632194
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EFAHIAMFQQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-317b1fbb3bee0f377697bf3d;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OD5cy75AkNMwTIvIool2nKbKgr5Jpo1Plm_X_YPr3rdPbg86_V2fdA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 50667
etag: "1f14971d0cf979cc34ff191849dc43d86e8ac463"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7101f6e43855cb76ce48271a847ffbd
8e674830a97d8ce3818132fda197db4f0289d316
e78a83a4024e238bcdec3b9c4d5c12a99f49aabd57e34952f6a4cc8ed4422f55
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9141
x-amzn-requestid: ed7db574-6bca-4f3e-8879-c3e836549339
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD8zE5lIAMF1HA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8051-4480112f11d4ced0037d1ad8;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6kDIOqhM4aVL80sF02uFu2TuGbiBE7_L_S2W7x-P46hO5YZFmuL9nQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:13:30 GMT
age: 50478
etag: "8e674830a97d8ce3818132fda197db4f0289d316"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3ac51fd6789cbe19c2d484c9022b0e39
bcba22a7b7f5dd1f59fffd1027e5d7002cecb6e9
300b5e50cb910f9f4905ee7313d98763b68f85f5874db499cc94469fb14cabfe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9500
x-amzn-requestid: 8fe94388-e8d9-4329-b73a-e9a356df76bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9QEA1IAMF3Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8054-51f954ac4bec16d1055e38f5;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FkTJ6wQ4eFYBPDyS0l5vLeWvHHiQIx-cYyFzT4ggHJ8M5Gg3dozFxQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:30:36 GMT
age: 49452
etag: "bcba22a7b7f5dd1f59fffd1027e5d7002cecb6e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: f95a2821-ae89-4ea9-93b2-43e570285df3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEC3FyboAMFe0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8078-7e2177f11d5715d4092cad2c;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dcFgY5x3Ef0J__7wGn3llTjZ9as5nX1H4HErIT3VlKfeQaQTjymW2g==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:33 GMT
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
age: 50655
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2