r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4cbb89840b57466fcbc0b31305c9dc47
c2c08a7a243a3f7972e8068c448488cac6d2519f
5f871ffd142470f132fed1c93f5f1a7fe6a5ecc3b4311d3d47555fce1d9a35f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5F871FFD142470F132FED1C93F5F1A7FE6A5ECC3B4311D3D47555FCE1D9A35F1"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3159
Expires: Sun, 18 Dec 2022 16:08:18 GMT
Date: Sun, 18 Dec 2022 15:15:39 GMT
Connection: keep-alive
uncle.webind.shop/hglgng/qmctkrsgc1394ttajqjlk/zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
200 OK 558 B URL HTTP/1.1 uncle.webind.shop/hglgng/qmctkrsgc1394ttajqjlk/zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash faf1c18d32f3e5b55e25524b7baffad7
7527c4f1c89ead9e950dbec074b32ed24ec922ef
3961d065c853c249c95ea779808999bbcfd85ae08135a74d0a4ed2b5e10b3668
Analyzer Verdict Alert fortinet Malware
GET /hglgng/qmctkrsgc1394ttajqjlk/zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RHvOuIOw1WWRrwFFpOzPUO2tnH7A09ZrXX8MXoGihYtJEBdE2soGfeA3VWNFJXZGLywOolxbfeHcVzzX0i%2BIikG%2Fx%2FWWuNXG%2BR0ed1Ndt51HIShuYr8Xag4vupqFsnyfgGeUIA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daea7be5b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 460af93786e1eaa666f135e6c3fdc634
bc8aeba36225c79718f5de73d79928fe817c5490
471f4e7ae29bcf6ba1f749c0f5d4ab446cebfac5aa80c3e19c6edf21be456eb5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "471F4E7AE29BCF6BA1F749C0F5D4AB446CEBFAC5AA80C3E19C6EDF21BE456EB5"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11910
Expires: Sun, 18 Dec 2022 18:34:09 GMT
Date: Sun, 18 Dec 2022 15:15:39 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 18 Dec 2022 14:34:18 GMT
content-type: application/json
age: 2481
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 555fc6e99ad3bf077d1c4b9b805e428d
4e800fc8e809a950288df0e94992084647762561
fac00cada519279717e2a13528cb202d292fc92ed5eb42782c41f8e7b9509eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAC00CADA519279717E2A13528CB202D292FC92ED5EB42782C41F8E7B9509EAF"
Last-Modified: Fri, 16 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9798
Expires: Sun, 18 Dec 2022 17:58:57 GMT
Date: Sun, 18 Dec 2022 15:15:39 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8I91MvRQJh14Kt8EVsGBaTWrDlPlF9wnxCEhNtAUJ630mdhvrGcx5aPSuUxNnhVBkRiFePY2w0At1p3F0525RA==
x-amz-request-id: 6WPZZQMEE0KHQ8XM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 18 Dec 2022 14:52:14 GMT
age: 1405
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 15:15:39 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 10a3a852ef62dc4d4ccbbf6ff396688b
953e40775326102f6c3fc09a18a7039239df656f
30872c631302c914fc93b789892b200beb6284a3ba6753e1ee7f909a1231f2dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-22484186-3
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-22484186-3
IP
File type ASCII text, with very long lines (1921)
Hash 5155648938d968323c576eeee984ab36
b46048909135a6e970179402cbe04b1f9c207e9f
493a1f895bb35b7ffff5e94c4cf539c21fca2621fdc1b18bc2971c89cefc29b6
GET /gtag/js?id=UA-22484186-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Dec 2022 15:15:39 GMT
expires: Sun, 18 Dec 2022 15:15:39 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Dec 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43581
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d62c4eea8ea4b9e5545fc952781c3b1d
47ca338b2d6be9d8a22c052d0838bce364463dce
75f6054477e9c699a1ee189cc77b20c5696ec306db93af0396a98b3b5b49bbc4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
uncle.webind.shop/jquery-1.11.0.min.js
200 OK 33 kB URL HTTP/1.1 uncle.webind.shop/jquery-1.11.0.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 95fe3f4dd117c33f6015e1c3d6df1d0d
d5b8856932d1ea63f51824de0bb50670d2e960bc
e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
GET /jquery-1.11.0.min.js HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/hglgng/qmctkrsgc1394ttajqjlk/zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:20 GMT
ETag: W/"6388f8d4-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dUrEn6z9E7pctwyCehG5KFc%2BV1Lic%2FVZoXNkLxm2Q4azyTpABfm7yr%2FnqAUO1J%2FvRyL19TQ%2FSH4nzH4D60V6HujIvgEBXUIXVa3Wd2g%2FXcGlDwsG8PwItjmf3Q9BX8iojw1rNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daec7de3b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
uncle.webind.shop/offer.php?id=213&sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
200 OK 352 B URL HTTP/1.1 uncle.webind.shop/offer.php?id=213&sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (318)
Hash 7d608a8239b76b9bf5675c6c4427055e
017925ef55b1165978c46f64644af829e84d8f81
6119046135dc94958b64d363e5ef8d08ba5beed64567ad113728393ef2a7191a
GET /offer.php?id=213&sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/hglgng/qmctkrsgc1394ttajqjlk/zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Gv%2FO%2FoL2eLKJXDDnULchdxbtW%2F6UpiERVmEO5PM%2BxX9Cec4ac4exzqO8XNy7BD3sGKfp1CbYl0pupSZ8YequNG52r4ENT5tlBjoYazkS9DZIAPMftFm8oJF6zGuZMydMxTEdA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daedcf54b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 18 Dec 2022 14:33:23 GMT
age: 2537
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0bc27cdcd6c42d7f8eece6c074bc452f
ff1234b58f7381f51f9082c1ef4894b1ac5700ff
672fc3b7ba7ee7a8b376c73a86a5bab00b1a1aead54c3ca64c0bff83d831348e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3773
Cache-Control: max-age=154444
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:40 GMT
Etag: "639ed82b-1d7"
Expires: Tue, 20 Dec 2022 10:09:44 GMT
Last-Modified: Sun, 18 Dec 2022 09:06:51 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
200 OK 13 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (42825)
Hash b11945d64e3bc49585fcd72c7768b2a1
261e66c7a6a1832f7301e2754b5f997df11fd723
0aa5e97e065330f57e656ee3cae7fd2f9d63b5c764f2b054eae6ead87cfab6ee
GET /clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XpuYu4ihgpdFFDc6XwqUAHS0xKPY70u6K%2FUH3RwMXGZ48VzVKMvJkpYTeMxQNnSQW1OYDCRsHVzrzrUta%2BqqvAzdCO3fFcojCLqjFL4MuRvgzFQRE6dms11YOU7pc2VK33oIyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daef18d5b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.css
200 OK 115 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.css
IP
File type ASCII text, with very long lines (60347)
Size 115 kB (114854 bytes)
Hash bf79ae58d383b0bfd5aa04fa527ae59d
76141d2acb1acbfd7c2fc2a050dde381e4b0b25d
e7966e88811b0480c1f74fb9c2453deb97ad7a1d2c3a70e75cc69c9ca6a65e2d
GET /clicks/chapter2/GX-watch_files/semantic.min.css HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: W/"6388f89b-c055e"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zcpRMTnSUWQT4UViJXsTNjj7CuPzFw%2Ff9nN6DTzXPEi50708yzNKtlZjrpdFFrFJx0MBB%2BsSWfGKV%2Fhz9SF4D5lATWYSaDK%2BRnjlWBwyiXLS%2FZFEQz2WObiiADPdpaWUBntidg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf06a67b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: F6wkgbe7R/vc5QAVb05Itw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 76aJ21IN/egoBJDm2XR6qCFynGo=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b09c5fd392d9d40a99ab4c70e59fd24e
40e39676ca8052fd8b9eab501750f0011737f507
8c2b60b0ec0a8121d5c5a8dda2ec1a57b923efe10246386262f359f6a458cdcd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
uncle.webind.shop/clicks/chapter2/GX-watch_files/obtp.js.download
200 OK 6.2 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/obtp.js.download
IP
File type ASCII text, with very long lines (6169), with no line terminators
Hash 522e4451790939ca385c10f4b474de63
23027181eea39e5fc338694c98602baaae0944a4
8bd397636ecd49c36d687ad591807ea5ee621b1e11888657827902a5003fc4bb
GET /clicks/chapter2/GX-watch_files/obtp.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 6169
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-1819"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GAeRMtbdHY9TpYtyjVqkzqXLyrOCtHwT8l%2BC2N6Hx5wPFzlW8RW%2BW%2FNF2bGDiF0ba5do7%2F9JXdGnCekGJb174qEPKCh3OMiL5TzeiVfW5OLnHSVpPs07yKTdebnCEzt3aRDWmA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf06e3db50f-OSL
alt-svc: h2=":443"; ma=60
fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin&display=swap
200 OK 920 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin&display=swap
IP
Hash b19086f012d3bb01d13607fa3eacb93a
ca1ffb582beac1db86ac8fdb2a469d51e9c5033e
205e0b7380557fe704decd99f3e699c745a5c1606db53ff4ecdd89d95b72e307
GET /css?family=Lato:400,700,400italic,700italic&subset=latin&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 Dec 2022 15:15:40 GMT
date: Sun, 18 Dec 2022 15:15:40 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
uncle.webind.shop/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
200 OK 11 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
IP
File type ASCII text, with very long lines (62929), with CRLF, LF line terminators
Hash b8bc5aa36f686ee04208c9686195edab
e020d345db7efa2dfe4ebf4b888ccdb560372b8f
0b1aa036cd4b64c7b1462f92833e4f54cb98850db23bfbf42d35b3b2ff192f4e
GET /clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: W/"6388f89b-11e86"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j78%2FixJaEdprQht9Asry3OMxyaTYEbaHmXK9hcytugn%2BsC57jYkjlf%2FPH7s18n2QRK8yEGJRo%2FDA4bay2kRZcHsexTUDiWUqFeKmUf6klkAsBpGvwSPZNMwmub22tejHIrmNyw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf06fad0b06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/gtm.js.download
200 OK 84 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/gtm.js.download
IP
File type ASCII text, with very long lines (1721)
Hash 7eb0a1bda269d3087b8bc748e696f147
3ba33c1c1c3374837f373637041bdb33e7b41d3e
f28faa623ecd340179ec27e8a8288a7f75be69f9335c15e0d28055e372009bba
GET /clicks/chapter2/GX-watch_files/gtm.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 84387
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-149a3"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EnQjlbbFX8S62M1R9gmlS%2Fdjy6G6F9h6JGN50h229aT3Omr0hHweEWfPgyFTRWuMZpw5PI2BJSZICxrpoIffFZFSJV0MoqURyxY858yxBri%2FlVSiqbIMYHu%2B%2Fwy%2BCMGlyk3ZbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf068edb4eb-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download
200 OK 2.3 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download
IP
File type ASCII text, with very long lines (2339), with no line terminators
Hash a5fd49d9f6995d297d975ff767b07693
6e62ba7c1e1b5683480f0359c5daa96f7f602ef4
74feece712f2d426ea2f9f682eec3d74f4474a31222a62de4778f2670cd2c2c7
GET /clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 2339
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-923"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NzdkxPb%2FvBdGh1bOcAMAUQQjU1Ryynn%2FG3Kca6tOWabtfyd3YJ9kP4Yimo1jUGPktXLjaPG8zybxDLmz7o0i%2FH7gLPXv06AC9KFdS1d0Pa3YnziSUcHYR38%2FHbLG6nRVyXxiPA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf24891b50f-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download
200 OK 699 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download
IP
File type ASCII text, with very long lines (699), with no line terminators
Hash 0997f48838ce432db6b37f72c8fdf1f2
c9b2dc8a68ab46b5b36c96d52ef6c6de1084c6e6
646f01731972adb62a05fbadddee4f1760499bd01e6c2162d889ba47d160b6c5
GET /clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 699
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-2bb"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lHpYDSHAmgEe1lwTtCNaNL1wQ3hGlmNlkJ6gySI3pYe6lYOGk8sz961iw3biOmsn4WqxJB%2FmIXlhD2AJwils%2Fgg9olaEyh%2BFKIsyt1l2aXXFP5bw5OAG6xtOx9A41lWf1sYlCg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf19b97b50b-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/fbevents.js.download
200 OK 129 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/fbevents.js.download
IP
File type ASCII text, with very long lines (33256)
Size 129 kB (128769 bytes)
Hash 9d939cad64375505e4dce7469a82e4ee
c0d0919210cb8dc763acb3de97a6218020caaa8d
5a91c6d3e635c0bd1551a53cf0769328132151a7732039170280d500dbcb4685
GET /clicks/chapter2/GX-watch_files/fbevents.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 128769
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-1f701"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vZR9ZySBsezHTPk2JDsm3alJQBRE1tdTz4YyFMM0nQIcVkmg8vKur6RKE74xBVz%2BplRzWfQIpnabRbU9e43vjfkNHr0HVK6xM9jNAeVTXVM%2F6AP8JcboffbqY%2FhULFzP9OpBuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf06fcdb512-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download
200 OK 593 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 593 kB (593023 bytes)
Hash 67ced67786c2faf02230249ebfca68b1
43248fe8f624ea47d7ee8bd71d47691bd3b836d1
fcde07bab3999ff73a36dfc92c42ee7d1966cebe0246e6601923410ad0ae3cbf
GET /clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 593023
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-90c7f"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=07N7H1DQASMAQ6sKPSZMdTRjSuJeeY7OLOL8uuG06uZUkBXv2KqKzZJBxPQrlWkrjiS0vvSEyQ6jIO7IZjH62OKB8WK14gde3ulV9PlD9Flmhk54rZQNgriLjqU8dUaUhZDcmw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf0dab9b4fa-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/1586104576554_realx_.jpg
200 OK 234 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/1586104576554_realx_.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 234 kB (234504 bytes)
Hash 53204f36d6c135106517cbd07e1ea300
3b9db691224b222ebe4456b5cecce91ee382cb10
7bbae81b7732bd696dbcd5cae1079f699c9f6b09b731584c55e4a98497359c30
GET /clicks/chapter2/GX-watch_files/1586104576554_realx_.jpg HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: image/jpeg
Content-Length: 234504
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-39408"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FjmKAwqBAoV5CL5jm8p1kly987XGYc%2FNGkwQwlmEdJRSKGtO%2FmN%2FQBxdCE2qPAiXNpN7ZNaP4HwZTUGsqZJo1PB0I9Ehaa6ZfY68GNwI0EwmocJRZa083H5AP95138wDRCN4cw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf53c64b512-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg
200 OK 25 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x270, components 3\012- data
Hash 5ac031f2695f2f0c0223d7e7e245f3eb
fcf0766c41f347ecac0e74310b70d78b20044dfe
f5091a260a7a625a373fda20c1dac57b734a346dcb0656a0be836f61a09b0276
GET /clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: image/jpeg
Content-Length: 24980
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-6194"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=53KE4z9IoRQ18rIhLOfFNsVC5Nc77gv7Lj7I5VwOsaLZC8sdcRdKfuPua%2Fe8Pectt6hQ9uu1UGOBCHFNtbXnFji%2FjwPGvW1SHVfzwWc4fR%2FaSE%2B%2FNz05qTLO892M9H7BiSllWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf53c55b4f9-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e22c487307aca2e6e3d5ecfc7daae99a
3fb9ea3a5166ba4dfd6e5d05139936a96bc33c2d
66fc32efbb2c29a16706b6ea40145509974f7b9dbfafc72e104232a4c4d52d69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
uncle.webind.shop/clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download
200 OK 38 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download
IP
Hash cec9a3ee7fab11cf4562b13043327ca3
0d9bd2c10d28c2063c03a5e544a0f52d77c9fbc1
0b1dd9c1120841ff6cff386c051496ff27058b63dbf6c1d8bfdfc9bf62adc6b5
GET /clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 720806
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-affa6"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dP5g7Qi9NSTmPhHdCDNWp%2FGH4tKcJ7rjg7QTyBO8WKIsNy1l%2FEffvYt2oX9WswOv9PsK8%2F9vz0f0zpu4Sr1k2Jd3J7Iru8d5vm6WwtXd7Qw%2FKEHpTD4bWBiomQnwWryftgr35Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf339d3b50f-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24408, version 1.0\012- data
Hash efee2d080d7bebdd2e0aeb2e030813a0
f8d38f9f9584e48c2e469877ebd94232265585f1
bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://uncle.webind.shop
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 21:48:25 GMT
expires: Fri, 15 Dec 2023 21:48:25 GMT
cache-control: public, max-age=31536000
age: 235636
last-modified: Tue, 26 Apr 2022 15:50:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
uncle.webind.shop/clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download
200 OK 37 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download
IP
Hash 5c3db769cc7fc152ebf6ebc7cfc53c44
110d772a19a95be17360ab2290c9e2607772ec11
d3ffbfe5e166cdb1eecab48f0071f3e01797141ea361e6b3468dbc11188bc775
GET /clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 36500
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-8e94"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G3ZsBHNQcU7WT9PtYtjgV2bUQf4zdInI%2FhAYki4DFjk%2BtqaZAm%2B%2FfCbGb81JpW6FEaMu7acEI9SdtuQjlJwT1mj6egn3ZeqSeW24g8%2FDw42niZkLEhy4iI3lNhTUB4nO%2BeWVyA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf2691b0b06-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/lato/v23/S6u_w4BMUTPHjxsI5wq_Gwft.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u_w4BMUTPHjxsI5wq_Gwft.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24448, version 1.0\012- data
Hash 865e46af816320c9f32234e8968558d0
6791e9f732fcbde0f375f84ccbc14c4ac72795a3
6c84348296ebe2e2a0830c3962eb02156419d9bc76371c2eadaf7329d827d550
GET /s/lato/v23/S6u_w4BMUTPHjxsI5wq_Gwft.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://uncle.webind.shop
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24448
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 17:19:27 GMT
expires: Wed, 13 Dec 2023 17:19:27 GMT
cache-control: public, max-age=31536000
age: 424574
last-modified: Tue, 26 Apr 2022 16:41:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
uncle.webind.shop/clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download
200 OK 741 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 741 kB (740762 bytes)
Hash f161116229f6f63b22161c5ec9a1a8fc
ce6e944ba1abcdd06a017378e2193250650b808e
1021043813945667ae55767c0a2e6a1857ec66cc7673ab97c660086474c1b79d
GET /clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 740762
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-b4d9a"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PmD2XvedQsVdeMikjtDt9wInFccQI4dw%2BG1r5oFUCA1Tuf%2FqutET%2BaTiKt4eQcexSbtsPxS0jyrNazKzFz8fgcKWyMnPIPjaLQwT9jZKVmEfvEKniB0vTgZO7g10Xg%2FQ2ygPww%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf33c7eb4eb-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/OpenSans-Bold.0062c34665a3fc0f2278.ttf
404 Not Found 131 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/OpenSans-Bold.0062c34665a3fc0f2278.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/chapter2/GX-watch_files/OpenSans-Bold.0062c34665a3fc0f2278.ttf HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lZX7P7LNC%2FkOaAhK49DMYi23hMvF10adLI8ph1%2FY5daGdseyd%2F1792Tq0gK47fEBmjurQQfrjh%2Ff5ra0%2FapvUmSRHIkINygRQJGU38qba68VH9oTlOWhjWlAoO7sYQ3tWZ%2FVTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf63d7ab512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff2
404 Not Found 162 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff2 HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZEOD4K9syJsg7s59EK7B9CyYeS6zCTMgm%2BGJUTszMOJuJ%2Ba6D6xh%2FAJXxBG42ikOGaxyGg%2F6ZDJkkPFI7LXm5GJrIe8I4L71ieR1Gu66gpGptEpi9Dp8%2FebATAnPsaVx5HWpnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf6f904b4eb-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff2
404 Not Found 162 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff2 HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xSzxPMM%2BHoj4I4qkhUsCSKuAmSYagnNEd%2Fi018M%2FPl6L04TeVQb8cZIX4kJSeo4p6objzjMgRE%2BedHMOqwfFkVUJATRc9lFFt9%2BoqKCQoIO8tmIi3ZsxfiV2I0ReJtCtirWMjA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf71946b4fa-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.js.download
200 OK 346 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.js.download
IP
File type ASCII text, with very long lines (65324)
Size 346 kB (346199 bytes)
Hash 132bab8897a9ced6fba8df024ff44c61
5389aebace491d696e63b2747da38441e992de44
ddb165eba6b445a6c460fc57ea5f15de11383b6b75bf9259eb35ad34d442b124
GET /clicks/chapter2/GX-watch_files/semantic.min.js.download HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:40 GMT
Content-Type: application/octet-stream
Content-Length: 346199
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-54857"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vFr3U1I7WOX%2FOAhB1AqdkPbPRFCyD1qyHYs12sglNnR7OoJVu0e8l51AIM%2Bqgjml17s3UXz9MhjYvxotD7S7hThsGCQXLbxmzaL5E1yzK6E9NRCzUPyuEpOfiXDp8g7tWyPfog%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8daf37de9b50b-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf
404 Not Found 131 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w7kS1cOYI3v3XGYmametqPT3gTFnpWkyI9grhILEiatcWIQyCtYGv%2BWu4tWMvzQfmAjHyF2%2F16k1rttPHL9xESrEN8D2wEU31nD1Ho94RFgRzlxNs6o45fxbnuIPqaG5md6E8w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf64d8fb4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/1586102542256_features__.jpg
200 OK 103 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/1586102542256_features__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 103 kB (103271 bytes)
Hash 0309841be9f6c93b5163a6ab2cb19f2a
3abb34179b969dbabdb120d51ba02ac5151b1de7
bebc224b22cec1d226915bd2118a0fc9a53d50a9f369920b30ac0eb6495a0538
GET /clicks/chapter2/GX-watch_files/1586102542256_features__.jpg HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: image/jpeg
Content-Length: 103271
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-19367"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=csyT0L7dyIt5E7oge%2FZlaI5vdYVOJf8MhnaWcb2mzmgCVLYHhXFzsXzjz9NnDmTkwl%2BWK6HXpmusDv8Zsyt8cjqAqZN0g1dnrJU6Gsaf41bZwXIcd6EhGHJrUuCMIi9NzZ9Bvg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf7ea23b4eb-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff
404 Not Found 162 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lRFm9VEFj1lUfHNuPsG6J3cs9txJQvNQNbJscQkx%2BCCTxa9EUQArxzP0ql7qEQ%2BRD6bJ0Qh0t7h721%2FUPPzj0QIeJDRdvu2PL6fW715G1E9iqqgpkTJKvcFOVvmARsNI%2B%2FjPOg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf7fa10b4fa-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff
404 Not Found 162 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FWtr2lPp8wY84WrCltaVan6MnRquzq8negEqopDA3jDyhu%2FBWwCTaR4NUQk%2Bu%2BxkGu%2B16gIa%2F4dxbchou7Ty%2FFXLdSSJTwK1KEIA3bk4KcMbWYm944RQbOYAwtyxfgbRb1wfvg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf80c39b50b-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/1586101192223_laser.jpg
200 OK 50 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/1586101192223_laser.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash fca31471671ea05f0f7162fa96bcad2a
451be53621ba63467a0203c532010653c6cc0618
a50afa03f5efe4300e805950def99f32a26b5c01f81ba6fbe552718a21bb1ecd
GET /clicks/chapter2/GX-watch_files/1586101192223_laser.jpg HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: image/jpeg
Content-Length: 49717
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-c235"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qMrGteoaScIgd4T5UsjQ8fq748FOiKkdA%2FbEivYQsqb6%2FYSGhBH6l5rAfwqgehGaVnc6FXpMrNDodsdWyxl9FWJqhgP7OOQ%2Fw9nDt6Ed269ktnx6apUho46BH2DfiEUalNN3yA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf71e12b515-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/1586103483138_review__.jpg
200 OK 82 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/1586103483138_review__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash 277d28a5ee15b503ba507791bc9d0e60
a7279b9889c6e1f13c2aaecd03bc6960ec54a1bb
712eebff95f07402bc0884e094e06bbcd538881832ef6936cf566a86942e5dad
GET /clicks/chapter2/GX-watch_files/1586103483138_review__.jpg HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: image/jpeg
Content-Length: 82345
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-141a9"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=honb6wYFmlICg0diJGSHnglNwhv0pOCrLfLcoi4LM%2BLD95sUXpiQjccxTEPrSlaBl21aeKanJR3xFN7%2BzfU6Moiyx1itq9AkeovbdYROjYsgFQD00KODrSkKGKcPMzI%2FdMMu%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf8eb60b4eb-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.ttf
404 Not Found 131 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.ttf HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FEbJgYN5uaK2WGHUM7%2Bdq0FOrV%2BlkFODV3sj7wLWK7ENNxggHuQyrUzEqoHjgW65m76IgSOyNLCw7ce1Ma%2Bc9FMUr8wKVt5uHlX9%2BIXHtvl4%2FJuiTY9k6rZmOvR5Vjq34EaEYA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf8eb0bb4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/1586102937853_review__.jpg
200 OK 111 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/1586102937853_review__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 111 kB (111187 bytes)
Hash b559717db701371ec085ad351c4c5baf
de55a086bc86879864832d6038034aa9c131ffce
dc06f10b5152b28f2f8a1638e67b18025f22091259673cde91ce4921bd6b3bb3
GET /clicks/chapter2/GX-watch_files/1586102937853_review__.jpg HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: image/jpeg
Content-Length: 111187
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-1b253"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iwuSxBLzgsQVaW1cktk%2BIHoFrVo2ogntNjRZNkFro9xs4jQBbYNQMJxM5oz73riBdCVz9fj3Mq%2BN%2BtYbxW3Y5hKULpvpvxf%2B4MzW5PKyaznjlH0G4ws1C6euYuduXFYtVVOyFg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf81fc7b4f9-OSL
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.ttf
404 Not Found 131 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.ttf HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vDy88ySoJk%2FUpyNypaxzN4tn61GA6N%2BKSZC1fXqPTSurYu4IngqMr8OBVcT9U9LWpEXpzCXYvn7ph7tv0IuDhY7KlCvEJ9S6fGf5740Pw48xNmSu6ihPivBfLUIJW%2FFNX7%2BZ1A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf91dc9b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
uncle.webind.shop/clicks/chapter2/GX-watch_files/1586103152860_review__.jpg
200 OK 58 kB URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/1586103152860_review__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash a5724ec80fd0ba3912854045e0a5dca6
1f1bdb6a41f67feb941c5d2824ea354c5685011d
d476034f617682becd5ab468c20d5f713578c0b70ee30ece4e5b4978c8e2e541
GET /clicks/chapter2/GX-watch_files/1586103152860_review__.jpg HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: image/jpeg
Content-Length: 58359
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-e3f7"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oM5f0DiGZ%2Fa68lRmG4Efe7K2Xf9CTGHNaowKK7ttwWLNnZ6bEq1KjV7ZlhKTSU4NtvBS5Vrhx%2FW70K6GEB4rkeeSHUIoJijaw%2FK0Fez5%2Fj%2Fuw6T2h5MLzdneVIZFeh52B9elAw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf82f99b512-OSL
alt-svc: h2=":443"; ma=60
amplify.outbrain.com/cp/obtp.js
200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (16574), with no line terminators
Hash 5cdda5ed80a4ee13f700ae502f7cd4ec
0e6aa932abf3c56561a686aa3e8d069aaa3ca228
d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sun, 18 Dec 2022 15:35:41 GMT
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Length: 5269
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 496d96f69203ab6ad46a661482df3c81
1e09de48fbd4df599eab45d9339ebf6cee9825d7
b43e2510e05b3ca9adfc47f8526c71c732b3f530bd1ecec189a21b777f131498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3144
Cache-Control: max-age=87598
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:41 GMT
Etag: "639dd583-1d7"
Expires: Mon, 19 Dec 2022 15:35:39 GMT
Last-Modified: Sat, 17 Dec 2022 14:43:15 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 18 Dec 2022 14:41:08 GMT
expires: Sun, 18 Dec 2022 16:41:08 GMT
cache-control: public, max-age=7200
age: 2073
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 8b26cd4609e2025e51e90573a0fbd6f7
efc2006ae5297ad5ae5e064188b9fba73f6b868f
e288b6a1e220f5fb781cfbb0b739b36c6acfdceccff8f0278fc151c241b0b50b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: Ak3dlDpkEAhCXZNmW+HcczlMuSqyJ4TFfXqawdGyyalm9Qa9MNZtHj43r8f4cStO5EjCYopW6RguTcKU0SJUJA==
priority: u=3,i
content-length: 27298
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 15:15:41 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 496d96f69203ab6ad46a661482df3c81
1e09de48fbd4df599eab45d9339ebf6cee9825d7
b43e2510e05b3ca9adfc47f8526c71c732b3f530bd1ecec189a21b777f131498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3144
Cache-Control: max-age=87598
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:41 GMT
Etag: "639dd583-1d7"
Expires: Mon, 19 Dec 2022 15:35:39 GMT
Last-Modified: Sat, 17 Dec 2022 14:43:15 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 74619c8a7d32d46fc91cc86f793f107c
3f2b1390ef4f7cd385f513d57297fa482f7dd43c
6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4649
Expires: Sun, 18 Dec 2022 16:33:10 GMT
Date: Sun, 18 Dec 2022 15:15:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 74619c8a7d32d46fc91cc86f793f107c
3f2b1390ef4f7cd385f513d57297fa482f7dd43c
6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4649
Expires: Sun, 18 Dec 2022 16:33:10 GMT
Date: Sun, 18 Dec 2022 15:15:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 74619c8a7d32d46fc91cc86f793f107c
3f2b1390ef4f7cd385f513d57297fa482f7dd43c
6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4649
Expires: Sun, 18 Dec 2022 16:33:10 GMT
Date: Sun, 18 Dec 2022 15:15:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 74619c8a7d32d46fc91cc86f793f107c
3f2b1390ef4f7cd385f513d57297fa482f7dd43c
6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4649
Expires: Sun, 18 Dec 2022 16:33:10 GMT
Date: Sun, 18 Dec 2022 15:15:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6b04bcc-ed1e-40f8-81f9-587f3470d5fe.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6b04bcc-ed1e-40f8-81f9-587f3470d5fe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 578392bee48563d778885698790a124b
597892da925c3a363878e81ff02032a316303512
d30fe2470e1f63c5249fd42d7cd804bbf326cf9a703c61e31b5322ebdb26fca6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6b04bcc-ed1e-40f8-81f9-587f3470d5fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9925
x-amzn-requestid: 15eb2112-b947-458a-8544-51bac721773d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2k9HNjIAMFTTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e37b9-7c5b94866d266af252f133b3;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:42:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0nlTTVMgZIa6HUmL4bx0L-menIA1szAYPKbL-2p3jcX9XDGOAHL5eg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:51:24 GMT
etag: "597892da925c3a363878e81ff02032a316303512"
content-type: image/jpeg
age: 62657
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bfd0e913579b4ff2f511223d70cb01fb
497e0ffef816e100e6ddc221ec17d5f389c1142a
bee68ae1a938a5111a32dab4ec4f6964994e6c39143eac9ab94d6c5e29999372
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Dg3c2lWr1FbFUalH5QB05VrQIkpt3LNuUM-VxJZiaXy3nJu-cfd5jg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:39:05 GMT
age: 63396
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F674a9d4b-a924-4e51-a3c5-bb301e0b7ed5.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F674a9d4b-a924-4e51-a3c5-bb301e0b7ed5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 97c6ae61df47375ed2a71e6551fa0848
dd39c349fb102a382c860f7094643aec6887e238
cab3f3183edba50cf856000c247e625d31c136c3ff0e552341db8a2fc5bc681c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F674a9d4b-a924-4e51-a3c5-bb301e0b7ed5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9611
x-amzn-requestid: 28a9e04c-352d-4492-aea9-84d0c1d6a13f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT11TEGhIAMF7CQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3688-4b8d904e0c57d3344826e057;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sbJw3KaUMn12iNrtG5XiNy3PcmiRsNE_idCcqUndgzGFq1yNptUvQA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:39:05 GMT
age: 63396
etag: "dd39c349fb102a382c860f7094643aec6887e238"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12c4c2232b6d09e9085f0214b3260c1e
a24f8e949a2f2a973fe2dd5af994cd970d37f13a
000475ed7d0aab9a7dab3e25f0a29f82552739fea99f98cbf5131282d0db7d63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10670
x-amzn-requestid: d72e1904-caf4-4c72-a811-d1bde023f4b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT11JGCsIAMFRDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3687-7789040d71253d00378f9162;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NWh-ecaQXJITj6VyK4qutXz95L557E8kCDxs-fNBRmkjUk_ZG0Oygg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:39:05 GMT
age: 63396
etag: "a24f8e949a2f2a973fe2dd5af994cd970d37f13a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ada04738696f861648635c9ba98841e4
ce644cd4349d88aa7c24b2503b0b18b444061639
e5cee777efbf1d8a0f95f6cce71199e5f016a91f90cf0afe38bc86654b9d730d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8696
x-amzn-requestid: c897aeed-a082-46a1-965f-39e8c763cb05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10ZH3jIAMF0gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-548ac80840737a20743980f5;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xFbmIbrDz7MnhaF8tqHeTDzjrwbsP7SbmYb_OLLWZPb7poAmecfDew==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:39:05 GMT
age: 63396
etag: "ce644cd4349d88aa7c24b2503b0b18b444061639"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ed374d0c34e8b2e15f08a6479a4f45e7
5db9e59699048998f0685e940640eae19ef11c8e
9933854830be796a87cfe44b6b8336294e2d3dbbe3205f267720aca6968c3a21
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12125
x-amzn-requestid: e44faa15-1dfd-4bc0-bdfb-307c3de2755d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2QPFZAIAMFf5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3734-33d636210a1e24742ee71187;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:40:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JHDfcd35b-bHZm6oayBIN5NDt6ZeGygBfvu7IKU18wFiLHMGEPQPkQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 22:02:19 GMT
etag: "5db9e59699048998f0685e940640eae19ef11c8e"
content-type: image/jpeg
age: 62002
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 654c37d36b41025c7d8413ddd0d6fed0
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=http%3A%2F%2Funcle.webind.shop%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D1001311%26h%3DzEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q%2F-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA&optOut=false&bust=09799897337024407&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=http%3A%2F%2Funcle.webind.shop%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D1001311%26h%3DzEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q%2F-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA&optOut=false&bust=09799897337024407&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=http%3A%2F%2Funcle.webind.shop%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D1001311%26h%3DzEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q%2F-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA&optOut=false&bust=09799897337024407&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: ed68205d36d3841753910f717ab0d6cd
content-encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c76e2d1033fe19d491bcdb4e24faaeeb
9b3da75ba4ebf950d17ee9178c64c46afc363047
20590ac857bae294c81ad22c37bb5ec0aca36ad35ae4aa4ece7a5e5ea47ded63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=1339435748.1671376542&jid=1035320109&gjid=1608603581&_gid=2084440312.1671376542&_u=YEBAAUAAAAAAACAAI~&z=214731373
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=1339435748.1671376542&jid=1035320109&gjid=1608603581&_gid=2084440312.1671376542&_u=YEBAAUAAAAAAACAAI~&z=214731373
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=1339435748.1671376542&jid=1035320109&gjid=1608603581&_gid=2084440312.1671376542&_u=YEBAAUAAAAAAACAAI~&z=214731373 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://uncle.webind.shop
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://uncle.webind.shop
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 18 Dec 2022 15:15:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-126905093-1&cid=1339435748.1671376542&jid=1188171273&gjid=879967586&_gid=2084440312.1671376542&_u=YEDAAUABAAAAACAAI~&z=1883321111
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-126905093-1&cid=1339435748.1671376542&jid=1188171273&gjid=879967586&_gid=2084440312.1671376542&_u=YEDAAUABAAAAACAAI~&z=1883321111
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-126905093-1&cid=1339435748.1671376542&jid=1188171273&gjid=879967586&_gid=2084440312.1671376542&_u=YEDAAUABAAAAACAAI~&z=1883321111 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://uncle.webind.shop
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://uncle.webind.shop
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 18 Dec 2022 15:15:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2517737108351885&ev=PageView&dl=http%3A%2F%2Funcle.webind.shop%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D1001311%26h%3DzEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q%2F-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA&rl=&if=false&ts=1671376542038&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=30&fbp=fb.1.1671376542037.710023578&it=1671376541873&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=2517737108351885&ev=PageView&dl=http%3A%2F%2Funcle.webind.shop%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D1001311%26h%3DzEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q%2F-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA&rl=&if=false&ts=1671376542038&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=30&fbp=fb.1.1671376542037.710023578&it=1671376541873&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=2517737108351885&ev=PageView&dl=http%3A%2F%2Funcle.webind.shop%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D1001311%26h%3DzEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q%2F-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA&rl=&if=false&ts=1671376542038&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=30&fbp=fb.1.1671376542037.710023578&it=1671376541873&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 18 Dec 2022 15:15:42 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2517737108351885&ev=SmartWatch&dl=http%3A%2F%2Funcle.webind.shop%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D1001311%26h%3DzEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q%2F-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA&rl=&if=false&ts=1671376542041&sw=1280&sh=1024&v=2.9.90&r=stable&ec=1&o=30&fbp=fb.1.1671376542037.710023578&it=1671376541873&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=2517737108351885&ev=SmartWatch&dl=http%3A%2F%2Funcle.webind.shop%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D1001311%26h%3DzEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q%2F-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA&rl=&if=false&ts=1671376542041&sw=1280&sh=1024&v=2.9.90&r=stable&ec=1&o=30&fbp=fb.1.1671376542037.710023578&it=1671376541873&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=2517737108351885&ev=SmartWatch&dl=http%3A%2F%2Funcle.webind.shop%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D1001311%26h%3DzEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q%2F-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA&rl=&if=false&ts=1671376542041&sw=1280&sh=1024&v=2.9.90&r=stable&ec=1&o=30&fbp=fb.1.1671376542037.710023578&it=1671376541873&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 18 Dec 2022 15:15:42 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 953635cff82596ecfcbd7ff83474031a
5ea2fa051d49d203df6582bc273639a90348f8d2
bb63f27f12c917fccddd13680972fc6e12a8e0e4dcb9b9340f7f911c8b1db9ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0973dd05c36d5b21a858d6a6bec71334
e5bc1af376e6cd71fe3be45b393ceb1f61434891
e46922306d68a94ce397d96c12c5ddfd0341e139369cab988a6c57b57a9bd0ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f3dbc33499e42ecb967c87f0df23a85
96a87c596ae880eb482b0e8a5fdb6e09bb728895
aee03631139a47dfbb4dbbfd4257d10afc3b814b5f70366759bdff153e9e2bd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1339435748.1671376542&jid=1035320109&_u=YEBAAUAAAAAAACAAI~&z=319495936
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1339435748.1671376542&jid=1035320109&_u=YEBAAUAAAAAAACAAI~&z=319495936
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1339435748.1671376542&jid=1035320109&_u=YEBAAUAAAAAAACAAI~&z=319495936 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Dec 2022 15:15:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1339435748.1671376542&jid=1035320109&_u=YEBAAUAAAAAAACAAI~&z=319495936
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1339435748.1671376542&jid=1035320109&_u=YEBAAUAAAAAAACAAI~&z=319495936
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1339435748.1671376542&jid=1035320109&_u=YEBAAUAAAAAAACAAI~&z=319495936 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://uncle.webind.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Dec 2022 15:15:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 157b62091fad279063f540564a4c72e6
9db33b844db31eed03695c97daf4c84a4d7d265f
92904432175c023613dea4d660d2c9098e00b7f3b628c8519bf5b404cad450a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f3dbc33499e42ecb967c87f0df23a85
96a87c596ae880eb482b0e8a5fdb6e09bb728895
aee03631139a47dfbb4dbbfd4257d10afc3b814b5f70366759bdff153e9e2bd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
uncle.webind.shop/clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg
200 OK 0 B URL HTTP/1.1 uncle.webind.shop/clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg
IP
GET /clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg HTTP/1.1
Host: uncle.webind.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://uncle.webind.shop/clicks/chapter2/GX-watch.php?sid=1001311&h=zEVFfABiFaF-QVoR_h3KqIJDNB9aDnmDVbta3M_4V2Q/-dW-mW1MXOiUULh9YXA5ijcDQcFlOwChDp5lhYyYWVnszi0BOTT2VdH_rinW2LQqNORA8SR5Mv91QbM5QLMU0A2BEOv_rsqswHbEns4peq97NrypKmC60A5THxG3V2nKTfZfuCZVBJzr5YQXWgvFEA
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 15:15:41 GMT
Content-Type: image/jpeg
Content-Length: 130041
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:55:23 GMT
ETag: "6388f89b-1fbf9"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yXB3JlaJF%2B%2BwbbGsogAzZIkyiLvxJjsE%2Fa%2FZZZJqtIu7e5woZaztn4eqacvG9dC2ruDAuYBSmlDk2ft4OlqnWC85cKv2W5u%2FspJu4tILyTYddXeLnorJyHn3luOAvmwc7gY4tw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8daf53f9fb4fa-OSL
alt-svc: h2=":443"; ma=60
104.21.72.10
142.250.74.163
23.36.77.32
93.184.220.29
31.13.72.36
0.0.0.0